Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: TrwAWmfGnTxSjnhs8NICfmsOTFK0zPUg6sGMnfmXNsY=
Subject key identifier: FE:A0:99:B5:1E:C9:ED:79:9E:91:F1:AC:FF:61:6A:84:51:6F:0B:FD
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 01A17E8635F999BD5F5FE9824405B9EF7242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 18:01:27 +0000
Manifest this update: Tue 27 Oct 2026 18:01:27 +0000
Manifest next update: Wed 28 Oct 2026 18:01:27 +0000
Files and hashes: 1: 1OKJSf7t7_lAiooOLlq2_b408jY.asa (hash: TVW+nVerXDEgPaaDUGrcKWYX2YALjhxpnf1JfzADSvU=)
2: B9HNNW3Bz7oID9G3-lfUfNqxyrY.roa (hash: tzCu3LyuSxup7J333i9m+mIRLj60qx1pJbahNRpyJGA=)
3: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=)
4: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: nrUBa9/vLpVBdMY6PExU2wnIOuWBzIhspRxhaX10ubc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:86:35:f9:99:bd:5f:5f:e9:82:44:05:b9:ef:72:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Oct 27 18:01:27 2026 GMT
Not After : Oct 28 18:01:27 2026 GMT
Subject: CN=fea099b51ec9ed799e91f1acff616a84516f0bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:0a:a2:a1:49:c7:57:8d:23:02:34:29:e3:
60:82:ed:15:d7:6a:b9:27:64:5c:7a:69:ca:e7:23:
77:26:f0:b9:c8:2f:dd:5c:bf:ff:d0:c3:28:f7:2d:
b4:95:d4:a6:ee:6b:a2:75:b9:cb:7c:42:81:40:63:
48:15:8c:b7:4b:2d:a5:15:e7:de:88:b4:82:a4:f3:
43:3f:89:fd:c6:55:60:65:95:33:47:23:fb:2c:64:
3a:8e:43:28:af:22:b2:f1:a6:20:67:7f:1e:c5:6a:
96:08:bb:86:4c:43:01:4c:ba:69:ea:2d:e1:56:c6:
c9:e9:62:53:c1:f3:c9:f8:74:83:1b:84:a1:7b:31:
4e:0d:e5:6a:6d:e3:d3:a8:f1:79:36:22:20:8e:e4:
37:a3:f2:31:08:1b:9c:37:0e:0c:33:63:cb:bb:ad:
48:4a:71:c6:77:27:0c:8e:f7:0e:c4:65:ce:92:81:
32:fc:af:df:b8:16:a8:9a:4d:a9:fb:62:04:26:e5:
f0:fc:10:b9:9b:ca:a5:78:46:78:f0:2f:c0:d2:f5:
fa:df:df:ca:6e:9d:22:4c:80:63:f8:59:49:50:36:
74:4a:a4:39:04:7f:34:d3:f4:72:b6:e1:de:d6:84:
40:cd:8d:e2:ab:d9:d8:31:80:99:b4:09:bf:83:92:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A0:99:B5:1E:C9:ED:79:9E:91:F1:AC:FF:61:6A:84:51:6F:0B:FD
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cb:59:92:05:60:48:51:db:96:3f:b1:b9:e7:f1:be:93:90:
f0:90:13:2b:2b:5d:92:d0:d5:8f:86:ba:55:7f:dd:b0:30:f0:
d2:d3:2f:b1:8e:e7:36:74:bc:90:82:a0:db:d7:4c:c1:43:c7:
b9:29:e8:6e:27:10:95:76:7b:7e:39:92:19:d9:f5:19:2d:4c:
d0:61:39:c8:a3:61:5f:1d:2d:06:9f:77:7c:15:46:27:d9:58:
ed:7d:b7:71:69:c2:57:de:98:26:1a:25:3d:0c:10:87:ea:df:
d3:c6:fd:bf:f4:f8:63:6d:ca:20:51:e1:19:86:cd:9d:2f:b1:
92:08:b2:01:e9:fe:05:bc:f1:b7:38:3e:36:8b:cb:be:cf:14:
6d:66:44:27:5c:b0:51:48:91:95:94:26:3e:96:39:e5:ea:51:
0c:f0:83:45:73:19:16:13:a0:35:65:24:3d:a0:04:1e:ea:53:
12:0b:8b:98:e1:e7:63:ec:05:ca:38:8a:0e:84:7d:87:45:d1:
cb:6f:36:48:2f:6a:ca:f0:c2:d5:40:3a:4b:70:f0:eb:cb:18:
88:85:fc:a0:97:76:49:74:fe:c9:e0:56:d7:ec:d2:7e:8e:27:
3d:86:4d:0b:73:1f:a6:1f:78:b3:6e:e4:77:de:72:23:bb:5b:
78:29:5d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:46:58 2026 by rpki-client