Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
File: z312VOh85PlnktVlxW4ZH0Ten1o.mft (raw, json)
Hash identifier: oQQhPHcENnKW0OhIVDHEaEiwElJMt16uuUyz2cX7GTQ=
Subject key identifier: EE:96:68:69:64:59:1D:32:7B:8C:B0:1A:4A:ED:81:89:15:9A:E8:F9
Authority key identifier: CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
Certificate issuer: /CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Certificate serial: 01A17A71F6E74C5C5A3AAECB87B4CC42CC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
Manifest number: 13D6
Signing time: Mon 26 Oct 2026 23:00:51 +0000
Manifest this update: Mon 26 Oct 2026 23:00:51 +0000
Manifest next update: Tue 27 Oct 2026 23:00:51 +0000
Files and hashes: 1: GSjgftqq3fsasoRBiwgyoGVynxk.roa (hash: 9bH/WK8qEWYXbBVodpWZWBBCr2Ad6muHm/adFtN+AO0=)
2: z312VOh85PlnktVlxW4ZH0Ten1o.crl (hash: EoEXwQtL4XaYqogpTHFrHLs/Oxv/aQ8UNYe58zMG4XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:f6:e7:4c:5c:5a:3a:ae:cb:87:b4:cc:42:cc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Validity
Not Before: Oct 26 23:00:51 2026 GMT
Not After : Oct 27 23:00:51 2026 GMT
Subject: CN=ee96686964591d327b8cb01a4aed8189159ae8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:df:a7:8e:54:03:31:92:8f:4b:24:dd:fc:
92:48:6a:76:81:bb:42:08:93:78:c2:ff:e5:df:5b:
0a:de:51:7d:21:92:0c:38:3f:b0:41:3f:3a:43:7a:
63:6d:d5:c2:7a:62:56:5c:1d:eb:fc:97:5e:7c:16:
28:33:7a:00:d7:f3:d3:ea:8b:b2:ef:4f:6e:94:a9:
55:91:30:34:0b:49:07:df:8c:3a:fa:84:f7:ab:d8:
55:6c:15:58:1b:65:c8:89:66:2b:a7:59:8f:18:27:
a3:16:76:7d:eb:cd:21:b8:81:eb:83:5b:e0:6a:39:
a5:29:41:5d:45:73:cf:59:82:42:57:ee:56:41:2a:
a2:11:00:70:b5:9f:0a:fa:9f:3f:4a:f1:6b:aa:7d:
47:d7:1f:d0:14:6a:d1:4d:cb:a1:7a:d4:7b:ee:6b:
27:19:22:57:7c:3a:b2:2a:c9:77:ec:37:7c:67:d2:
fb:46:46:40:8c:e1:48:b0:d1:a8:a2:c8:32:d4:c9:
b3:f6:cc:c9:ac:8f:82:f9:b6:d7:8c:66:53:b6:0c:
38:db:b6:18:3d:a9:69:19:56:8f:14:1d:89:a8:ee:
02:fb:55:42:15:b3:bd:10:47:db:af:06:75:3c:ec:
b0:f2:19:9d:a0:28:84:c6:68:2f:a6:5b:22:a3:09:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:96:68:69:64:59:1D:32:7B:8C:B0:1A:4A:ED:81:89:15:9A:E8:F9
X509v3 Authority Key Identifier:
keyid:CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cb:3d:57:c6:89:1f:cc:2b:9b:85:04:37:6a:72:60:5a:0a:
f7:7a:65:0b:1e:0d:55:44:70:12:7e:7e:24:0d:9d:42:f1:e9:
85:31:5d:ef:b5:6d:4d:b1:fa:f4:bb:30:56:ac:81:03:cc:22:
83:f6:58:2a:7f:e0:96:63:1a:38:d4:cc:34:9f:f0:84:5c:7b:
f4:b7:d9:23:e1:8c:19:86:de:28:6c:55:6c:47:d2:cd:0d:98:
31:c4:72:dd:95:e7:15:d5:ae:3e:ac:b1:ef:ea:dc:81:d9:a2:
b1:b3:b5:b2:c1:e1:9d:ca:f5:00:b4:58:67:2d:f5:1f:0b:39:
cf:b0:73:b2:d4:52:ff:0c:42:78:44:5c:3f:c2:1b:9f:ef:05:
29:04:c9:25:a6:74:ca:57:f3:e2:42:a8:30:0a:fb:76:37:b4:
6a:82:67:92:49:2f:22:80:cc:93:48:c5:e2:c2:d0:49:fc:09:
de:d7:76:16:80:50:97:29:3a:e0:5d:64:8a:c3:92:77:6e:46:
02:a0:b6:7d:09:1a:85:36:f1:a0:f2:d3:cb:90:c0:c6:1b:e5:
bb:12:1a:62:d8:aa:ea:93:50:8b:32:60:64:17:b5:fd:aa:45:
86:9b:53:fe:a3:09:db:c0:dc:74:27:f5:5c:7f:19:0f:39:54:
6e:d2:cb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:44:12 2026 by rpki-client