Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: gQxpZNbTAvcAm/PFbuS6F8W+bt4Jj601DbX42zUf1Ig=
Subject key identifier: 0E:F6:A4:61:8A:3E:F8:94:AF:5A:7E:13:C8:CB:55:C3:CD:0A:F1:84
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 01A1740230D24D7F0DC92B295C365E331B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0DB5
Signing time: Sun 25 Oct 2026 17:01:02 +0000
Manifest this update: Sun 25 Oct 2026 17:01:02 +0000
Manifest next update: Mon 26 Oct 2026 17:01:02 +0000
Files and hashes: 1: 4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa (hash: 1DrymcOv7aoritq27aJXxxGAaxiSifi94Z89A2CC9Ow=)
2: KaN7RLL5KVyq30qD32Rnb_nls78.roa (hash: bzsFsGck1pscarjTWs0d9Ebn5ZXqcM8xKvGnRO+nPFk=)
3: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: l2PMavY59auNrpZy3k0uxcjyi203Cp6kOz0kMgjq4pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:02:30:d2:4d:7f:0d:c9:2b:29:5c:36:5e:33:1b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Oct 25 17:01:02 2026 GMT
Not After : Oct 26 17:01:02 2026 GMT
Subject: CN=0ef6a4618a3ef894af5a7e13c8cb55c3cd0af184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e4:a4:6e:83:bc:4b:01:d5:c1:86:b2:7d:9d:
c0:2d:8d:6d:87:e5:e6:db:7e:71:a2:a6:8a:a2:83:
67:76:04:a9:68:a6:69:c0:a4:5d:9b:5a:57:d4:df:
78:de:96:3a:c1:c4:f3:08:dd:13:a4:2f:d3:83:30:
b9:94:af:76:e6:4f:30:98:c6:98:18:7d:5d:db:b4:
67:bd:76:65:3e:ee:b2:26:9a:e0:0f:a0:01:8d:34:
de:56:8b:c5:ad:19:be:f6:11:a8:69:10:ed:f1:1f:
00:4a:72:b0:f7:f5:6f:65:38:cc:94:75:da:14:10:
60:fc:c3:f7:76:b5:fc:4f:13:37:68:0c:a8:c1:54:
fa:e3:cb:d7:e8:73:5f:81:2d:08:aa:0b:14:b8:3c:
ed:dd:fb:4a:6d:49:66:13:4a:75:26:43:ef:33:77:
73:50:82:38:f6:01:75:c2:d6:a8:91:95:d6:e7:32:
13:14:5a:51:be:ba:ee:42:59:7d:1a:26:aa:40:a4:
43:af:37:29:6d:ea:99:b5:7f:8d:18:00:fb:ba:12:
b9:96:b9:88:c3:66:74:d0:31:a3:11:55:b0:c3:08:
7d:49:7f:6b:67:e6:62:0c:5d:c2:65:63:e1:29:de:
07:52:81:15:ae:4a:09:40:f2:f9:bc:e1:48:91:45:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F6:A4:61:8A:3E:F8:94:AF:5A:7E:13:C8:CB:55:C3:CD:0A:F1:84
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fc:61:52:84:2f:8c:85:49:a6:f9:c0:98:e1:84:fa:7e:fa:
65:31:91:e4:b7:d7:35:bd:06:37:0a:26:dd:e3:38:d3:47:7b:
7d:7a:6d:32:9a:62:37:64:2e:42:bb:02:69:b2:de:70:5d:c4:
f2:01:6f:a8:41:af:3a:77:af:0d:04:47:38:bb:c0:b6:33:d2:
b0:19:53:5d:9f:0d:9e:84:b7:fc:2c:f4:9c:22:6e:9a:47:a1:
60:5c:e0:d0:85:e0:82:4a:6b:3c:28:e0:76:fb:cf:6e:74:fb:
76:2e:c6:85:97:81:41:02:df:81:53:0c:80:6b:cf:b5:66:ec:
b6:3c:ed:d0:d1:55:e3:97:14:c0:e2:7b:d7:2e:d6:c5:24:1d:
2a:96:de:80:4c:8a:ec:2c:79:08:b0:03:01:c9:10:b0:69:be:
b3:d7:a2:37:7d:b9:b3:ff:0b:de:72:44:66:6f:97:3a:20:d2:
56:24:0e:b0:51:0c:9f:b0:a7:94:fe:31:35:d8:28:30:21:4e:
83:03:88:23:f7:f3:ad:8e:b9:58:3f:d3:b7:ca:ce:cb:cb:a4:
33:5f:e0:fc:1a:1b:09:59:47:a2:ec:d2:47:2c:fe:a2:e5:4d:
e3:a1:17:7c:6c:8b:86:30:c1:38:38:58:f7:fb:ac:7f:d4:c0:
2c:05:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:01:59 2026 by rpki-client