
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
File: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft (raw, json)
Hash identifier: CgwLzjkR3E6pJ9svYIakDwj1lmohElPvh21+uCpz7Ks=
Subject key identifier: B6:19:E5:39:65:9E:E7:D1:B6:73:E6:87:49:24:F6:7C:87:86:36:05
Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
Certificate issuer: /CN=646836c9214faaa16798a93e8773e599534b29d7
Certificate serial: 01A1822B63D8D064A0E4822C7EBB2EDD07D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
Manifest number: 0C35
Signing time: Wed 28 Oct 2026 11:00:44 +0000
Manifest this update: Wed 28 Oct 2026 11:00:44 +0000
Manifest next update: Thu 29 Oct 2026 11:00:44 +0000
Files and hashes: 1: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl (hash: s4jtPB27/Q+L8MBbMiJ1Q5E4264ZS+MXuzwa8Q46SGk=)
2: xqX86PxnYUFgmbMyGq-FYjU7myI.roa (hash: LU7BTND6Kz806aRKd+CDSvMICobI0jgTkTNE1f7lbDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:63:d8:d0:64:a0:e4:82:2c:7e:bb:2e:dd:07:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7
Validity
Not Before: Oct 28 11:00:44 2026 GMT
Not After : Oct 29 11:00:44 2026 GMT
Subject: CN=b619e539659ee7d1b673e6874924f67c87863605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:d5:d1:06:8c:f1:15:ac:ef:5f:3b:38:01:
a5:82:59:21:e1:d3:fa:06:47:c7:ab:6a:d0:c1:fe:
c6:5a:86:a7:97:90:d8:c0:4f:fe:24:dc:c4:f3:c7:
54:fc:d7:ac:ae:8d:12:1e:7c:df:3e:df:59:5a:92:
9b:52:3f:bc:ba:c0:6a:0f:20:d7:66:25:31:0e:95:
2a:c4:d5:f3:87:7c:1b:07:e8:e5:e9:e0:fc:f1:02:
8d:1d:26:74:ce:8f:84:e0:7d:bb:d4:46:13:cf:13:
48:50:40:71:3a:49:97:a3:93:a8:61:31:11:ff:fa:
b6:16:16:b3:6f:d1:ef:c4:c8:d1:f9:db:24:01:2a:
59:19:6c:76:05:07:1c:1b:1b:02:bb:1b:f9:55:6e:
ac:89:c4:81:b5:3d:cf:25:9e:4e:ce:3a:e3:dd:00:
ef:fe:f1:99:94:39:0a:dc:68:76:13:7b:7b:af:82:
bb:f6:b6:30:bd:11:8e:e8:bb:e5:e5:cc:ab:d5:88:
6b:39:ff:4d:93:a0:26:2b:fa:89:7a:7c:01:af:26:
d1:d1:33:05:c1:ce:5f:bb:3f:0f:f6:cb:01:55:c5:
16:ad:e4:af:98:5e:3f:00:65:0e:18:eb:2c:d3:1d:
2a:3e:5c:74:b7:9e:01:31:ff:20:81:62:70:c8:d0:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:19:E5:39:65:9E:E7:D1:B6:73:E6:87:49:24:F6:7C:87:86:36:05
X509v3 Authority Key Identifier:
keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b8:57:86:9b:63:d9:0d:c1:bb:8b:1f:b0:ae:54:54:58:8b:
b2:29:56:8a:00:c6:bd:1b:8b:3e:67:77:22:84:bd:6d:b0:04:
1f:d3:f2:70:05:7a:57:3a:0b:a1:49:da:28:95:29:8a:f6:f9:
97:d3:3b:e4:bd:96:1a:81:7c:35:84:5c:06:23:cb:bb:bd:fc:
87:eb:d6:c0:fc:bb:5d:15:18:cf:ee:ac:d4:29:76:f2:1e:0e:
d6:71:da:82:87:10:68:58:db:28:b0:61:a5:3c:65:0e:79:fa:
16:c7:77:18:df:dd:20:a4:b2:dd:cc:8f:cc:63:1f:43:d3:c6:
da:92:07:75:7e:71:d9:cf:eb:ec:51:32:fc:11:07:f3:19:a2:
2b:98:37:4b:05:74:d9:ad:6c:7d:a8:37:d4:9d:5d:56:ba:95:
53:88:93:d1:e2:d3:76:83:14:2f:9b:d8:20:39:3c:83:21:32:
3b:18:6e:e9:bc:fd:38:fe:53:ac:4e:46:b2:09:6d:be:db:28:
21:fa:85:4a:b6:dd:cd:92:fc:cb:64:13:b3:3b:f5:39:b1:62:
65:cb:c7:b3:27:a6:02:18:7e:41:41:5a:06:25:a3:7f:c9:b1:
3f:e7:e1:e2:05:51:13:8a:28:f9:a7:85:d4:fe:dd:3d:26:34:
9d:d6:4f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:35:23 2026 by rpki-client