Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: 1k8Bgxgl0byS9D6eqQ/MprGQ9aIy9D3l/PS4qoic4+w=
Subject key identifier: C2:71:62:0C:33:E3:A5:BD:8D:D1:EA:33:CD:1F:39:BF:81:30:3C:CB
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 01A11A508283F9A0DE2181CD666AA4DF8C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 1A9B
Signing time: Thu 08 Oct 2026 07:00:46 +0000
Manifest this update: Thu 08 Oct 2026 07:00:46 +0000
Manifest next update: Fri 09 Oct 2026 07:00:46 +0000
Files and hashes: 1: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (hash: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0=)
2: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (hash: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo=)
3: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (hash: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE=)
4: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (hash: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg=)
5: HWvGRqMe27--NoC2Dyw8FKUNjHk.roa (hash: ycBN27AOuQt6gtV2gw83af0DBTats6sXAt4skvhgHcE=)
6: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (hash: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4=)
7: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: E7nU2H5QX4/4/+vHvg7PMOUWjEskxtj0mynXaF3q2oc=)
8: qSsf5vEudpSeKXdovHkXjheUpNQ.roa (hash: lDG010Lrz1cwQmsgQKn3qDK0y/5g/pHYKd0HNTHtbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:82:83:f9:a0:de:21:81:cd:66:6a:a4:df:8c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Oct 8 07:00:46 2026 GMT
Not After : Oct 9 07:00:46 2026 GMT
Subject: CN=c271620c33e3a5bd8dd1ea33cd1f39bf81303ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:46:82:4e:33:82:80:ba:c6:40:35:88:31:
ad:1b:de:6a:eb:f2:d2:21:ae:83:8f:89:db:72:29:
fe:00:20:5b:c2:56:d8:16:71:c4:1e:e0:b6:f3:33:
1a:dc:66:49:84:77:ec:30:f9:fd:ab:b7:4f:80:81:
4c:2e:f6:34:fa:89:85:bb:5d:a0:3b:9b:16:61:6b:
71:cb:ba:05:12:90:9c:e9:a1:99:eb:0c:c9:88:e1:
93:00:e4:77:a6:1e:ba:a9:aa:f7:8e:8d:5c:27:62:
92:4c:70:bd:07:76:d4:98:fc:03:40:71:2f:37:d7:
c8:e9:64:ac:b9:c3:9c:ae:8c:47:64:e3:59:40:ee:
7c:7e:e7:76:e3:a8:46:39:77:db:50:36:86:2e:b9:
fd:e4:0e:78:c0:d8:9e:43:ff:49:32:83:f4:b8:60:
cf:ee:8f:8d:56:e4:90:38:1c:0b:98:1e:e9:43:6c:
23:79:68:bf:3c:f5:75:47:f0:75:1b:e9:f6:51:3b:
89:2b:53:0f:e2:d9:9c:64:88:d7:e6:35:e5:6a:46:
15:4a:41:11:90:cc:3a:a7:8b:f2:69:91:fe:d5:46:
e9:bc:39:a4:28:51:a8:8d:8a:77:7b:0c:26:e2:bf:
ce:77:4e:a6:05:cd:7e:6c:04:7b:ca:86:e1:1c:9f:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:71:62:0C:33:E3:A5:BD:8D:D1:EA:33:CD:1F:39:BF:81:30:3C:CB
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4b:e0:34:67:f8:ae:84:eb:3c:a4:ca:68:f7:57:69:86:b0:
fd:20:62:14:36:ac:a1:dc:8a:8c:69:f6:a6:c6:7a:55:5e:a2:
76:5f:61:58:a7:ff:4a:d6:5f:52:98:6d:a5:19:fa:eb:33:36:
c4:8d:fa:c7:3a:af:10:00:eb:83:8f:75:31:b0:75:dd:3b:6a:
29:0e:bf:80:0b:e5:45:6f:2b:47:71:d8:a2:af:75:2c:b3:24:
85:c5:c9:3c:1e:cd:16:a1:da:25:2f:8d:ae:bd:1d:2f:42:2e:
51:e2:8b:26:66:17:12:d5:6c:4a:4b:79:50:36:7a:53:aa:9a:
03:03:4d:c5:14:fe:27:52:6b:37:38:51:28:20:a0:47:85:54:
7e:33:ae:03:16:ba:6e:7f:31:0d:59:7e:c7:5e:ba:9a:8b:65:
88:2d:c6:49:16:52:63:96:8a:39:96:f8:80:8b:9a:6f:43:1b:
ac:30:e0:65:9c:90:38:da:f4:56:69:f8:e5:69:2b:d7:5b:7c:
f4:2e:b9:63:19:aa:03:a8:a7:5c:fd:c3:38:1b:da:51:6b:b0:
47:d4:19:01:21:e1:a9:ae:23:8c:3e:9c:4f:a9:ec:94:56:98:
6f:e2:52:2d:50:a4:01:33:77:0d:d6:d1:6e:5f:60:e9:f8:31:
3d:2d:c3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:07:32 2026 by rpki-client