Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
File: zfyNbNSfmv4mTVQumpYU89SsHJ0.mft (raw, json)
Hash identifier: zVlEykBho2mpuDCMr39Hok4rqLW2H9Wzyk202Io35pY=
Subject key identifier: 5E:2C:64:91:A6:03:5D:AC:2B:60:A3:9B:5C:89:E7:9E:69:97:0B:2E
Authority key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
Certificate issuer: /CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Certificate serial: 01A18307B7ED0EF9D990E1387D4ADAA62B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
Manifest number: 1AC5
Signing time: Wed 28 Oct 2026 15:01:23 +0000
Manifest this update: Wed 28 Oct 2026 15:01:23 +0000
Manifest next update: Thu 29 Oct 2026 15:01:23 +0000
Files and hashes: 1: zfyNbNSfmv4mTVQumpYU89SsHJ0.crl (hash: F03HeDsf5Q4HN8gXsx8Bv2zd7z0kpKKnMM1mLCKOhNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:b7:ed:0e:f9:d9:90:e1:38:7d:4a:da:a6:2b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Validity
Not Before: Oct 28 15:01:23 2026 GMT
Not After : Oct 29 15:01:23 2026 GMT
Subject: CN=5e2c6491a6035dac2b60a39b5c89e79e69970b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:df:78:b2:12:a7:73:5a:74:d9:ec:85:29:
99:e5:bd:11:c8:92:16:97:1b:68:d6:13:3f:e7:da:
4d:d4:97:a8:37:31:b3:53:8e:ec:dc:a6:53:87:1f:
8e:dc:3d:ec:a3:b6:59:f9:0f:26:0a:2e:59:a3:60:
75:d1:74:5a:09:b1:40:ed:21:af:07:00:21:bf:97:
d7:0e:64:b0:bd:7a:cd:78:43:a0:4b:db:18:c6:39:
95:42:c7:64:91:89:3e:7d:73:64:b0:7c:aa:34:e8:
85:1a:90:97:70:ad:b9:ac:09:f4:74:43:88:26:35:
d7:4a:c0:f9:71:90:61:4f:01:a6:86:75:d2:5c:3e:
5b:52:25:bb:7a:07:f0:03:c7:b2:fe:a9:55:49:cc:
78:8a:61:74:f7:49:71:5a:fd:3d:bf:05:00:84:90:
cb:a5:41:eb:36:ad:8a:7f:46:98:48:49:31:a2:87:
a6:83:db:19:d4:cc:48:68:0b:f8:06:56:97:1b:14:
de:19:45:c9:35:5f:6a:9b:64:b8:a7:55:7b:37:06:
17:db:33:e4:01:dc:5b:27:fb:4d:80:f0:f8:9a:8b:
25:f5:f7:7b:9e:e1:97:49:0e:81:2b:25:79:82:5a:
1f:fd:d0:fa:44:c6:73:3e:53:d3:8c:0f:68:5b:87:
60:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2C:64:91:A6:03:5D:AC:2B:60:A3:9B:5C:89:E7:9E:69:97:0B:2E
X509v3 Authority Key Identifier:
keyid:CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:da:12:b0:7a:f7:d1:e6:42:55:20:0e:27:62:47:9c:92:e0:
b7:8d:7b:f0:a7:25:ac:56:c7:34:4d:f7:72:1f:2a:a2:7f:1b:
f2:2a:05:fc:da:4e:bd:22:3a:d5:29:12:52:4c:09:c5:96:48:
02:fb:26:da:4b:4a:06:e2:5f:c6:f5:8a:78:c2:0a:ae:0b:61:
2f:6f:ea:25:ee:c0:46:5d:32:57:e3:80:2c:e1:cf:63:4c:be:
ee:a7:4c:4e:7e:85:ee:5a:d8:9e:16:a0:39:da:37:38:e4:c9:
8c:19:15:a0:bc:60:13:56:a1:cc:f7:26:2b:42:31:f5:f1:47:
42:db:8b:4d:b6:07:cc:75:b2:3d:75:6e:22:f0:e4:ee:b7:48:
b7:10:9d:4f:37:3a:54:00:34:c1:1a:6d:a9:a8:fa:86:31:35:
87:af:ad:be:c0:fa:0b:30:e1:77:a9:30:cb:4c:26:b0:c5:a4:
88:5c:f5:32:e1:0e:bd:d3:b2:be:2e:40:17:38:27:d0:4e:ef:
fa:4f:42:36:71:18:03:32:f2:cc:3e:33:fb:bb:0d:bf:d8:90:
5d:ad:92:08:df:68:2e:3c:fd:ae:46:c3:59:8c:ff:a3:b6:89:
9d:60:6a:11:ba:ae:bf:0b:ff:ce:5d:7d:6f:47:33:74:25:bd:
ec:15:3f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:29:06 2026 by rpki-client