Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: PJ2+8DYY+BtpOR74LSNk/gktGNMoyBV8KBKYZAFhhaY=
Subject key identifier: 3C:89:EC:46:8B:0A:26:C9:E3:90:91:75:F4:D0:C5:3B:40:76:A9:83
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 01A17A04934877545D567FDE389CD9EAE5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 1A56
Signing time: Mon 26 Oct 2026 21:01:22 +0000
Manifest this update: Mon 26 Oct 2026 21:01:22 +0000
Manifest next update: Tue 27 Oct 2026 21:01:22 +0000
Files and hashes: 1: dZjxO1t1y7iTrJ-KRqPRE_p1jMA.roa (hash: B1GSi5keg2Ocppx2D4kG/XL7mz409lb5KLKl79R0HCE=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: 5pKapApUmpAi37uBAXGAllon20Uxi77PHHSMSuWDnfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:93:48:77:54:5d:56:7f:de:38:9c:d9:ea:e5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Oct 26 21:01:22 2026 GMT
Not After : Oct 27 21:01:22 2026 GMT
Subject: CN=3c89ec468b0a26c9e3909175f4d0c53b4076a983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:ea:3e:05:72:68:95:2b:1f:c4:c6:72:9b:
f9:b9:9f:2d:9a:00:99:9b:e7:63:b7:8e:8e:2f:30:
0c:79:0b:d2:3b:69:3d:1e:53:21:9f:5c:0d:39:27:
03:90:29:e5:29:46:06:42:e9:79:43:3d:60:68:a6:
24:c8:25:f3:d7:61:97:15:d9:3d:1c:18:6e:ea:54:
02:12:b7:05:fa:2a:0b:4e:ab:9a:11:83:5c:ee:74:
fb:bf:a8:63:39:f1:9e:5c:38:87:6b:d6:76:77:a9:
68:be:6b:eb:78:7a:73:8a:c6:5c:d2:7f:56:7f:ac:
e6:ad:a2:ae:a1:98:47:54:81:f5:89:4d:6d:1f:ae:
f8:54:ce:fd:af:3b:a3:bf:f0:65:85:6c:26:50:68:
ff:94:95:78:81:45:c9:f3:4c:a1:53:fa:71:fa:e2:
6a:fe:dd:30:ab:fd:74:21:f9:98:d8:33:8f:8a:97:
55:d3:92:aa:98:15:32:49:fa:2a:b6:32:4c:87:6f:
f5:7e:66:5f:2d:c2:4e:85:84:90:4b:4e:f6:c9:89:
d7:ee:3e:3d:c6:ad:ad:7b:fa:86:91:e0:1a:70:91:
f6:d8:26:a1:4e:50:2f:b9:85:26:ab:16:ed:74:8c:
52:b4:c5:1f:71:9c:24:1e:df:a4:37:e4:7a:e6:70:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:89:EC:46:8B:0A:26:C9:E3:90:91:75:F4:D0:C5:3B:40:76:A9:83
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a3:95:0e:66:8a:bc:63:e5:b2:22:a6:b0:58:33:21:fd:fe:
96:01:bf:c8:00:b7:b0:62:ba:aa:3d:65:c2:94:cc:68:29:57:
39:ba:ab:89:59:52:19:f2:82:94:9e:50:47:82:5e:89:ae:f7:
05:d2:1e:db:54:d8:ab:12:95:eb:d8:0e:ce:31:09:d0:ab:52:
34:b6:27:9c:d5:d9:c2:d5:43:14:f2:d8:5d:17:1e:82:ff:c8:
9c:f4:d9:33:1e:97:8a:4a:e0:96:22:07:c8:d3:a1:a2:b2:fa:
48:ef:8f:cb:2d:74:81:8f:1f:68:a9:45:fc:79:e0:72:f8:81:
8a:42:35:05:26:87:80:8a:6c:64:63:69:fa:4a:03:f0:4e:d6:
57:fd:7c:d6:78:a3:e2:17:f4:66:25:85:3a:22:05:98:f3:83:
f0:85:99:da:20:2d:ea:91:38:83:5c:43:72:c1:a9:78:cd:c4:
6e:b6:30:3c:93:a1:72:d1:90:1c:bb:99:e0:50:03:02:a6:bb:
6d:38:23:96:1c:f8:7e:a3:40:d9:98:ba:85:df:1d:54:c1:9f:
f6:9e:c6:8e:57:9c:1d:cf:37:9c:42:fa:47:d7:df:b0:11:43:
86:20:0f:60:23:2b:8c:43:96:93:3d:cb:54:6f:3e:4a:ba:db:
29:33:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:24:44 2026 by rpki-client