Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File: zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier: V87lpT+Gp6G3pfEiutXMnCawG5AlVNyHdR8Vyc4j2cQ=
Subject key identifier: B5:2D:B6:22:92:FF:E8:41:39:7F:3E:CE:67:75:69:7D:41:3C:2D:3C
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial: 01A17CCED1C0E5EB82B55543D95EF27AA8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 10:01:31 +0000
Manifest this update: Tue 27 Oct 2026 10:01:31 +0000
Manifest next update: Wed 28 Oct 2026 10:01:31 +0000
Files and hashes: 1: CXkKc_BGGlQDVJndPZpJEIKApLM.roa (hash: lB6WL5NHR05zZ3JJcK7U/WiKpx7SIVQpEQDB/XRsPv0=)
2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: UK4TrAG0aWl6lOfi0qB3oJtuJcwfODUeHblAnIDVoC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:d1:c0:e5:eb:82:b5:55:43:d9:5e:f2:7a:a8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Validity
Not Before: Oct 27 10:01:31 2026 GMT
Not After : Oct 28 10:01:31 2026 GMT
Subject: CN=b52db62292ffe841397f3ece6775697d413c2d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:c2:1a:5d:69:3e:b1:fd:e1:22:72:b7:86:
be:2e:a5:19:bd:f4:77:e1:fa:12:86:ee:a9:dd:7a:
04:b4:82:20:df:1d:f0:c3:eb:6b:8e:f6:8d:a6:d3:
59:50:d7:28:2e:7f:af:f8:c3:8b:90:d5:cb:ed:0a:
a6:c3:87:5f:b2:88:61:ff:39:f3:fd:3f:54:b9:77:
5a:43:a8:6f:a3:35:18:4e:10:07:2a:ce:74:66:4e:
74:21:2f:b4:9f:d5:37:fc:08:32:f1:04:0c:56:98:
e7:25:f3:fd:e4:b8:32:72:8b:d4:03:0d:67:09:2d:
a6:55:8d:3d:18:2e:12:71:b6:24:00:ff:6a:dc:0a:
49:51:0e:ed:f8:e9:e0:6b:01:7c:91:35:90:8f:93:
58:82:da:2f:79:71:8c:0b:3c:c6:38:d0:c8:f2:fe:
e6:a0:1f:29:5d:26:84:5b:d3:6d:8c:a5:3d:64:b4:
c6:38:b3:f2:76:80:b7:69:93:93:d0:72:a3:64:31:
60:a5:71:c9:1b:7e:f7:54:1e:6a:3f:3b:65:43:fc:
4e:f1:e6:91:33:e5:8e:1f:68:a2:8e:08:bc:7a:00:
ec:45:bb:3b:74:7b:bc:ee:aa:92:a0:90:16:9d:58:
76:20:eb:1f:f5:3b:fa:b3:7b:15:f7:01:82:24:77:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2D:B6:22:92:FF:E8:41:39:7F:3E:CE:67:75:69:7D:41:3C:2D:3C
X509v3 Authority Key Identifier:
keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c1:37:ab:c1:34:3a:fd:4b:97:3b:7b:8a:40:6f:80:ff:af:
65:df:e3:a3:4b:5d:5f:72:7f:c2:f5:20:02:36:70:12:83:e2:
14:ec:f8:fa:08:7d:a3:ce:e7:e2:1b:7f:93:5d:aa:fe:17:17:
07:7d:c0:00:0b:98:31:98:82:8f:41:6f:55:06:d5:a0:1e:a8:
fa:75:ef:1c:58:9c:75:23:3a:cb:96:84:33:3c:61:6e:c3:f5:
9c:a1:5f:d8:17:50:12:a9:a3:4c:99:0d:d1:f7:d0:01:e8:36:
a5:d5:b2:5c:c1:52:80:3e:33:18:41:9f:37:38:3b:ce:12:f1:
56:f6:aa:92:22:da:91:ef:8b:c1:02:0e:f9:1a:54:7a:6d:49:
25:a0:d9:c6:a4:6f:1d:3c:1b:6e:68:be:84:08:55:ba:4f:47:
55:75:1e:5f:67:29:9e:a3:a6:dc:2b:07:9d:8a:9f:e4:89:21:
42:8e:7a:b1:5f:02:fa:20:00:9d:97:34:27:87:25:dc:20:f9:
15:2d:7f:8b:21:e4:06:b2:83:66:f8:1a:1c:e6:5f:f6:88:29:
d1:7c:af:f2:d6:53:4a:2b:4a:4a:0c:76:8d:8d:25:4f:f1:61:
63:2e:aa:3d:6c:2c:78:b0:5a:67:c1:0a:88:57:66:26:a2:7d:
2b:ee:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:21:29 2026 by rpki-client