Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: 53++TYzm+Sn7upQ9hIUSZGTOhx9RG/11cU5C2Lah4Fk=
Subject key identifier: 56:1D:BF:52:65:E3:E9:AA:63:60:7B:CB:4B:90:05:1A:58:FE:5F:38
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 01A123F873B57FF7151383303A488D9F8A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 1A28
Signing time: Sat 10 Oct 2026 04:00:47 +0000
Manifest this update: Sat 10 Oct 2026 04:00:47 +0000
Manifest next update: Sun 11 Oct 2026 04:00:47 +0000
Files and hashes: 1: f8pXdTunsFienw12OWOwkjd9_Sg.roa (hash: D84B6IFhxTwUljKKeuMD7kN/I53xCeCr1djjSkG38Ek=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: NQZpMivtnLPXwMH/4yyDoQms3J1/2N7Jz7FE4+Mzh7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:f8:73:b5:7f:f7:15:13:83:30:3a:48:8d:9f:8a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Oct 10 04:00:47 2026 GMT
Not After : Oct 11 04:00:47 2026 GMT
Subject: CN=561dbf5265e3e9aa63607bcb4b90051a58fe5f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:e3:4c:a0:99:2f:20:6b:8a:92:c3:80:6a:
14:bd:4d:0d:8f:55:b0:3c:2e:7d:a0:00:66:02:c4:
0a:14:c4:9a:87:04:83:09:f2:c0:da:f3:47:aa:b5:
0a:f7:82:fb:66:99:62:83:44:71:9d:73:bf:3d:ff:
88:4d:be:03:a0:d7:24:3e:56:63:7c:4b:4b:32:15:
29:78:8d:71:25:14:20:b9:16:07:0d:93:dc:2b:7b:
2e:c8:d6:e3:73:d3:58:95:8c:6c:07:78:6f:38:03:
06:09:c6:21:8f:2c:32:e5:8c:98:99:c9:c1:83:b3:
8e:9c:59:cd:24:ce:61:42:4e:0d:1a:66:d2:74:66:
60:41:2f:9c:d2:fd:fd:02:df:eb:75:8d:cd:39:f6:
6e:dd:8d:6e:7d:f6:f4:4d:08:bb:f4:b2:0d:50:c3:
85:1a:39:f3:2e:22:18:bc:a7:78:9c:5f:95:2d:da:
7d:a5:34:7f:fe:dd:a9:b7:ad:2f:94:91:d9:1b:c0:
ab:12:36:b8:69:fc:f2:cb:ad:52:25:4a:30:34:7c:
20:9b:bf:a2:c6:05:13:da:cf:13:ef:a1:31:fc:98:
ba:0f:ef:8a:d2:fe:95:75:3a:55:5f:4a:c8:51:9b:
de:dc:67:5e:c3:ba:b8:5a:3f:90:52:7e:4c:7d:a5:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1D:BF:52:65:E3:E9:AA:63:60:7B:CB:4B:90:05:1A:58:FE:5F:38
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2a:05:53:99:41:01:99:a4:7e:24:c4:74:73:ff:79:b9:07:
4d:02:e7:67:67:4e:da:45:8e:7e:23:b6:8c:6f:3e:79:3c:9d:
2f:ec:b1:53:f7:6e:fb:01:33:47:08:9f:fc:d3:9b:cb:1e:22:
f2:70:4e:ef:67:d2:75:96:44:10:5e:07:7e:6c:01:47:f0:74:
51:12:63:10:46:bc:a8:91:f8:75:d9:36:6f:e7:b4:65:b9:34:
94:73:a3:c2:87:b3:ea:ba:c4:1b:a4:3a:c6:ff:0c:b3:16:89:
71:f7:31:f7:91:7e:ba:95:e8:12:0c:38:3f:60:12:eb:0f:2a:
2d:a2:c4:95:28:e2:a6:3a:de:1a:ff:04:3b:48:e2:c7:0c:9a:
2f:b1:3f:9d:26:75:7e:2d:31:69:5e:09:80:87:71:39:58:1e:
7e:2e:ea:b2:94:af:a6:b8:3a:14:2b:0d:8f:c7:02:71:ec:6c:
7e:c2:b2:93:05:3f:5e:c5:a6:24:73:00:d6:27:80:11:0a:99:
be:fb:9c:ac:34:e4:0f:2c:7e:2d:1a:ed:8e:df:4a:71:d2:db:
ad:36:ec:d5:6b:ab:51:fc:3a:69:48:68:f9:50:62:e6:87:6d:
4c:dc:7c:90:14:fc:11:f5:39:8c:19:e5:3f:58:0c:ef:0a:5b:
3c:20:2f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:38:54 2026 by rpki-client