Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: KP8DjxLLepfPUGkEd49nseRSErC3z5OywiY3E1i8bHU=
Subject key identifier: 0B:3F:B9:1A:F8:4E:71:74:12:83:DF:85:93:37:68:83:4E:04:FE:99
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 01A12BB26B004392D9843AB6DE60EE4980BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1AAA
Signing time: Sun 11 Oct 2026 16:01:15 +0000
Manifest this update: Sun 11 Oct 2026 16:01:15 +0000
Manifest next update: Mon 12 Oct 2026 16:01:15 +0000
Files and hashes: 1: kLUG7I7zaleUboTqrqB19XXsTkQ.roa (hash: cKKeB+BIlOYQDOr355c8ocGK4xiw2EqpjCd7kzeueqs=)
2: ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa (hash: gVb5IHgLpvS8ffqO/hNhQNz/nK0f5pvRNLYLZEY7RQs=)
3: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: h3Wqm5QQTRSSljmO8FnWfABzAxWMt0yeLexsjXjg8RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:6b:00:43:92:d9:84:3a:b6:de:60:ee:49:80:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Oct 11 16:01:15 2026 GMT
Not After : Oct 12 16:01:15 2026 GMT
Subject: CN=0b3fb91af84e71741283df85933768834e04fe99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:6f:f7:04:78:53:97:1c:a8:b4:e1:ee:ba:
c9:79:b7:4e:50:a4:c7:6d:76:54:77:97:f1:78:8c:
3a:45:34:89:d8:13:79:a2:e6:78:f5:24:48:bc:44:
c0:da:61:6d:31:f4:47:b4:68:ea:22:ad:0f:34:55:
3d:aa:50:ab:12:0a:84:86:62:e7:17:9e:f0:83:c4:
70:4d:cf:6c:19:58:e1:c5:50:7b:6a:d2:70:e7:14:
a7:46:d4:8a:62:a8:01:a2:b4:a8:ed:ac:d8:9a:72:
82:f5:1e:a4:fb:a6:a0:39:dc:3c:2d:e1:18:12:77:
dd:12:41:1e:fc:99:dd:16:ef:c0:f9:dc:ca:a9:e8:
29:94:d2:d5:9d:9a:49:dc:d8:e4:2b:62:ff:b1:74:
c7:f4:d6:cc:1b:ab:54:de:2c:70:fa:b2:2c:71:32:
50:08:a5:82:de:27:31:ed:64:72:4f:d3:08:96:14:
d8:97:af:57:da:15:53:8d:4a:73:bb:0c:65:26:ed:
46:f8:2e:24:a4:57:96:8d:b6:6b:88:68:91:bc:7b:
02:c3:94:2e:0a:17:ad:13:99:ed:c7:9b:7e:ec:98:
e4:bf:54:71:1c:14:c5:7b:12:53:90:55:15:15:c2:
83:8e:a2:fb:f1:00:f0:50:9b:4d:d4:20:71:6d:e1:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3F:B9:1A:F8:4E:71:74:12:83:DF:85:93:37:68:83:4E:04:FE:99
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a3:07:d3:a3:ce:38:72:c9:b9:d0:c9:de:21:96:1a:9a:76:
3b:2a:44:5e:7d:09:44:85:bb:19:09:0b:ac:24:07:d3:86:86:
5c:09:a6:ac:d5:6a:60:ce:4a:a7:e9:19:8b:df:e9:88:55:db:
39:d7:6a:8d:fa:35:12:4e:e9:6f:5d:cb:4c:84:34:8f:b2:75:
96:58:e3:d2:2f:92:1e:30:a8:2d:b4:37:f8:43:d8:1f:fe:34:
d2:7a:52:b9:56:93:63:05:33:66:8f:80:9d:b1:c1:b6:6d:da:
10:6e:b1:5d:e3:a0:e2:aa:cc:98:29:de:51:21:92:bb:49:ef:
60:53:cd:b8:f4:ed:45:7f:18:ba:0d:80:eb:57:de:4b:f2:0a:
70:16:f7:74:43:e9:05:78:b7:2c:3f:f4:d3:c4:1b:1b:e1:20:
f0:87:30:00:6a:b7:e7:3d:11:ff:7b:5d:78:fe:7b:30:61:de:
35:02:35:77:5d:eb:94:b8:7c:fc:75:55:91:5d:56:48:d3:27:
80:12:16:a0:a2:a9:3a:37:2c:3e:41:01:e2:65:76:79:ae:62:
f2:0e:e7:62:8b:9a:27:43:16:4e:0d:d7:d1:81:d9:46:80:71:
c3:9d:c7:f3:96:40:dc:29:bf:6c:8d:30:ab:57:09:d4:d1:f3:
93:8e:58:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:58:47 2026 by rpki-client