
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
File: z0pxf4-huwNZJ0IjrNriK3Dma-w.mft (raw, json)
Hash identifier: 14iwV/tcGf1olkPA8eMa/euO6L80uQNufjpAfb0Svdw=
Subject key identifier: B2:FF:1A:BD:39:25:66:AF:73:74:D7:EC:02:69:46:A9:E5:66:43:E6
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Certificate issuer: /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial: 01A180069F0F807F7E99D6A068C1AF4D1B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
Manifest number: 0DB9
Signing time: Wed 28 Oct 2026 01:01:19 +0000
Manifest this update: Wed 28 Oct 2026 01:01:19 +0000
Manifest next update: Thu 29 Oct 2026 01:01:19 +0000
Files and hashes: 1: EUcrUeuArUfiLjyJq2CCJJXEbH0.roa (hash: j5ECLl2Rm4cPawtaMzFLRoWoVbB08uj29AlH0bIyc5s=)
2: ImCcU51kmp7ZNuk8BkyjSggDVFA.roa (hash: n45aVak3x5Ct/6DqnZqytEQSgKOpMfagR6z98qYO7lY=)
3: OHcQVOiDzKC_wv6FNo8ZwPwzleA.roa (hash: xT0LBnbL9kaBG9ZFdkmrq9KOkjCUtUhM0nWVPUAZpOU=)
4: cneDK9wIJto0L8FIGybxXTkN7-g.roa (hash: /ZPU5CDQJmj0WcWpNTND51Omeqs1E74D4tLVOwv5dwM=)
5: z0pxf4-huwNZJ0IjrNriK3Dma-w.crl (hash: 7VtQ060yLMH24CFYMUW83cjEBinhE7ptcSZ8lLRE9sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:9f:0f:80:7f:7e:99:d6:a0:68:c1:af:4d:1b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Validity
Not Before: Oct 28 01:01:19 2026 GMT
Not After : Oct 29 01:01:19 2026 GMT
Subject: CN=b2ff1abd392566af7374d7ec026946a9e56643e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:63:2a:98:37:80:70:0f:d8:db:b3:f9:60:
6f:19:8c:45:e1:8f:93:18:a0:a9:e5:9e:cc:d5:b5:
7f:92:6c:03:78:7d:9f:a3:bd:8d:f7:e2:d0:91:48:
95:1f:e1:bd:ab:09:48:96:45:a6:b1:b5:98:8a:d5:
2f:79:39:ff:67:34:1a:68:8a:36:a4:c3:84:ad:0f:
37:b8:1b:e7:31:8b:48:18:35:6b:e8:f6:2e:88:55:
f5:b6:d1:db:0d:fd:e8:08:52:19:59:19:c4:0f:2a:
12:c6:20:10:06:49:af:f4:bb:c0:a2:54:4d:5f:e5:
c3:7e:50:9c:22:e2:05:57:9d:8c:05:63:6a:9e:de:
91:0a:33:0d:56:2a:03:27:29:1a:62:b4:2c:8f:0c:
f5:8e:79:40:9c:0f:fa:a5:42:b2:d8:66:fe:f6:56:
dc:50:ba:fc:dc:56:53:67:cb:16:ab:f1:07:ba:ee:
49:97:b0:41:56:8d:8e:d1:98:6d:19:57:5b:99:49:
96:49:bd:7f:23:be:0a:58:8d:44:5a:6b:b5:6e:81:
3f:71:86:4d:f1:41:7f:a7:08:72:a2:81:e0:85:59:
75:51:0a:4c:87:7d:8a:96:fe:c0:d1:ff:fb:2b:0c:
fe:ee:7e:4d:d1:30:ba:42:8b:a7:09:12:31:9d:b9:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FF:1A:BD:39:25:66:AF:73:74:D7:EC:02:69:46:A9:E5:66:43:E6
X509v3 Authority Key Identifier:
keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:10:cc:46:45:a8:9e:6e:9c:55:5b:a2:61:25:73:3c:66:62:
60:73:02:79:77:aa:ab:0e:a9:cc:73:28:d5:27:17:5f:14:a9:
db:e1:88:aa:68:66:2d:96:71:94:7e:bf:2f:97:87:52:dd:17:
93:56:38:f7:76:c1:47:79:66:81:38:92:ce:ee:13:33:f0:11:
58:b9:95:35:8e:19:79:54:0a:9a:7b:57:d9:3b:0c:9f:00:97:
94:7a:9d:1c:31:66:ed:ef:ef:1d:7b:d9:54:82:00:a2:ec:64:
5f:57:c6:cc:6c:4f:93:15:82:ad:4c:62:56:08:b4:d2:bb:29:
ed:1a:6a:82:21:9f:97:db:1f:65:6a:9e:7f:81:2d:78:0b:74:
24:c3:c8:29:56:21:a7:87:d6:59:b0:13:cf:11:15:2f:fc:28:
c5:a1:2f:9c:f0:4d:15:69:54:dc:7e:1d:52:36:6b:40:17:c3:
f4:86:06:7c:3c:93:65:e1:4d:e8:aa:09:59:4b:9e:24:64:66:
6d:da:31:e0:29:96:d3:51:b0:f6:51:14:41:0b:6e:a1:27:c3:
94:d1:3d:89:f8:ac:c8:cf:c2:2a:b5:89:c5:22:84:19:fd:d2:
4c:50:24:d0:87:a8:e2:8c:cb:02:aa:3b:d8:e7:4b:6f:c9:0c:
a4:b4:b7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:51:23 2026 by rpki-client