Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
File: zZEXAvST1u3htuhyvKzcuFQoK60.mft (raw, json)
Hash identifier: oRre7qvE52156FJXgyCwz01iOzlQ9cYPlNhYdA2cQzY=
Subject key identifier: 52:EC:5E:C9:4D:FD:3C:A6:A8:96:4F:78:3C:5C:A6:51:CB:EF:1F:B1
Authority key identifier: CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
Certificate issuer: /CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Certificate serial: 01A17ADF6C1C2CD4131C9D5004F9D95FDD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
Manifest number: 1129
Signing time: Tue 27 Oct 2026 01:00:24 +0000
Manifest this update: Tue 27 Oct 2026 01:00:24 +0000
Manifest next update: Wed 28 Oct 2026 01:00:24 +0000
Files and hashes: 1: Yac91t2eogvz5cwAb2fKP1E4ctw.roa (hash: GRCEipXvu/z6v8Q0987NE/jFkhe0wRikv0AvdJFVTDI=)
2: zZEXAvST1u3htuhyvKzcuFQoK60.crl (hash: ncXxR8AqHi6v5ITH/ZtN/cD1PmHNy3GXm2qQMdvxP68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:6c:1c:2c:d4:13:1c:9d:50:04:f9:d9:5f:dd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Validity
Not Before: Oct 27 01:00:24 2026 GMT
Not After : Oct 28 01:00:24 2026 GMT
Subject: CN=52ec5ec94dfd3ca6a8964f783c5ca651cbef1fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:1d:43:2b:d2:ab:4f:43:0f:cc:b6:50:4a:
c1:15:44:06:36:83:2a:6a:d2:70:f3:f7:20:db:f6:
42:90:59:88:60:b1:c7:c0:2f:2a:b2:33:66:f6:61:
9b:10:fc:be:e2:3c:95:4c:ad:7c:9f:07:b8:8d:5d:
5a:35:ec:a2:d7:47:d3:2a:f4:2e:2e:b4:58:84:1b:
73:c3:da:00:bd:d3:bc:de:f9:6e:a8:02:82:2e:70:
6a:4a:11:32:55:35:89:27:d1:8b:45:db:e3:b8:f0:
83:42:55:3c:7e:5f:1d:54:66:99:1d:11:5a:9f:6f:
29:98:44:01:31:0b:4f:38:a9:47:19:b2:1e:41:08:
53:d2:18:7a:e0:1d:df:fc:c5:28:fc:9a:de:5a:67:
92:81:05:3c:40:8f:0c:af:13:48:8b:65:6c:7a:15:
50:f5:7a:f0:55:55:39:20:ad:01:d0:68:c9:11:4c:
5b:ca:c1:be:d0:e6:40:fa:50:b4:8a:1c:f5:be:91:
8d:87:88:61:a6:9a:13:f3:14:cc:31:c3:c0:81:22:
3b:5e:e8:b7:12:4c:c7:cf:ef:1b:bb:a2:98:bc:ac:
26:43:36:0d:15:79:44:c3:1f:0e:e2:bb:77:b9:c3:
ae:89:4c:49:48:44:1e:a8:df:a1:09:76:34:f7:47:
13:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EC:5E:C9:4D:FD:3C:A6:A8:96:4F:78:3C:5C:A6:51:CB:EF:1F:B1
X509v3 Authority Key Identifier:
keyid:CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:68:fd:f8:77:8b:71:3c:16:54:09:94:30:71:67:87:74:39:
4b:b8:d0:e1:a0:1e:8b:0a:3f:e0:5e:7f:ed:86:a0:8f:ce:89:
c2:64:c0:f8:b7:df:a3:ab:15:aa:11:cf:b7:46:f3:02:f0:02:
ef:2e:5a:0c:e3:0a:28:29:9a:22:e2:cb:0a:97:8f:b0:fc:e0:
e6:85:3a:6c:40:c7:ff:3c:ae:17:bf:75:b2:b4:ea:1a:24:b8:
b3:92:47:bf:36:9c:31:7e:06:97:9b:df:18:9e:90:6e:5c:4c:
ff:bd:db:e3:89:7f:6c:06:33:b0:9f:fd:8b:e0:91:75:1b:27:
3a:f8:93:5f:7a:13:9e:6d:a4:97:86:3e:83:1a:9f:f8:c6:ca:
99:b7:0b:31:e5:c9:95:4d:82:f8:fe:e4:27:3e:67:5a:d6:9b:
12:82:41:5f:6a:4f:05:89:b2:ca:2e:09:22:99:51:c9:19:4f:
a2:cd:7c:ac:9e:b4:ca:62:86:b4:be:69:27:16:ff:af:68:f1:
85:e5:ba:57:17:a0:98:17:a0:04:74:f8:df:dc:75:61:25:0f:
29:78:2f:b8:80:4c:83:c8:11:21:16:05:ea:b3:9e:e5:65:76:
e2:e2:d6:a0:ab:70:dc:b4:5d:93:f7:de:57:70:bc:27:60:77:
92:cd:2f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:21:48 2026 by rpki-client