Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
File: ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json)
Hash identifier: e8MdcrAal1C2B6pFbBf/MwM7o0ItvtQ+UrJUEJ3ApK0=
Subject key identifier: B6:72:14:F4:3D:4C:AC:47:E9:1A:E4:83:F8:E9:40:39:98:7D:36:1E
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 01A18299B243953886B62B91C0212773B633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 13:01:12 +0000
Manifest this update: Wed 28 Oct 2026 13:01:12 +0000
Manifest next update: Thu 29 Oct 2026 13:01:12 +0000
Files and hashes: 1: 3s8sY8JfXcq5h0JX5tklV5kK-kI.roa (hash: tUMXR+PdDpzmT4OFEkUcYoWlIAGQobO28dDLQShQPJw=)
2: ATgciNvIucjKCFQUFyNe0yS56Xs.roa (hash: ODwExdkuk2O0WB+oRGE/a1ipu8Cu3cgAGkwUAaoVX9Y=)
3: OQzv-VnaVoUaemq98kXrP_sXKa8.roa (hash: 0UtFVm4divpIKSWLm6cbL2r77Cn14CFuHmjdZonPbwc=)
4: RS2ZY1uc0JYuhYWkx4aN_m6o7qE.roa (hash: ustjYTj3tB8+/KIrC0a07UkmqBeIt1gvoyIyFDQVlds=)
5: Wg4SVphoReQnCpUyJ5-oZULRakI.roa (hash: Q8EhoBGzMhLpl/1N6VdUdhxyINS1Dda6nBjz3JP3ehw=)
6: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: OAJPYjN/YJpEp8bPhOZMt9+YRn4AbjuTmLVQsomjlQQ=)
7: brDP8rCtmy1_6zegBiE3p8TvEes.roa (hash: Z9tvowz9KVQdbieVlExnm4rsZGGsOyESicqYmRLZjd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:b2:43:95:38:86:b6:2b:91:c0:21:27:73:b6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Oct 28 13:01:12 2026 GMT
Not After : Oct 29 13:01:12 2026 GMT
Subject: CN=b67214f43d4cac47e91ae483f8e94039987d361e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:a9:b9:04:7a:f9:8c:98:2a:9c:5b:1f:5d:
ed:c4:da:90:90:ff:6c:f5:3b:74:70:73:16:d3:03:
0a:b2:a0:a9:78:ef:5b:0c:b7:80:7e:bb:5f:43:3b:
82:11:ab:c9:ec:d0:ed:57:8f:35:a9:1b:18:27:62:
d6:9f:41:a5:c2:6d:8e:a4:50:b2:a7:46:7a:03:7a:
c2:8f:09:87:6a:53:e7:d1:f5:38:35:78:0a:97:1d:
05:6d:e0:54:44:46:41:b0:7f:5d:8d:b5:8c:bb:ec:
38:e3:cd:9d:03:59:23:35:d2:62:f6:08:bb:87:d0:
0a:6e:3c:d4:c9:12:f7:5e:b0:04:92:65:0e:9a:a3:
77:ef:f0:38:d3:5c:37:ac:42:3a:be:ed:4d:16:da:
62:43:87:49:8e:b4:1d:a0:9e:cb:1c:bc:44:4f:6f:
91:7a:a5:5e:d0:e4:98:c4:29:f8:d7:f0:95:ea:3f:
f3:e8:c2:91:3e:1e:0d:81:c9:37:fb:05:eb:6e:2f:
b9:cd:98:6c:0c:04:c5:67:0f:03:30:1c:fe:8f:fd:
88:d2:79:a0:1f:00:65:10:87:df:18:0c:a4:64:66:
b9:ff:9a:88:70:be:be:73:6a:f9:30:5c:4f:ed:0b:
ad:81:21:a5:06:6a:5c:15:5d:bb:2f:9e:6e:3b:fe:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:72:14:F4:3D:4C:AC:47:E9:1A:E4:83:F8:E9:40:39:98:7D:36:1E
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:30:cf:18:79:63:d0:92:8a:93:b5:e7:08:5e:9f:56:c0:f1:
54:a7:49:bc:40:6f:4c:16:73:e6:15:ca:0c:d6:7d:f6:7c:bd:
44:3d:50:67:4f:65:4d:3d:da:26:4a:a9:b0:62:3c:64:04:ae:
b7:9d:8b:ad:18:b3:50:88:17:05:a7:31:02:3f:03:6d:13:c3:
1f:91:1b:cb:e7:d9:f9:e9:13:00:8f:18:f5:45:2a:0f:9a:42:
42:49:f7:d8:65:50:64:75:52:1a:b5:c6:13:a0:a1:46:7b:11:
69:b8:3e:c4:1d:42:0c:3f:70:81:c9:b1:bf:e0:8c:d6:03:ee:
f0:5b:a9:40:b3:20:d3:70:d1:77:0c:59:97:89:fd:ea:bc:75:
aa:73:31:76:6e:b4:12:d8:e0:d5:9a:bb:fc:13:41:68:64:7f:
80:8d:38:7d:5a:a4:84:bb:a4:3d:a3:0e:92:86:0d:7b:da:57:
44:c9:b3:1f:0b:0b:85:02:66:b7:91:2e:82:76:41:f6:c4:48:
34:74:9b:8b:9a:21:64:23:db:62:e8:89:2c:08:d2:b0:d1:45:
7b:5b:f8:17:56:aa:75:19:c8:b7:90:f1:7c:4c:83:29:5c:87:
11:e5:f6:4a:1b:65:e3:e4:2d:d7:b0:64:ab:8e:a0:99:59:4a:
71:eb:58:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:48:17 2026 by rpki-client