Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier: z4OfD7YX++Y4rD1XBNTmXb1aCUY8ZIpFavyjMy8lEeA=
Subject key identifier: F2:A0:D1:0D:B7:CF:3E:BA:35:00:F3:6A:1C:1E:42:F9:85:BB:84:5D
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial: 01A17F9885EFDD4BF670667974F2F74E5B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number: 1781
Signing time: Tue 27 Oct 2026 23:01:04 +0000
Manifest this update: Tue 27 Oct 2026 23:01:04 +0000
Manifest next update: Wed 28 Oct 2026 23:01:04 +0000
Files and hashes: 1: SYIf5Ik-OCMwc9Pf810Yroa_ZFU.roa (hash: 74Uxyj72SuLbr2jaxa3pXrDIfqGb08WX3YcRqaMlrGk=)
2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: N0eCNCYuwDuTti3B9OYnXhfNq8nMZNPACB3zIf/3SzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:85:ef:dd:4b:f6:70:66:79:74:f2:f7:4e:5b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Validity
Not Before: Oct 27 23:01:04 2026 GMT
Not After : Oct 28 23:01:04 2026 GMT
Subject: CN=f2a0d10db7cf3eba3500f36a1c1e42f985bb845d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e7:8a:6d:e0:14:89:85:8a:7f:94:d8:0a:d4:
47:52:e3:d0:fb:26:a1:cf:29:42:f6:81:cc:60:d6:
47:a3:c5:b7:6f:db:3a:a7:7e:b3:f2:d1:25:49:7c:
c8:10:d9:78:7c:9a:1c:c4:09:e4:60:b1:fe:f5:64:
45:4a:9b:46:21:a8:bf:b2:e1:52:a4:a7:0e:22:f4:
65:11:44:49:71:97:3e:a4:c3:19:04:3f:d3:14:71:
ab:fd:e8:e9:c0:44:58:eb:da:e8:1b:d4:54:e6:dd:
5b:4a:d2:16:31:73:17:2b:a2:67:58:6f:24:f5:2d:
b2:5f:3d:d1:d7:25:d0:e8:24:80:81:38:c5:e1:00:
da:1c:ee:da:a2:0a:0c:a3:f9:40:50:29:e6:89:31:
de:d7:8c:ef:e7:d4:a9:55:63:3f:9a:c3:14:29:86:
ed:a6:fd:8c:fe:e3:2c:38:61:3e:2c:f7:a7:01:73:
27:de:40:59:7d:75:12:ab:ff:7e:e5:fb:7a:26:21:
49:4a:22:1c:0c:22:02:51:ef:af:fe:18:48:60:56:
20:ca:c9:5f:a7:59:ee:0d:bb:09:63:9f:7c:ea:b6:
bc:fc:b2:3d:63:08:37:e5:d2:e5:28:be:67:9d:93:
e2:88:51:52:1b:2c:90:79:38:94:9f:82:6e:35:6e:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A0:D1:0D:B7:CF:3E:BA:35:00:F3:6A:1C:1E:42:F9:85:BB:84:5D
X509v3 Authority Key Identifier:
keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:49:1c:3f:b6:67:ac:ab:d3:2d:e1:f4:cb:0b:24:2a:64:7c:
f4:63:f6:1d:4d:1c:67:4c:13:80:c1:97:bb:95:a2:78:18:78:
6b:da:4c:9a:2d:30:77:fe:c7:32:1e:1b:08:c2:ae:42:af:e4:
66:5b:46:fa:87:82:12:5e:72:af:78:0e:b3:c2:95:bb:15:00:
d4:73:a3:6c:ad:4c:33:28:ea:ce:06:af:ed:09:ce:d0:7c:33:
4e:d2:23:9a:0a:5c:33:45:25:f1:7a:57:40:0d:32:cf:6c:e0:
dc:f4:10:94:5e:7e:de:c8:bf:5c:f0:ba:c3:89:85:34:1d:29:
4c:d1:49:a9:5e:d7:8d:1f:92:56:37:44:29:f6:af:eb:73:07:
60:d5:77:16:e9:aa:6e:3e:a1:94:a4:18:71:6c:c3:d0:4e:9a:
0a:f5:21:d9:b6:6a:02:33:56:7f:24:f5:b5:3d:e7:5d:5e:2d:
1b:11:c2:6a:5b:fd:54:f8:d3:55:11:36:51:45:87:aa:d4:dd:
6b:d5:03:ea:2b:81:e6:41:fa:45:d4:d1:15:2c:85:f4:58:a1:
21:f9:78:2a:83:45:57:fb:15:d6:ef:b5:34:84:4f:c6:ee:d9:
cb:e3:c4:d1:1f:c4:1c:f8:83:c6:9f:be:3a:59:c4:b9:04:5b:
ba:a0:a6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:53:05 2026 by rpki-client