Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: aOF4M+nMdk+MP//zcWz8aDlhgXKVeOerhQdo27L/MoY=
Subject key identifier: 99:B6:32:9B:55:6B:97:67:27:AC:4C:2C:20:23:98:85:0C:5F:80:1A
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 01A129C40FB6EF1737E59F3DBEED2905F610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1AA9
Signing time: Sun 11 Oct 2026 07:01:17 +0000
Manifest this update: Sun 11 Oct 2026 07:01:17 +0000
Manifest next update: Mon 12 Oct 2026 07:01:17 +0000
Files and hashes: 1: kLUG7I7zaleUboTqrqB19XXsTkQ.roa (hash: cKKeB+BIlOYQDOr355c8ocGK4xiw2EqpjCd7kzeueqs=)
2: ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa (hash: gVb5IHgLpvS8ffqO/hNhQNz/nK0f5pvRNLYLZEY7RQs=)
3: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: VQIS2OuJd7gO6AMCsVlarqU2Q+B1r4vlQW4ZsThsTn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c4:0f:b6:ef:17:37:e5:9f:3d:be:ed:29:05:f6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Oct 11 07:01:17 2026 GMT
Not After : Oct 12 07:01:17 2026 GMT
Subject: CN=99b6329b556b976727ac4c2c202398850c5f801a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:1c:db:9f:3a:ae:2d:14:aa:36:fb:03:f4:
13:75:2d:39:ac:56:7a:42:41:ea:b2:33:b1:6a:22:
73:3b:f3:94:ce:87:7e:a1:ce:5e:22:ec:a2:ca:9e:
53:06:83:ef:51:63:77:ff:e9:df:6f:30:41:37:5a:
4a:13:4f:c1:c9:22:5f:59:8b:eb:8e:27:de:e6:be:
94:d9:2c:7d:d9:d6:35:03:4c:b0:2b:63:e7:74:77:
9d:20:2f:91:7f:38:61:89:5c:3d:4a:f7:4a:f3:4e:
c8:32:bd:36:95:89:5e:8d:ef:20:92:65:12:a1:37:
45:f7:0a:a6:be:ef:52:e1:ed:b3:fd:c2:91:cc:65:
cd:6c:72:0d:ef:f6:14:a4:83:46:48:97:87:ec:ab:
9c:de:19:94:93:31:b1:8f:24:b4:90:b0:f2:3f:c4:
ec:22:47:1b:8e:2f:18:31:49:c8:24:22:0c:4c:3f:
68:4b:8d:5c:90:34:9f:0b:09:3a:7e:4b:6c:74:cc:
2f:8b:b8:89:65:c8:5a:37:df:26:f0:31:4e:9b:69:
09:51:9e:c5:bf:58:e2:01:97:eb:3f:84:3d:fa:2a:
83:1d:ee:3e:b9:91:98:42:ad:15:19:d5:f6:13:d7:
cb:15:d8:65:c8:78:88:8d:fd:47:f2:d0:3f:a5:35:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B6:32:9B:55:6B:97:67:27:AC:4C:2C:20:23:98:85:0C:5F:80:1A
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5c:b7:b8:98:9c:92:0c:90:b3:7b:8d:55:de:5f:59:6f:6a:
5d:9f:4f:19:14:d7:ef:c4:e6:98:67:c2:07:6b:b9:32:05:d9:
67:ca:6d:1a:8c:66:1f:7a:1f:b4:4f:92:21:bc:6e:f9:01:38:
9c:6b:91:d3:bc:91:f7:4a:f1:d6:4e:33:fc:60:4b:3c:2d:c5:
09:b9:f1:19:8d:dd:da:b2:53:22:fb:f9:2b:9f:88:8d:e9:32:
2f:ac:34:d4:da:11:9c:20:c8:da:5b:29:fc:35:ed:b6:06:5a:
2c:8f:85:0a:38:4c:81:5f:4a:b3:1c:08:04:24:b7:5b:59:18:
8d:af:f8:3b:1a:c3:21:0c:ad:e5:b3:44:15:1d:44:78:8b:a7:
df:d1:65:94:fd:7a:f1:89:5c:e3:83:4f:a3:a0:a4:87:32:0a:
9f:e9:df:5b:e7:ec:b6:9d:9b:47:6d:6e:0a:6e:93:06:1a:d0:
3a:91:3a:5d:12:e9:b5:8f:2a:50:72:c7:d2:a5:e9:82:9f:7b:
d3:c7:e8:fd:8e:de:f4:8e:84:ca:ea:be:a6:ea:f8:05:92:94:
5a:24:d0:d0:a6:d8:c6:d6:a2:6d:63:24:47:44:27:53:e8:b6:
f1:85:d5:78:fe:47:86:06:6a:89:50:2b:54:94:dc:4a:c0:d6:
95:28:49:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:09:33 2026 by rpki-client