Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier: Sn0GmqfpsJa/xdQ0PNbFYNaxWc7TPyzzHy1nmg6kLFA=
Subject key identifier: FE:4F:0E:25:A5:C5:0E:7F:84:2E:AB:A4:F6:D1:41:17:79:7D:DA:60
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 01A1841AA7BFC066D626A56A88A21DD24A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number: 13A3
Signing time: Wed 28 Oct 2026 20:01:41 +0000
Manifest this update: Wed 28 Oct 2026 20:01:41 +0000
Manifest next update: Thu 29 Oct 2026 20:01:41 +0000
Files and hashes: 1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: TDnjxME7yyxH5vJH7dgZEf2QqomQHHpuaQIi59jjW6I=)
3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:a7:bf:c0:66:d6:26:a5:6a:88:a2:1d:d2:4a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Oct 28 20:01:41 2026 GMT
Not After : Oct 29 20:01:41 2026 GMT
Subject: CN=fe4f0e25a5c50e7f842eaba4f6d14117797dda60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:8f:87:67:c8:19:23:07:ca:07:15:46:f0:
fb:5f:95:fa:29:38:15:7b:13:1b:13:91:cd:ee:f2:
58:18:c8:03:e8:db:c2:5b:38:e8:c7:85:40:0c:91:
88:08:bb:ac:8c:1d:a1:23:2a:bd:06:65:f9:c9:94:
5e:92:55:22:96:c7:47:23:e9:af:f3:af:a0:79:a7:
26:dd:fa:66:1d:fc:8f:a6:3a:90:e8:37:5f:6b:be:
08:12:79:49:a3:c3:d2:dc:1a:d6:d3:29:95:6d:93:
78:84:db:d2:f8:5d:9d:4f:cd:d7:ba:44:88:2a:5a:
97:fd:b0:29:dd:8f:4a:7b:89:2c:e1:7c:08:4a:d1:
cf:4d:8b:02:d6:c0:a6:54:2b:41:ea:ed:b9:7d:cd:
15:74:24:43:72:54:6d:ce:5b:5e:d1:0c:b5:70:d5:
99:85:3d:cc:68:62:b5:08:53:3d:72:f4:ec:27:06:
bd:f0:bc:c2:85:b2:87:b7:b3:e9:99:be:ba:16:93:
e4:7a:bd:4a:8c:b2:37:3b:04:f8:32:fd:ec:a4:2a:
74:1b:3b:72:04:67:dd:0a:ed:75:dd:ff:2e:17:df:
28:a1:bf:33:83:4e:91:d0:2e:fa:d1:a1:5c:d7:55:
72:82:ea:fb:4f:9c:50:e3:0b:76:02:23:87:2f:4d:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:0E:25:A5:C5:0E:7F:84:2E:AB:A4:F6:D1:41:17:79:7D:DA:60
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0a:fc:50:a4:16:26:13:45:c0:6d:81:3d:c4:97:68:48:aa:
ad:82:2d:14:35:e6:de:f6:56:6d:6f:3e:a8:a8:22:6f:1f:89:
02:59:89:ec:5d:3f:97:de:b2:a4:93:24:fd:7f:3f:65:a5:02:
ae:76:53:bb:00:0e:c8:43:86:01:af:d1:62:11:91:7d:83:17:
48:09:cf:4b:d1:8f:28:66:d3:b9:05:b6:1f:19:51:c0:5c:64:
15:0f:bb:36:d8:e9:09:e1:68:18:77:ed:16:bd:69:a1:20:df:
f6:c7:85:52:3a:88:6e:de:4b:63:28:cd:f6:fc:0b:70:0c:47:
3a:56:a3:00:c5:cc:df:46:2b:22:03:63:97:b4:d2:25:03:97:
28:33:4c:9a:7d:85:e8:3b:89:14:8b:26:fe:62:ee:e0:4a:14:
e5:8a:11:36:ea:0b:81:e7:0c:b5:c0:3c:85:86:d5:78:9d:08:
9e:7b:db:02:80:f8:54:39:2e:11:fe:47:58:6b:48:20:14:19:
00:52:7e:3f:6e:be:cb:5d:50:1b:92:a9:65:c0:81:43:9c:21:
f2:29:d4:94:65:d9:8b:01:69:1a:e9:5c:56:d2:2b:ed:9b:3e:
de:da:cd:f8:5f:bf:f2:89:46:2a:dc:87:f9:f4:7b:f6:82:3d:
c0:0c:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:52:00 2026 by rpki-client