Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
File: ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json)
Hash identifier: r2g/wzqe8qDvvYUijPFlIF7SJJ3ZSXTnp/7YJh0z+SI=
Subject key identifier: 39:06:34:F8:3D:4C:DD:4E:6B:69:CD:3E:8A:B8:BA:1D:2F:EB:7A:1A
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial: 01A17C28CFC1BEC5B2E35EB22070F256068A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 07:00:11 +0000
Manifest this update: Tue 27 Oct 2026 07:00:11 +0000
Manifest next update: Wed 28 Oct 2026 07:00:11 +0000
Files and hashes: 1: LEZ2eernw3AVIu_DBAVXUMvBBUI.roa (hash: mWWMsuTtrCWfoaF45z7yHf2yqMTPnwnlxC/hcOPnnAg=)
2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: LBrjdApUK/RtNahGDkUuW0OwcdeTvn7da9WO3Rbgphs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:cf:c1:be:c5:b2:e3:5e:b2:20:70:f2:56:06:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Validity
Not Before: Oct 27 07:00:11 2026 GMT
Not After : Oct 28 07:00:11 2026 GMT
Subject: CN=390634f83d4cdd4e6b69cd3e8ab8ba1d2feb7a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:82:18:8c:99:9b:b3:58:1c:c6:21:54:38:
fb:5b:77:7a:f9:66:07:f8:42:fe:2f:ab:b2:52:86:
c0:94:1f:39:e7:4d:00:d6:69:fb:73:f3:a0:eb:a6:
94:77:9f:f8:35:e1:f4:bd:94:7b:a4:5b:70:d1:18:
21:da:86:79:b4:4d:e2:13:25:8e:51:94:28:e0:9f:
de:9b:ea:b1:ab:41:ff:b4:35:e4:28:03:32:f6:be:
bb:2c:e0:fe:91:8a:08:07:fb:f7:67:8a:41:03:a4:
0f:4b:31:05:1f:ab:93:f0:96:79:22:24:a7:b9:30:
74:81:77:29:a2:5f:6c:59:c3:23:3f:ff:f6:e6:9c:
a2:b4:62:56:86:a8:79:55:0c:85:8d:3f:3c:7d:0b:
fe:d6:81:6e:7b:f8:0f:41:f0:30:2c:7d:29:10:25:
2b:76:fe:f9:81:3d:3a:63:81:fc:ca:66:ea:79:ee:
ac:f8:e4:41:0f:c6:ce:f4:f3:a3:3d:26:16:e0:55:
c5:b7:00:6a:81:f7:31:81:b0:7c:52:2e:85:1b:0b:
e2:e3:f9:8c:05:3d:14:36:84:b7:f0:fc:5d:b2:88:
7b:41:6e:5b:af:58:ba:0d:e7:5c:51:97:43:c4:66:
65:b8:04:b3:8d:9f:69:64:72:0a:5b:49:d0:9d:71:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:06:34:F8:3D:4C:DD:4E:6B:69:CD:3E:8A:B8:BA:1D:2F:EB:7A:1A
X509v3 Authority Key Identifier:
keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0c:d5:54:b6:74:ac:ed:20:df:29:96:10:60:29:80:ec:e1:
e0:59:8e:71:27:8b:84:ea:83:42:ff:88:9b:5e:85:3b:42:0d:
b6:5e:df:ac:4d:23:cc:10:7d:de:95:41:b2:b7:73:d1:05:41:
d0:ed:37:8a:a0:17:65:2f:d3:be:83:44:1c:1b:e2:1b:c1:1d:
4a:ec:f4:98:ec:9a:7b:d0:89:27:c6:73:59:b6:3c:c3:b1:0d:
fc:d5:ed:a7:08:16:2f:4d:f7:64:73:26:bc:dd:a3:59:38:92:
de:c5:46:f7:1e:db:60:46:84:33:f6:c3:a8:35:46:70:0c:d3:
19:9e:93:61:33:cb:1c:26:37:a9:16:60:80:4c:1f:cf:29:b0:
4d:a0:f7:95:41:e1:38:56:49:07:bc:68:88:b4:f1:b2:d6:d5:
e7:9d:8b:54:ba:ab:85:c6:97:e8:a0:71:88:67:c8:08:89:25:
ab:16:a2:dc:27:52:03:e4:a2:1e:75:d8:45:f0:ba:f5:dd:1e:
83:e0:6d:68:38:5e:ad:0f:4b:df:a8:16:78:fb:e4:b1:0d:14:
a1:dd:01:78:3d:03:bb:54:24:a0:69:d1:0c:c0:c2:6b:14:55:
a2:4f:1c:09:5d:ec:86:f4:f9:88:68:72:ae:da:e3:12:88:f8:
8c:26:fe:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:16:30 2026 by rpki-client