Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
File: Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json)
Hash identifier: UBjqJD9lEsClJp1Lw21puNvKaB3gYJxAiTbGwGrifjs=
Subject key identifier: 87:12:95:E4:35:3E:C4:8F:92:44:39:36:FE:E4:89:11:5F:C5:22:81
Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
Certificate issuer: /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Certificate serial: 01A1818721F943B5B9C570A1ADB6BFAA4365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 08:01:19 +0000
Manifest this update: Wed 28 Oct 2026 08:01:19 +0000
Manifest next update: Thu 29 Oct 2026 08:01:19 +0000
Files and hashes: 1: 1yqrC5cFVqno3yUjEb2JEevt8hU.roa (hash: ALDcP7GRoyghMSXeDYW2VCy+XpgGkyrbpJ7hv982jsc=)
2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: 6DiSnbjOLO2t8qJxxzfZyggpEikcPzrxHEaCk/yG0Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:21:f9:43:b5:b9:c5:70:a1:ad:b6:bf:aa:43:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Validity
Not Before: Oct 28 08:01:19 2026 GMT
Not After : Oct 29 08:01:19 2026 GMT
Subject: CN=871295e4353ec48f92443936fee489115fc52281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:28:5a:4b:07:29:b4:dd:b6:a4:90:21:5b:
02:bf:a6:bb:95:a6:9e:c4:af:bd:d6:8d:8b:9b:be:
e6:23:ce:28:22:c3:66:da:ad:0c:b2:57:b7:51:eb:
d3:bf:94:26:9f:b3:4c:3d:9b:d2:f0:53:60:ab:a4:
18:83:e3:ba:6b:92:2a:ec:f0:a6:40:4b:8c:a3:8f:
df:07:73:f8:5f:ef:21:a6:6f:0d:82:65:8e:78:6c:
38:82:1b:15:a1:27:78:49:13:27:ef:e2:56:a4:89:
9f:8f:73:eb:15:a0:23:ba:82:e1:62:f5:5c:95:ef:
94:0b:27:4d:c4:ae:f4:75:51:87:4e:48:0e:e4:c9:
3b:bc:c4:62:f1:1e:5b:9e:68:1c:7b:1a:1c:2c:d7:
0b:0c:3d:ca:4d:c0:5d:1d:6c:4d:27:31:2f:ed:26:
2e:02:ef:a0:7f:87:e0:e7:03:18:42:b0:bb:64:95:
07:8c:7d:22:ee:d4:a0:d6:2f:57:12:62:f8:32:00:
6b:58:7d:02:21:4f:bc:24:20:97:a4:a5:7a:a5:28:
b1:ad:b6:4c:91:7e:f1:63:bb:06:93:ce:8f:00:fe:
55:52:a0:16:51:ae:27:a8:99:be:06:0c:db:7c:b2:
d0:21:c7:b8:39:e3:5a:b0:69:25:b6:62:45:58:61:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:12:95:E4:35:3E:C4:8F:92:44:39:36:FE:E4:89:11:5F:C5:22:81
X509v3 Authority Key Identifier:
keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:16:14:c7:d3:22:3d:9a:8d:3e:1d:69:1c:f3:fd:cb:44:cd:
60:98:2a:92:c0:4a:73:b7:69:6b:b6:13:5e:b1:42:a7:94:3c:
d1:e8:46:ba:2b:5e:7f:33:98:13:95:18:63:af:5d:7d:34:76:
d6:08:20:7c:2a:1b:4f:25:e8:66:41:23:06:27:b8:2e:a0:bd:
f4:2e:01:81:ce:83:6c:34:64:a2:f4:f9:d1:85:71:7d:d7:24:
7f:eb:d2:f5:0d:d8:45:8f:d7:1e:14:c6:11:33:13:f1:03:e3:
57:a9:45:dd:a1:28:68:2d:9f:ae:ff:8d:5b:3a:db:54:7c:88:
08:3c:fa:b8:82:68:86:38:50:0b:38:f4:b0:ae:c6:a2:09:04:
67:00:30:06:ba:e4:54:62:b5:74:66:28:eb:20:cc:33:de:74:
57:49:e8:d9:35:4b:82:64:75:0e:43:ee:77:a8:26:57:64:8e:
ce:53:85:cd:e4:cd:f6:51:0e:89:a7:48:1c:b4:13:f0:69:99:
30:d5:42:51:6e:b1:fb:ee:6f:61:aa:d2:ed:f4:da:70:87:d7:
3a:16:8b:be:8b:88:1e:2b:ca:87:11:5c:79:cc:10:75:36:ae:
86:3c:02:4e:90:fd:b1:23:7b:63:03:cf:d5:57:b1:c7:fb:43:
a4:e5:45:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:55:04 2026 by rpki-client