Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File: _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier: G/SODEUat9Xrkq8YEzLAClL6R/VGcaSfTDBNf1bQBQE=
Subject key identifier: 27:3A:1D:9B:9E:5C:73:D4:6F:91:CA:86:F7:BF:4C:00:17:6B:40:04
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 01A16232900F229A9DDC3B15240BA120B3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number: 08B2
Signing time: Thu 22 Oct 2026 06:00:43 +0000
Manifest this update: Thu 22 Oct 2026 06:00:43 +0000
Manifest next update: Fri 23 Oct 2026 06:00:43 +0000
Files and hashes: 1: 1BBaPp941n7lRekLls2gkEPkxSw.roa (hash: Mey4F7CLklthEIV3FcO4A8tKfmRaDpoJ7U+sPCU8Dmg=)
2: KMzQyZn0sL4K5ZP9K9I0Og-xt_U.roa (hash: Gf/LGVEeT1adLQAQqGIqK3h3EJC7/QXPQ3sFnCSBko8=)
3: O-iagWg9GVze1N-qb1ZeT9IJcTk.roa (hash: 2tIqkqB1u0MXJ3GlgzzbL3tL3nxAAGsb6mDhKKaUmLU=)
4: RHPDs6sUuiLT-opMfIoVNA3PEBU.roa (hash: r6LvBHgYmuPZ9hX2eAYd0nzis+vBTF0gYS9uk7yNew0=)
5: VhOF_-ZwH-Ij9c572yDNjux4fzw.roa (hash: Nhl3pkPtydmkOvzTuIKFasUFKkUenmuHlPilrVP3JII=)
6: Y9ihmV93zK8JMhpBWC6s3FEAd_s.roa (hash: Qc0l0Xa+qhsOrfZPm67YxB9qiP7Vo3I0Yg8mibRMIZk=)
7: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: yWtiGsqVsrHzK8C/5JqURlJUwoe0MKs9CJMhPVY7cWk=)
8: a9tH5TPsdMc7VNawu4-mRWegXQE.roa (hash: ruRkSgxmBG3LgJIf/H+dDcjTlDpmTjUbwHqWldUcrQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:32:90:0f:22:9a:9d:dc:3b:15:24:0b:a1:20:b3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Oct 22 06:00:43 2026 GMT
Not After : Oct 23 06:00:43 2026 GMT
Subject: CN=273a1d9b9e5c73d46f91ca86f7bf4c00176b4004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:4f:d6:a7:8f:4e:96:29:5c:14:d3:70:41:
58:06:d4:63:21:43:bd:e0:a1:58:48:d1:c9:d7:48:
fa:b9:17:54:45:f6:0e:9d:0b:59:4b:69:37:71:9d:
04:1c:5e:b0:c6:01:bc:4e:df:57:b4:6b:29:f0:ad:
cf:b6:c9:35:55:1e:4a:33:06:43:f8:2b:8d:b8:49:
15:a5:d7:61:d6:77:70:11:3c:ca:7b:63:29:ed:ec:
32:1d:93:b1:9b:d8:81:dc:a2:b5:f0:10:76:fa:f8:
ed:de:ae:71:d9:0c:ed:d8:09:13:09:06:3f:8a:c4:
17:43:00:eb:4f:80:e6:c5:e5:e5:19:f9:d2:95:65:
92:ac:bc:77:eb:6a:04:f9:f8:a9:9f:7d:29:c3:17:
7f:5e:e2:c8:e9:ef:46:1b:9b:8b:4d:82:a2:0d:62:
6f:ef:65:77:8a:13:56:78:8b:7e:40:89:82:fc:c1:
ea:9d:0b:fb:4e:06:d6:29:bf:be:be:b8:be:3f:bd:
4f:62:a4:d3:4a:8b:b8:b5:4c:7a:4f:ef:ba:96:37:
d3:3e:e4:7b:62:be:ec:3f:70:c2:85:8d:a7:68:b0:
77:7b:21:5e:2a:ab:e2:6b:16:7c:55:85:ac:71:52:
27:ce:c8:51:ce:f1:17:6b:a8:a3:61:55:de:2b:03:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3A:1D:9B:9E:5C:73:D4:6F:91:CA:86:F7:BF:4C:00:17:6B:40:04
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2b:ae:80:81:6e:08:12:3a:64:71:df:bb:72:7f:7f:0b:3c:
43:92:28:c1:75:0f:e6:6a:5e:37:fd:6b:c7:33:3b:e9:42:9d:
34:ec:2c:cb:9d:bc:8b:70:3e:02:6b:11:6a:fb:dd:82:41:23:
9d:15:35:5d:dd:88:b8:9f:a7:e4:ba:d1:f1:27:45:69:35:07:
b0:30:db:85:e4:60:fc:12:d2:e8:7c:3a:31:ba:7b:af:bd:de:
88:29:f7:8f:a2:77:c6:ae:80:bd:fc:c5:fc:9d:ce:01:a4:85:
b3:0e:34:7d:5a:b4:e4:55:84:b8:e7:37:51:9d:5e:43:09:20:
08:9e:9a:2e:9a:c9:47:61:8a:a3:8b:3f:84:88:e7:e3:d9:86:
45:0d:a8:9d:78:ce:4c:a6:0f:a4:8b:76:36:23:cc:ff:b3:f9:
65:11:4e:2f:75:97:c3:cd:d9:92:bf:f3:71:e7:fe:57:52:dc:
56:45:30:87:a7:ea:bb:65:72:cb:92:81:65:1c:48:03:74:49:
2a:5c:97:43:59:5f:d9:70:6f:6c:b0:4b:10:11:25:2c:15:0f:
dc:cd:55:be:06:06:aa:35:8d:28:70:64:c8:bc:9a:6f:3b:35:
bc:64:0a:5d:d9:ce:3d:e3:bc:d7:88:f4:16:f9:dc:0f:4d:37:
bd:86:26:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:36:19 2026 by rpki-client