Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File: ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier: iiVxMPVx3P33tKOQib8LkzOWEqNqT7sycZHMg0qjDwE=
Subject key identifier: 1D:5B:A5:04:6C:F0:25:28:9B:CE:87:82:C1:5B:4B:ED:AB:F5:4A:36
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer: /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial: 01A14D621AE3795D8A044EA195FCF3B9C947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number: 1237
Signing time: Sun 18 Oct 2026 05:00:37 +0000
Manifest this update: Sun 18 Oct 2026 05:00:37 +0000
Manifest next update: Mon 19 Oct 2026 05:00:37 +0000
Files and hashes: 1: GwZ9dNA86AIDNnsAq70FiAkZYj8.roa (hash: qnSiAyQRIBiRzYavimYlFJSyS25EakQKaTIGVx1R3tU=)
2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: EbfE/RrLK4255lhH6AO9N8rbJr6v8IBEQ/GybsTKJD8=)
3: irQyC0ot9r4PxzPSLvST2QH-X0Q.roa (hash: kwnqay2aLOiYKa/WS1eZrTNeCkIkn0WSXDieMB7/M7Y=)
4: yw5w5uCdPdnhgVsaZXUZ6mCgC8k.roa (hash: /944unZ7CSMOwiuR6yhIgpH4mt1fcLA58yVZkErRY/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:62:1a:e3:79:5d:8a:04:4e:a1:95:fc:f3:b9:c9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Validity
Not Before: Oct 18 05:00:37 2026 GMT
Not After : Oct 19 05:00:37 2026 GMT
Subject: CN=1d5ba5046cf025289bce8782c15b4bedabf54a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:5f:ee:44:40:52:94:cb:84:34:fc:95:2f:
83:3d:ce:bb:24:fb:76:4e:2b:50:cc:63:75:b8:63:
65:7d:fa:02:5c:7c:4a:8f:96:0b:46:dd:94:d3:26:
38:0b:08:30:92:e0:04:f2:24:e2:8f:18:b7:f8:b3:
a8:ca:41:79:36:a0:fe:55:56:64:7b:27:ee:88:4a:
cc:2f:01:72:b9:12:64:31:d5:8b:d1:d6:17:ad:85:
69:dc:03:e6:cb:9e:f1:86:d3:cc:16:ce:01:19:e0:
dd:c3:dd:97:08:93:68:72:74:53:2c:84:93:94:52:
79:b1:1c:9d:81:56:98:18:99:dc:e3:ac:44:36:c0:
01:c1:70:6e:7a:c5:3e:fc:ad:7e:ed:82:99:d0:27:
ce:ff:35:65:a2:2b:d2:26:dd:4c:ae:fe:7b:bf:76:
d6:31:db:73:e7:71:ea:af:1c:4a:ee:91:35:91:84:
ac:c3:3c:59:c1:bd:dd:49:e3:63:5a:b6:63:4e:ab:
e7:84:6a:31:48:84:e9:4e:fc:81:6b:51:7e:d4:3b:
08:3b:e2:be:03:b5:16:aa:2b:d8:85:d4:dd:5a:93:
a1:57:97:87:70:c4:34:3c:a4:7c:13:16:a1:1f:65:
db:aa:f7:93:f6:3c:84:6c:a2:af:7e:5f:e1:fc:4f:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5B:A5:04:6C:F0:25:28:9B:CE:87:82:C1:5B:4B:ED:AB:F5:4A:36
X509v3 Authority Key Identifier:
keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0a:dd:5d:70:c2:67:c3:57:5d:f1:14:03:fa:fe:39:9c:f0:
f2:ff:70:0a:56:fb:bd:47:cc:4e:54:d0:97:98:4f:02:79:e2:
db:2a:aa:eb:19:00:15:28:43:cf:38:35:86:03:bd:7f:db:f3:
dc:56:65:3a:9a:98:1f:a3:08:93:ee:da:9e:a5:04:7e:89:82:
cc:4b:0b:25:ae:e2:b3:d7:18:6b:43:47:21:8f:59:e5:79:1c:
10:2c:a0:09:1b:49:ef:28:57:ea:fd:61:cb:e7:61:74:5c:08:
3a:6c:0f:cb:61:3a:8d:9b:75:8d:33:a8:6c:25:69:7c:66:e2:
f7:c5:bc:00:03:c9:90:62:22:41:2f:eb:c9:7f:e1:42:53:61:
2c:a9:b6:93:6f:46:12:39:5b:85:09:cd:33:5b:ba:ee:5d:3c:
64:f1:66:84:f4:0b:17:d3:37:81:96:65:47:00:ed:d4:48:64:
d6:7f:2d:74:a6:ca:97:ab:d2:0c:83:f0:2f:4b:98:e9:f2:ab:
a8:ef:72:61:99:05:e3:e6:a6:34:79:12:30:8c:44:4c:69:6b:
34:68:2d:d6:be:01:a6:23:7f:ea:7b:4b:6d:40:a3:54:3f:fb:
fb:e2:2d:cc:05:46:99:80:9b:4f:a9:17:36:79:67:ef:b0:c6:
8c:99:44:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:17:17 2026 by rpki-client