Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: gD9yu8fV0hCDhiE/Wctqv0OFO+3qIT2o6maYTVio1so=
Subject key identifier: 34:B8:CF:E8:47:D0:80:60:F7:EE:2F:4B:86:E2:7B:D3:10:0A:6A:5E
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 01A19A33DF49C54AA178F7F76CE57E8847FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 1AD5
Signing time: Mon 02 Nov 2026 03:00:53 +0000
Manifest this update: Mon 02 Nov 2026 03:00:53 +0000
Manifest next update: Tue 03 Nov 2026 03:00:53 +0000
Files and hashes: 1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: 8cHmV1wQyJmnXNMWEspcWq+4bebc80Y12sfgfTXissk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:33:df:49:c5:4a:a1:78:f7:f7:6c:e5:7e:88:47:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Nov 2 03:00:53 2026 GMT
Not After : Nov 3 03:00:53 2026 GMT
Subject: CN=34b8cfe847d08060f7ee2f4b86e27bd3100a6a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:0b:d5:72:cb:66:5d:6f:0b:f9:64:a0:d2:
33:94:61:2b:04:f2:5a:7a:18:be:ef:54:fe:18:b3:
c7:f2:45:4d:68:db:c7:59:41:ad:3c:c2:01:70:ec:
25:6a:00:b9:e4:26:e8:7e:9f:9d:f3:64:99:07:00:
20:ca:52:d5:61:42:70:00:fb:46:17:58:14:83:27:
04:00:b7:cb:91:cd:5f:65:80:d3:50:13:90:83:20:
04:ad:1b:d5:7c:4c:65:0f:48:01:24:cf:77:80:b8:
36:3e:d7:f2:9a:b0:c4:9c:9b:e0:e2:f5:23:cb:8e:
53:3a:6f:fc:87:ee:be:99:46:9c:ab:5b:e7:13:59:
3d:65:3b:3a:15:ea:9d:07:37:4e:8d:fe:1d:6b:fc:
bf:4f:54:7a:d6:3e:44:dd:c2:88:fb:2f:23:91:11:
a1:6b:e5:7b:98:6d:9c:0e:60:2a:db:80:c4:b8:1e:
2b:02:eb:e8:92:0c:47:52:44:12:02:63:90:3c:96:
d2:65:d4:ce:50:c0:4d:ed:49:44:bd:71:e7:cf:75:
96:26:f8:3e:10:bf:bb:4c:fc:43:d5:81:03:96:35:
99:cc:b2:1a:e8:ea:17:67:e8:3d:fd:ee:45:7e:2c:
75:3a:9f:63:ff:46:11:1e:af:51:14:44:1c:27:67:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B8:CF:E8:47:D0:80:60:F7:EE:2F:4B:86:E2:7B:D3:10:0A:6A:5E
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d7:12:90:c9:a2:e0:e5:2a:d5:ef:41:ad:e6:7a:05:8e:78:
31:4a:4e:34:06:62:e7:c6:b9:90:96:d7:55:b5:a4:78:2b:f8:
c6:15:e6:5a:ce:e0:9e:e3:6b:41:86:be:c0:a1:1d:3e:d7:f6:
20:79:22:bf:fe:04:58:b5:20:68:41:1e:67:a9:b1:2a:a2:e8:
98:c4:f0:d1:51:b8:56:12:35:3f:ed:98:c0:12:32:85:00:ff:
aa:6b:db:cf:d9:22:26:ef:63:de:fb:83:57:fa:3f:d9:12:cc:
d2:ce:53:91:13:e1:51:05:7b:1b:ca:0f:7c:47:9a:ca:30:c9:
4b:be:05:b9:d5:ad:1a:e9:f5:2c:aa:84:d1:f0:f1:3d:93:5d:
47:c6:0e:eb:cc:4c:75:89:f2:e6:4b:70:4a:33:cb:b6:ca:17:
24:ae:5c:8a:79:c7:eb:ef:2d:b5:4f:db:74:95:1a:86:53:be:
71:e3:5c:d8:f4:d4:24:12:2e:3b:a4:f8:f8:c4:2b:c4:59:a6:
44:36:57:9d:0e:55:55:3a:1a:d1:7a:6d:9c:46:63:53:1b:73:
23:26:2f:53:9f:b4:4c:e5:c8:a0:79:c2:f4:b8:e4:a5:46:e6:
aa:72:30:00:56:c9:a0:c8:c8:72:c7:db:bd:9d:75:e6:e3:e5:
69:4a:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 05:53:13 2026 by rpki-client