Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: K48Cgteag6jrtPo2mNRwyqTZ200WRTT2g4hHPKbmrNY=
Subject key identifier: 12:29:40:9D:BD:80:7C:C5:8D:58:86:79:70:D0:ED:9A:A3:3C:79:B9
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 01A174DDAAB7B027277A22B6992A76233E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 0C38
Signing time: Sun 25 Oct 2026 21:00:46 +0000
Manifest this update: Sun 25 Oct 2026 21:00:46 +0000
Manifest next update: Mon 26 Oct 2026 21:00:46 +0000
Files and hashes: 1: 4kNIwYTUrVA18oIc_9jtqMOd7CI.roa (hash: L+g00yM7LCta/KmSbttT3iWTPXIIbIasMm1ZRHqbtYg=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: 77C1rVlNRnBzrN1FhVEcMwfF02wLMoTo735bvTC0nmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:aa:b7:b0:27:27:7a:22:b6:99:2a:76:23:3e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Oct 25 21:00:46 2026 GMT
Not After : Oct 26 21:00:46 2026 GMT
Subject: CN=1229409dbd807cc58d58867970d0ed9aa33c79b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:bf:24:2a:0a:22:99:1c:94:b7:a1:9a:23:
09:39:2d:5e:82:ba:2d:66:1d:1a:d7:d4:2a:d1:d8:
c2:bf:cf:b8:83:90:38:d7:25:05:e3:a4:ec:21:ae:
13:61:80:01:d1:d3:cc:b4:62:55:5f:1f:88:ca:3f:
3a:1c:4f:de:36:34:15:40:b8:61:5b:e2:53:19:80:
36:ae:3f:1c:41:ee:2c:8a:4e:83:c6:62:61:81:48:
75:b6:38:3e:55:94:21:d1:ae:36:ab:3d:1d:a2:7c:
f9:ad:9a:00:9c:88:44:22:93:d1:2e:42:20:25:0d:
62:9d:34:bd:dd:5d:4f:03:db:fa:cc:2d:23:12:d5:
59:cc:d0:31:62:a6:70:50:d3:3b:99:97:fa:c4:a1:
3d:58:83:81:83:d9:2c:d2:79:54:ca:88:3f:f4:c0:
e6:27:85:e6:46:a6:5e:d3:45:d3:aa:44:b9:ff:c4:
f5:d9:26:ea:79:35:29:f1:08:3b:d7:1a:1a:0f:7a:
d3:b6:92:db:50:fe:a3:e5:f9:44:45:a8:ae:57:de:
23:fe:cc:87:98:29:00:f2:6e:21:42:11:1b:ff:83:
f4:93:76:68:1e:3e:05:30:bf:af:b0:57:06:52:a1:
84:55:ff:18:c3:4b:80:ab:d3:15:71:11:32:d6:1f:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:29:40:9D:BD:80:7C:C5:8D:58:86:79:70:D0:ED:9A:A3:3C:79:B9
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e5:b9:37:ce:24:0f:8e:28:c4:ea:9c:d6:ca:fa:14:92:d5:
bd:94:c3:82:79:58:76:bc:5a:f3:9e:c9:e8:23:c1:ad:ba:4c:
47:12:d5:8e:42:da:52:96:39:fa:8e:3a:e1:1a:3e:56:9a:aa:
70:12:6c:2a:9f:da:3f:4c:40:93:30:44:79:6a:3e:b2:06:eb:
fd:a4:d6:3f:34:3e:45:47:6e:48:02:1f:19:8d:2f:80:f3:c5:
77:0c:dc:1b:70:53:90:4e:81:27:a4:83:fb:af:58:2d:63:14:
0f:ad:ed:6a:fe:51:98:b5:67:7b:8b:07:24:a0:38:61:ff:2d:
0d:4f:df:a1:8d:8a:a1:71:cc:aa:dd:09:df:ba:f7:b8:9a:43:
97:e9:43:50:0a:92:44:04:9d:81:e7:82:b8:a2:3e:f8:f9:51:
4a:35:b6:d8:64:fc:44:9a:fc:c3:18:33:d2:ec:85:d4:a7:4e:
2b:5d:bd:ae:c8:ba:22:85:74:a6:a8:6f:f0:77:ba:e6:3a:72:
b3:2b:dd:de:1b:a4:cd:f2:64:7a:2f:96:59:a0:b8:75:a2:b4:
4e:ea:db:02:a4:11:0f:91:05:11:94:f7:b0:87:ea:b3:18:81:
c4:09:d7:09:d2:5b:f1:a0:1f:c3:90:fe:d2:d6:f6:e6:2e:6a:
f6:2c:3a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:48:31 2026 by rpki-client