Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier: l9/wReJEP8oYD3G9pjTUP+4qxJ2MBONaUI61iDFbvzs=
Subject key identifier: 5E:40:1A:F1:F0:A8:25:D6:01:FD:56:F9:5F:37:A2:90:1B:E3:0A:BD
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 01A13AB72274F01B5ACE618C24F19D7FDF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number: 0BD7
Signing time: Wed 14 Oct 2026 14:00:42 +0000
Manifest this update: Wed 14 Oct 2026 14:00:42 +0000
Manifest next update: Thu 15 Oct 2026 14:00:42 +0000
Files and hashes: 1: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: RPBkJiMDAzUeb+ToJQ5xRel1v56+w7OoNL2YEIh1s+M=)
2: ekOzOiDdfxxEUE52B61ICsigaF0.roa (hash: 6fj4c7wjlH2wB374dMtlshl1OSG/zfWE+ZknbaJj2LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:b7:22:74:f0:1b:5a:ce:61:8c:24:f1:9d:7f:df:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Oct 14 14:00:42 2026 GMT
Not After : Oct 15 14:00:42 2026 GMT
Subject: CN=5e401af1f0a825d601fd56f95f37a2901be30abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:7a:ce:72:38:ca:08:dd:63:8d:d7:92:2a:
cd:02:f7:e2:fa:00:38:08:ed:6b:5f:e6:c8:e6:e1:
d4:1a:59:df:fe:34:44:63:b3:16:f8:5e:c2:80:6b:
ff:b8:89:7b:73:2c:b5:2a:39:9a:cd:82:16:24:f3:
97:11:d3:4c:fc:1b:92:e6:43:49:95:32:c3:1a:ce:
8d:99:26:f4:7a:93:11:c1:15:8f:fd:f4:79:9a:14:
32:83:01:ca:9b:4d:9f:47:77:20:b4:9c:b2:2d:52:
f9:4c:2d:14:40:92:15:3a:c9:34:25:11:27:b7:09:
38:c5:73:f2:65:32:42:d0:9b:58:af:1e:a2:e1:9a:
f4:4a:80:eb:f2:bf:b3:66:f9:6b:53:74:de:c6:20:
0f:96:89:98:8e:ff:8c:45:17:d6:4e:e6:e1:99:94:
3e:c1:07:dd:f5:a5:27:da:44:3f:76:e6:00:7f:9f:
16:92:43:24:13:ed:13:63:7b:e7:e9:d3:0e:b9:bf:
ab:92:7c:18:af:a6:ad:57:b8:4d:ec:8e:ab:56:f8:
8f:48:1e:61:d5:5a:1b:d8:db:b8:6f:25:99:95:0b:
78:ca:5a:f2:33:3c:97:90:38:1b:4b:8d:de:2c:ce:
36:d4:1b:37:c4:1a:41:da:87:26:63:53:a8:fc:53:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:40:1A:F1:F0:A8:25:D6:01:FD:56:F9:5F:37:A2:90:1B:E3:0A:BD
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3e:b6:1e:af:f2:bf:79:3e:fb:1c:e3:51:fc:f9:49:9c:86:
4e:36:0e:b5:b8:ad:48:50:e6:31:86:ce:ed:fe:2d:f1:08:2c:
c0:c9:a2:ec:7c:9e:c2:f3:d2:c9:80:d2:4e:ce:9e:c7:b6:5a:
b4:18:5f:be:ea:67:e3:b5:0a:d8:0f:87:d0:bd:f5:4f:79:33:
34:db:ec:a0:48:88:be:eb:a1:50:85:96:a5:45:7f:db:69:93:
83:bd:4c:98:3d:f0:28:6a:01:a3:d2:42:6b:08:93:2a:a6:b2:
3e:fd:f5:80:ac:39:1d:44:fe:fd:6a:88:48:09:b4:22:d0:cb:
91:56:0f:24:6b:41:29:9d:1b:41:39:85:90:5d:0c:81:5c:9b:
bd:ee:39:14:8e:00:6f:6e:f5:22:f2:71:7c:fa:7c:49:bb:5d:
98:36:f6:48:0b:55:24:ef:c6:02:39:ce:09:66:d3:03:9f:f9:
bc:e4:e0:a4:f9:c0:4b:b6:90:23:fc:93:c3:e5:f6:df:be:62:
0d:5e:39:1f:a7:be:f3:8b:3f:7b:28:f3:84:ef:75:cb:39:81:
fe:35:83:0b:2f:c3:fe:e4:f0:ed:57:97:09:8a:97:6f:67:1c:
85:24:3c:7c:f2:7c:9d:2c:da:46:d1:62:31:c4:08:5b:56:f4:
bb:e8:fd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:31:32 2026 by rpki-client