Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
File: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft (raw, json)
Hash identifier: q5YVSwepQaKPa7ilrak9Ky6y+POqOSQ50estoUTRa7g=
Subject key identifier: 70:9A:C7:37:4D:E2:04:29:56:4C:88:42:B9:FA:A7:44:02:D2:E5:56
Authority key identifier: D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
Certificate issuer: /CN=d191557a20d3299613c702e9993e9d59c39b4708
Certificate serial: 01A16D5B6EFED8EF4217FB31C07E3E32916E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
Manifest number: 0128
Signing time: Sat 24 Oct 2026 10:01:11 +0000
Manifest this update: Sat 24 Oct 2026 10:01:11 +0000
Manifest next update: Sun 25 Oct 2026 10:01:11 +0000
Files and hashes: 1: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl (hash: tTvx8QTg6GXyaM84+gkPo3rWMkqABH3FWb/s9uuof/g=)
2: sxcdm8hMPFs7hwfFtctneyGAbtY.roa (hash: qSfMKSLLYHXoos50NdW6B+8JG0v//N7ZW2DTOD6cmAA=)
3: zKunQbH1Pi1kuPKcXi66B2kK2GE.roa (hash: IW2iL6xlGt6vOJU5K2L4rfi0KiuOBllyiIH+ctseSa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:5b:6e:fe:d8:ef:42:17:fb:31:c0:7e:3e:32:91:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d191557a20d3299613c702e9993e9d59c39b4708
Validity
Not Before: Oct 24 10:01:11 2026 GMT
Not After : Oct 25 10:01:11 2026 GMT
Subject: CN=709ac7374de20429564c8842b9faa74402d2e556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:6d:c8:9e:7f:93:a1:fc:79:88:54:7e:04:
c2:16:ea:81:de:a5:b4:04:a1:1b:bc:e9:31:e7:99:
33:7b:b6:62:30:0c:eb:78:b1:29:af:31:2b:79:8d:
4b:aa:d8:07:0a:e4:fa:f0:fe:1c:2c:01:f9:5d:80:
c2:92:5d:70:8b:56:33:c0:0d:5c:86:c6:be:c1:06:
1e:b0:ca:d3:93:4e:49:d6:c3:60:05:65:86:75:79:
88:0f:fa:0d:0c:8a:35:f1:84:42:6b:bc:16:97:9f:
2b:1e:54:ab:e7:ce:6a:89:02:5e:cb:40:15:a0:eb:
ca:7e:90:20:eb:b7:fe:b8:16:89:d4:88:75:f1:13:
3e:4b:45:45:28:1a:6c:b5:74:de:0f:11:8a:9c:44:
97:ec:7c:93:82:ea:ed:94:c0:d8:ed:0b:e9:ba:e8:
67:2f:f2:02:fd:88:d5:5c:f6:69:2d:00:1d:8e:9e:
5b:9f:76:61:ff:bd:d3:b7:62:cc:b2:51:26:99:02:
68:0a:8f:77:9c:c0:78:44:05:d3:a7:ee:6c:5e:46:
7b:31:cb:e0:fd:74:a8:ac:b5:21:a0:a8:89:bf:56:
ea:e7:58:55:a0:d6:f6:0c:64:05:d0:83:7d:8e:e0:
bc:37:ec:47:36:e8:64:29:52:90:5d:8c:44:94:3d:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9A:C7:37:4D:E2:04:29:56:4C:88:42:B9:FA:A7:44:02:D2:E5:56
X509v3 Authority Key Identifier:
keyid:D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:87:19:30:d2:e7:cd:2a:10:6e:eb:32:d0:1e:b8:e0:84:8a:
6d:15:b1:a6:0d:f3:17:bb:8b:72:6f:6f:29:4c:17:93:47:be:
53:1c:18:98:d5:58:85:78:f9:a7:9f:07:36:56:83:7c:a5:7c:
77:56:44:d0:19:b7:22:2b:fd:be:17:7b:42:7e:eb:ea:63:24:
4d:97:de:1b:d4:83:14:b0:e5:84:40:8c:55:17:ea:a8:6b:2f:
6f:78:4a:d8:09:a3:d5:51:d6:37:39:5f:91:00:d6:4e:02:f1:
eb:ce:f2:fa:d9:47:36:26:63:19:6e:e3:53:68:c2:f9:93:42:
fa:1b:d8:b2:81:5d:c1:78:da:2e:d5:c5:6e:a4:a3:4b:12:d4:
12:d6:b3:26:62:bb:88:51:dc:b9:30:7d:e1:f1:cb:c1:3d:69:
bf:20:ab:62:16:9f:f8:82:a7:71:d9:9e:ec:d8:d4:a1:1f:2a:
a3:00:4f:d6:21:b0:10:1f:55:fa:93:75:ba:02:33:66:09:b0:
fd:fc:0b:6e:db:e2:9c:6b:b5:f7:9d:d3:bc:a0:ca:65:3c:24:
20:fc:49:d6:9e:c7:bf:80:af:62:d0:c4:77:4c:d2:58:d1:a5:
29:72:88:e2:80:3c:32:dc:f6:3d:6d:0b:c0:a5:4f:51:a3:16:
36:22:14:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 19:35:29 2026 by rpki-client