Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: 0xIwF3Vbb0SpzjG82XCIQCZJruWAZs7rdp80Whwvvkc=
Subject key identifier: EF:5A:47:25:85:7C:2D:64:31:90:88:EC:DD:89:B9:50:19:B1:7E:6C
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 01A11597B650E349B640B3A267752B73FD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 17A0
Signing time: Wed 07 Oct 2026 09:00:26 +0000
Manifest this update: Wed 07 Oct 2026 09:00:26 +0000
Manifest next update: Thu 08 Oct 2026 09:00:26 +0000
Files and hashes: 1: q_Sdx_pDux5HG_B-3KML3ZxV1Q4.roa (hash: ht/8yca5f/4MvUCuC03a4MjP5eq5Ql1KG2x7zVYULEQ=)
2: v8cGXi_NSEn4R2Pj8ik0gEWzS6g.roa (hash: Tc7POOVIwZMXLz0qNFWoVFFcyKsqMyAM9BmZSJShLfc=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: NCEdMO2SNl1wvAuiM0qYL6vA+2aWZRaLxzSCs1b4TOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:97:b6:50:e3:49:b6:40:b3:a2:67:75:2b:73:fd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Oct 7 09:00:26 2026 GMT
Not After : Oct 8 09:00:26 2026 GMT
Subject: CN=ef5a4725857c2d64319088ecdd89b95019b17e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:21:4e:87:31:e0:00:9a:07:f8:e2:80:7c:04:
cd:fa:20:a3:6e:3c:fa:28:96:60:9b:db:37:27:bd:
b4:55:17:8a:d9:a0:70:d7:d0:7e:d5:4c:2a:4e:a0:
c8:f2:d1:f6:8e:07:46:d1:f0:3a:89:97:69:02:3e:
e7:99:2e:ee:69:d7:cd:6a:c5:6b:55:29:15:83:f1:
a0:26:ad:12:68:a0:84:59:62:76:4a:ac:b5:f8:5e:
f7:49:2d:7f:3d:4b:22:13:9a:e3:65:8c:e8:56:f4:
e1:bc:5d:b7:d2:50:34:ef:38:bf:ba:98:33:50:99:
40:2e:1b:b5:4c:32:af:04:8d:13:a6:a1:7c:fc:c7:
f1:20:e1:d7:fd:a4:82:ff:07:b9:9c:b6:41:7a:df:
55:ff:bf:54:da:7b:fc:08:4d:2f:02:6e:36:66:4e:
21:ff:30:8c:23:e9:bc:da:0f:b2:5e:f9:44:db:00:
cf:4f:54:aa:e1:4e:75:45:d9:fc:7f:27:af:a9:54:
86:02:74:74:12:dc:9e:cf:b3:4f:8a:cb:05:fc:39:
76:92:28:88:28:43:c2:9e:f8:87:63:ee:a7:6c:77:
59:9e:04:78:2f:37:d8:39:82:9d:4e:c9:aa:17:85:
de:85:f1:24:6c:98:34:72:3f:8f:cc:2e:56:e2:a8:
8a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:47:25:85:7C:2D:64:31:90:88:EC:DD:89:B9:50:19:B1:7E:6C
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ab:28:6e:47:b9:df:63:6d:87:b5:9d:dd:69:b5:ca:a0:59:
02:7b:2a:59:63:9c:2c:da:8f:94:73:d9:6d:77:56:0f:17:52:
99:29:bc:ba:da:e8:c7:a4:ef:cb:06:ce:4f:4e:8f:71:94:8f:
d1:ee:11:f8:f2:6a:be:65:db:5a:56:e3:3d:5c:7f:0a:47:ab:
d0:a0:e8:20:88:6b:87:70:94:96:bf:55:41:ed:97:c8:4d:2c:
1b:10:18:e8:e6:95:4e:f1:b7:be:e4:96:06:25:b3:de:48:6c:
06:53:80:76:38:95:86:49:52:76:b4:b8:b3:dd:78:fb:97:df:
94:96:3c:b5:15:ae:60:db:81:22:dc:d5:c2:c7:ba:35:b8:10:
a6:23:b3:3b:07:29:b0:5e:98:44:dd:75:9a:f1:20:ac:9b:e4:
a2:e9:05:88:93:f6:9a:ce:61:58:e9:d6:cc:e3:8d:13:f6:25:
11:eb:ae:bf:37:e1:90:c0:07:95:21:12:d2:c0:a9:1d:9a:25:
a7:c9:6e:22:8f:53:98:ab:43:43:ca:8a:e3:48:e8:98:d2:af:
b8:f8:f8:bb:31:7c:05:0d:45:38:0c:bb:60:2d:7b:6d:f5:ce:
cf:07:a3:0d:3d:bc:dd:8f:e0:fa:17:d4:d0:e0:98:d3:34:e5:
58:84:0e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:13:11 2026 by rpki-client