Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier: EOu5urJ9shbDTfkTKK39nufZGN29966mlH68190p2XA=
Subject key identifier: A8:69:1F:38:3C:AB:2D:29:1F:D4:E5:2B:95:0D:EF:FD:4E:AB:A6:67
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 01A1803E0373DD640C8EEFE744792AE8313C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number: 1AD1
Signing time: Wed 28 Oct 2026 02:01:49 +0000
Manifest this update: Wed 28 Oct 2026 02:01:49 +0000
Manifest next update: Thu 29 Oct 2026 02:01:49 +0000
Files and hashes: 1: 6gLAIABcMM0BdKdW8K02igz9kr0.roa (hash: uk7i7GXwXWp1hyZWUWTNojb3ILfyYgcAcHJXlD/riPs=)
2: Ig_zAXCn9vbFw7KxbkjMl45qbh4.roa (hash: VV7LhTzcbYlq8rfyk66GOg6XaES1MuVkOsiFHAWaNpk=)
3: TL1A_qeZFLWPpsnbfA9cmU0ctYM.roa (hash: Q8nTZN24u9mJs2w8KPuIp5t3PveHdtJEuDtOyRjriNk=)
4: TOJ03U-pk8ZKfSmj2VROvQgDtnY.roa (hash: EpZhvdW8kSRP3l2H/Fnes0x88lVH2bOzwjHn3A0hFLU=)
5: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: 3W7zE+7zV6RqubITeGbI6zaDW4kzoTCN5NHPsl9sGw4=)
6: w7NAr2u_fskJOiH5ZL_DBig50oc.roa (hash: S337FZgQBWH3kGuKNK3U/HNaRNmRFoOB+d+zWxnLtV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3e:03:73:dd:64:0c:8e:ef:e7:44:79:2a:e8:31:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: Oct 28 02:01:49 2026 GMT
Not After : Oct 29 02:01:49 2026 GMT
Subject: CN=a8691f383cab2d291fd4e52b950deffd4eaba667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:f1:b1:13:78:96:f5:5d:0b:ed:ec:ef:cc:
da:ef:71:27:ae:10:d9:91:b2:07:32:e7:e0:9d:0f:
3e:c0:7d:c3:3e:70:86:de:a4:ad:fb:9d:47:62:00:
0b:32:f6:a3:14:64:3a:19:1f:d5:6b:80:f7:6d:bd:
ac:82:46:2a:85:12:ff:35:f6:5d:19:5f:a4:1c:85:
b5:fc:15:c2:3c:b8:bb:81:b5:fa:ef:af:0b:2f:a6:
c0:09:aa:f5:8d:53:08:da:eb:c0:a5:13:69:11:3e:
8c:2e:9e:e2:07:e4:66:27:1a:00:f7:61:dc:10:4d:
dd:08:ac:9d:ed:d0:0a:80:15:57:da:fb:33:e2:8e:
bd:7a:49:e4:e0:bd:c7:33:fa:e8:e9:e1:52:7b:6d:
f7:c3:13:2c:d1:d4:fa:24:84:39:19:5c:48:97:f6:
b8:ea:3f:e2:f1:aa:a7:02:2c:48:0d:fe:80:a3:bd:
c3:79:a5:f2:8b:2c:6c:03:85:ac:a8:db:cf:64:60:
04:79:10:9d:35:ac:86:01:af:56:61:22:30:14:c8:
9d:60:71:ec:5a:df:78:c9:c4:99:97:76:db:0a:a2:
35:1b:a2:b3:b4:fb:e9:2f:73:85:68:f4:a0:4a:27:
d0:95:02:df:53:a9:09:4f:22:d8:fe:df:27:99:2a:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:69:1F:38:3C:AB:2D:29:1F:D4:E5:2B:95:0D:EF:FD:4E:AB:A6:67
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e2:d9:aa:fd:f6:ac:1a:b4:44:4a:2a:9e:68:64:8e:1f:92:
9d:02:f0:cc:59:9c:b9:43:2f:4e:29:8d:59:82:28:b4:3f:9b:
f5:2b:08:3a:4d:78:46:fe:e2:33:70:65:9a:47:c6:85:8d:8a:
bd:51:80:04:df:64:f1:e0:ed:9d:83:84:18:09:28:5a:93:b5:
77:ae:90:8e:21:60:9a:18:d5:94:61:15:c4:79:c7:1a:08:82:
b1:b0:34:84:15:16:b2:1d:11:e9:0d:59:08:db:95:12:da:e1:
a6:7d:e9:b5:fd:31:12:bc:f6:4a:77:97:d0:50:2f:fc:2b:3d:
92:9f:b8:6b:47:0f:1a:ce:73:fe:69:c0:1b:24:16:fe:64:20:
b0:9e:2f:04:8d:08:de:f6:fd:5c:92:06:54:36:35:9e:22:d8:
e7:93:2c:3c:c0:d3:49:77:7f:22:83:68:2f:1d:83:29:d4:11:
79:76:5d:1f:54:d5:08:3a:85:c3:8b:87:68:2f:d5:d3:26:aa:
27:e7:98:2d:b2:bd:c3:05:7d:40:07:bd:d2:06:da:3c:71:7b:
65:14:8c:6a:a0:5b:14:f9:90:17:90:6f:7d:e9:ab:ba:2a:eb:
59:dd:32:ec:bd:7d:77:29:11:51:c4:35:17:18:b5:32:bb:c3:
9f:63:5f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:18:33 2026 by rpki-client