Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: IYOJecaQyvnSLS3wc7XGjAy8eTcJlWZcOkKiWgclKQE=
Subject key identifier: 82:37:92:0C:C1:EF:2B:19:06:25:5B:FF:F8:0E:33:17:5D:2C:FE:F1
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 01A17F985FECF06312193382FD75430A6895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 0B44
Signing time: Tue 27 Oct 2026 23:00:54 +0000
Manifest this update: Tue 27 Oct 2026 23:00:54 +0000
Manifest next update: Wed 28 Oct 2026 23:00:54 +0000
Files and hashes: 1: 7BgGMhfrcQqzufLm6BOZyNmcrP4.roa (hash: Ez1hXHY/SyH5UhM0EJmIkgA9tRyMxJtbCALr5l1nz1Y=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: xgbWBUawJR6AIl77Mig/AVZ+ja8jyMX/CN9vdNaPKu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:5f:ec:f0:63:12:19:33:82:fd:75:43:0a:68:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Oct 27 23:00:54 2026 GMT
Not After : Oct 28 23:00:54 2026 GMT
Subject: CN=8237920cc1ef2b1906255bfff80e33175d2cfef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:7e:17:1f:d4:88:15:22:8a:bc:8a:1d:f5:
c6:f4:73:a1:80:2a:a0:f8:b2:db:1e:88:94:ff:71:
2a:1e:b8:1b:02:83:62:14:09:28:2f:80:cd:70:dc:
93:95:0a:ec:f2:32:89:52:d5:36:94:43:8a:ed:70:
ac:44:fe:99:d9:47:b6:1a:f9:5a:3d:ac:2d:e5:34:
a0:5f:e5:5e:f6:b9:5d:a5:83:26:ac:3b:ab:34:0e:
f7:6e:6e:e6:89:74:dc:a4:9b:1c:be:23:cf:fe:25:
2c:b9:a2:0a:80:24:6f:af:9d:b1:ba:d3:ba:8f:72:
28:4a:aa:4f:58:00:15:e1:ac:ae:a6:6d:63:c7:37:
09:46:12:a9:47:f3:55:f5:f6:27:33:34:9c:79:fe:
92:ac:80:d9:57:15:ef:71:8b:c6:24:5a:40:f3:99:
f9:0b:16:e2:d9:8f:95:ae:80:37:41:73:7e:1e:10:
12:df:27:af:7b:dc:17:36:bb:0b:6b:04:cc:0d:e6:
a3:3e:38:c0:74:16:84:9a:d7:78:ed:6f:58:6c:01:
e2:1a:15:67:d2:b1:9c:7f:01:79:ce:ba:fa:d9:20:
98:e9:b5:ee:27:da:3b:a9:db:e3:a5:b2:ea:80:29:
b8:f5:77:34:35:cc:9b:5b:31:07:77:56:0a:76:d4:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:92:0C:C1:EF:2B:19:06:25:5B:FF:F8:0E:33:17:5D:2C:FE:F1
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2d:62:0c:22:a5:0f:2b:f4:54:06:c1:36:da:ff:0a:19:92:
41:f4:b7:36:2e:73:a1:aa:c3:47:cc:62:f6:23:8f:17:cc:93:
42:e1:b0:eb:c9:84:d4:da:8a:49:f9:66:20:32:ce:2e:b1:cc:
31:c3:17:2a:88:db:76:6b:e6:46:87:a2:ca:df:6f:ef:12:ee:
48:fe:da:cf:c6:7a:bc:57:80:05:4e:5d:7a:86:aa:2f:05:07:
ad:ee:e8:27:2d:eb:d6:22:97:5c:ec:80:44:38:af:53:7c:f4:
0e:d0:a5:e9:cb:f9:b2:e9:b8:82:5a:8c:fe:74:4b:c1:02:1f:
86:d9:fd:42:34:63:61:cb:df:f7:d6:23:a7:5f:d2:74:06:83:
fb:f3:d9:1a:b0:6c:ba:23:46:02:0e:26:61:65:06:25:6a:75:
1c:54:89:7c:b8:ea:c3:70:63:18:40:18:1b:c1:1d:e0:33:4e:
1e:13:71:5e:a0:8d:c4:61:c1:b0:37:71:fa:70:15:a4:5f:2b:
8b:99:21:6d:36:1e:ee:e6:56:52:1d:d5:7c:3f:ea:d6:46:b8:
7d:3a:58:d0:7a:b9:06:55:fe:ee:fb:a6:3e:dc:25:b0:09:93:
65:2f:94:ca:83:41:08:ed:91:1b:71:7d:8e:69:1d:91:98:b2:
86:d9:45:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 09:14:57 2026 by rpki-client