Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: 4Wk1CuQPpvAOvmxvdtUyA8jZNOp36pti8tJFtDSLeXk=
Subject key identifier: 55:DD:13:DB:2A:2A:81:40:11:31:39:75:EC:3E:EA:5C:D3:4F:77:9A
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 01A1A74B7C70F75822C8F24196FDC06A178D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 14E6
Signing time: Wed 04 Nov 2026 16:01:44 +0000
Manifest this update: Wed 04 Nov 2026 16:01:44 +0000
Manifest next update: Thu 05 Nov 2026 16:01:44 +0000
Files and hashes: 1: 3XuA-YVzPEgJjeMJ8s1Vm2HEV7M.roa (hash: L2BlNBBMkivGXWvUezO7Aw0uWHpwLq/KSkHq0trlQZE=)
2: 9_TVXot_dyIkEe9KiLsuyW2oktk.roa (hash: AY0ZbEX8AuKpfJf3mMe1LHPcHhetoh8C291fNwOvGkw=)
3: M2b0AyIxBEZE26l78yx_U6jH-HM.roa (hash: qI3z2lgsBJDNei5CDronPrCJiOhj9yjVA1Waw1BZhZw=)
4: g-0OBByPctwGMoiSp7Ius3ERPd4.roa (hash: 7grKgnJNYRu+Mi3jBPcTs7JlkWsOZWG3+pqSyc+rfEE=)
5: l42LyB_1C2P-LllZFiZxTraA8VY.roa (hash: DBvrQLij/XijOP3rNHrPmHSYFZ7FdPcqe5/jQy1zmiA=)
6: l9YATmb7OlSNk8-X-Gw47s_i3j8.roa (hash: tjgPLQtmZhv+xT2ZVPBDEllJQosoi/bzaWAa0mefrzk=)
7: s13GH00hV2jIxjzw03ezHAtEnrE.roa (hash: wwzOhbN/GMGtfE1ca6NvpkVgz3P26P0FotyIBvRPTpA=)
8: wsv3RhVPC0LRVw4Iv-_qJ-xb_MA.roa (hash: htIN8qHXgg74PxltVLjdHQI1GM5oys81YrYBTFBjHyw=)
9: zVdth24X5nqjsfHBDas52yk14is.crl (hash: 3t5LGMcwB3aBp0qxRbSD5YiJ6X+tUrChvENeORuy44A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 16:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:4b:7c:70:f7:58:22:c8:f2:41:96:fd:c0:6a:17:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Nov 4 16:01:44 2026 GMT
Not After : Nov 5 16:01:44 2026 GMT
Subject: CN=55dd13db2a2a814011313975ec3eea5cd34f779a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:24:8b:e9:fa:96:11:e0:15:99:b5:35:c5:59:
d8:23:1f:22:80:0b:dd:60:2f:8c:3c:04:98:6f:2b:
a7:6a:50:b0:da:b8:80:0f:0c:58:b5:9b:b1:24:59:
12:1c:eb:e3:3f:b6:8b:b7:aa:81:cf:6e:65:e0:9a:
f1:a9:47:44:a3:23:7e:36:c9:91:87:56:6b:51:25:
04:e2:bf:fa:29:83:c7:25:d6:b6:be:e7:cc:2c:92:
e3:92:75:34:11:12:33:cd:fa:96:80:b3:cd:a2:cc:
8b:4d:fa:d4:8d:65:62:79:c9:55:05:05:13:db:21:
79:36:3c:2b:7f:ce:8f:9d:2e:f3:15:84:5f:0c:fa:
cc:c5:da:2c:6e:d6:1e:57:62:18:62:92:75:42:33:
e9:e7:e2:6e:ee:60:da:f6:fe:81:7c:46:0a:e7:4a:
7f:ad:4d:ee:f3:21:c8:ff:29:c9:20:2f:bf:45:07:
f4:5d:71:a5:d4:d6:ad:93:de:c2:32:35:cb:9f:07:
33:4f:93:44:30:84:e6:1f:e8:65:a3:34:50:26:e2:
23:90:39:20:1b:d0:a9:42:b0:dc:a1:7d:d3:19:70:
cc:90:eb:87:58:9d:3e:ac:87:8f:fa:22:a9:fb:d5:
94:33:2f:db:d9:ee:7d:17:c7:46:f1:31:3c:48:22:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DD:13:DB:2A:2A:81:40:11:31:39:75:EC:3E:EA:5C:D3:4F:77:9A
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:65:b8:70:6d:6a:3c:d1:b7:6f:0b:af:64:94:c8:00:66:8e:
3e:7b:db:53:2e:1e:0b:d4:d1:8d:20:fd:1e:2f:0d:6c:e7:ac:
3e:69:95:01:68:4b:95:f8:fa:55:7c:52:dd:b9:1e:c4:a8:b7:
b7:69:ff:37:98:d5:e8:c4:f7:40:64:8d:19:8b:c8:9d:c5:f4:
2c:e2:1e:c1:32:c3:31:7a:11:42:7c:9c:64:da:22:15:68:34:
e4:ea:f1:7b:fd:9d:a1:44:b7:55:17:9e:79:d1:df:84:33:45:
0f:44:6e:3b:a7:b8:91:a9:5b:23:50:ad:21:2a:a7:a3:c9:b2:
15:4e:54:8f:3d:63:af:e5:38:d9:33:a8:63:ee:74:0a:fe:e1:
8c:ba:1e:71:7f:23:86:89:27:79:e1:b9:8d:aa:e5:52:f3:c9:
96:3a:c2:fb:74:9a:99:97:4c:28:17:df:b9:2f:0d:b5:c8:2a:
74:aa:a4:76:ac:5d:7a:f2:86:0a:5c:bd:33:a1:ea:dc:13:1b:
d2:e7:ff:2d:9b:61:b8:0c:bc:fc:53:26:01:b8:28:a7:a7:76:
4c:3c:d7:bf:1b:b7:a3:36:39:98:8f:37:d2:1f:5d:22:57:ea:
e1:f8:e4:cf:fe:1d:03:33:af:b8:59:a0:d4:38:a9:a6:df:86:
f8:12:d4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:44:17 2026 by rpki-client