Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
File: ZxzQcdyWC9yCmwvn40trYc-LCx4.mft (raw, json)
Hash identifier: OdaC4YrZr7XL90BL0JBJephbQLUdNUcRqDBKzJXWlYs=
Subject key identifier: F0:51:DF:F8:73:54:16:85:83:5F:A9:94:67:B7:05:38:B1:AC:13:F6
Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Certificate serial: 01A154E5A3D80A0086C91367F1743E98069C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
Manifest number: 048B
Signing time: Mon 19 Oct 2026 16:01:38 +0000
Manifest this update: Mon 19 Oct 2026 16:01:38 +0000
Manifest next update: Tue 20 Oct 2026 16:01:38 +0000
Files and hashes: 1: B0kj7SdwSZWmEU9GKPX-vqJAVao.roa (hash: UN4l73RmEx8CBEkdPrS/+GtzsuSkIQeGfMIfQBPpbKI=)
2: Mdx0wPKImju2r6Wn-sTkPv2XXCk.roa (hash: KkcVte1gTb6znaz/vnrVSs9UtNLYEStRQ8bGw7/kCho=)
3: ZxzQcdyWC9yCmwvn40trYc-LCx4.crl (hash: tOEKEv1HOqGs25wnTCU1EKo6Dipv2hUX1Kc3h+aqtK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:e5:a3:d8:0a:00:86:c9:13:67:f1:74:3e:98:06:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Validity
Not Before: Oct 19 16:01:38 2026 GMT
Not After : Oct 20 16:01:38 2026 GMT
Subject: CN=f051dff873541685835fa99467b70538b1ac13f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:cc:1b:14:ab:29:82:a1:d0:7f:8a:d1:dc:
8e:00:07:d8:09:0e:38:9e:1d:d4:26:72:bc:82:4a:
d6:89:cb:cd:20:05:be:9f:d1:11:4e:d4:23:91:5d:
21:cc:2f:8b:11:0d:a7:2e:e6:e2:41:e9:1a:ba:3b:
8e:74:94:3a:22:e2:1b:46:35:45:0c:f9:35:30:bc:
16:cf:59:b1:62:bf:29:ed:b4:32:e0:79:ed:8d:29:
10:d8:f9:f3:00:74:39:1c:56:b7:d2:20:a4:73:8b:
54:17:d1:94:98:ae:0d:c5:2c:f3:9e:bb:a2:d5:83:
61:fd:f0:e3:fa:82:26:73:24:1a:80:34:94:66:cb:
20:04:60:68:6c:de:6e:58:60:9e:79:40:11:0d:9b:
70:80:80:e6:49:eb:a9:33:d3:ec:1b:77:a7:ea:61:
4e:b4:43:bf:f2:8d:32:c9:9e:66:67:03:57:c0:00:
2b:f9:47:e7:0a:17:0e:99:e9:c3:a7:28:8a:94:64:
fb:d0:03:eb:e1:90:97:aa:7e:ce:2b:e4:d2:a6:8a:
3a:5b:b0:13:13:ca:b1:f7:72:de:2a:cc:84:37:a3:
a5:cd:32:e2:aa:84:f3:d3:07:62:19:28:6d:ba:c9:
47:55:14:dd:96:92:29:f4:c6:2b:5a:93:d1:e2:72:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:51:DF:F8:73:54:16:85:83:5F:A9:94:67:B7:05:38:B1:AC:13:F6
X509v3 Authority Key Identifier:
keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:22:79:b1:3c:6b:f4:ba:51:b9:87:ae:13:41:4d:a3:13:5f:
34:59:2b:2a:92:e4:78:5f:2b:2f:7a:fe:d9:19:4f:83:3f:be:
c8:d6:9f:cf:23:00:bb:6c:21:2d:e6:a4:ae:6c:76:78:70:b7:
9b:7d:a2:97:a2:dd:db:63:30:9c:cb:d9:5d:aa:90:22:94:cd:
cf:b2:69:4a:f2:e5:1c:12:13:e4:f6:c2:0b:b7:66:e4:80:c3:
24:57:c4:b8:82:4e:79:b9:95:57:a5:fa:d9:b6:be:81:48:f1:
c2:62:87:9a:af:d0:a1:fb:f9:d5:ba:cc:4c:a6:da:91:7d:0d:
38:14:98:77:dc:ef:ee:15:cd:2a:4f:bf:47:e8:07:3f:03:49:
7d:37:47:14:bf:36:c1:66:83:86:53:75:c4:5f:04:6a:af:8e:
e4:64:0a:0c:b9:49:37:ff:fc:2a:80:6a:7b:ad:8a:d9:25:3e:
c8:18:82:a9:bb:6a:e4:f2:0f:d8:16:42:f7:50:11:94:ea:e3:
a4:b9:14:90:63:81:18:c7:3c:9e:04:4a:81:f5:50:87:a0:37:
b8:41:34:b4:f7:76:3b:68:6a:14:5e:32:2c:71:d5:d5:69:74:
ef:af:1c:6d:76:26:bf:68:d9:f5:54:84:17:bd:63:e9:20:2e:
04:cd:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:53:31 2026 by rpki-client