Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.mft
File: zgKxRiLD7gOVCucSP1f05t5IJ1o.mft (raw, json)
Hash identifier: 2YrBRtRdKlDnCy4UVSpuV2q+Hh55gCJW0d0b/lrpHGw=
Subject key identifier: 37:34:65:F9:AA:60:F5:81:DD:80:76:73:88:E8:9B:8A:7D:D2:83:BD
Authority key identifier: CE:02:B1:46:22:C3:EE:03:95:0A:E7:12:3F:57:F4:E6:DE:48:27:5A
Certificate issuer: /CN=ce02b14622c3ee03950ae7123f57f4e6de48275a
Certificate serial: 01A17BF24C75A4BDC285AFF724F9A088AFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgKxRiLD7gOVCucSP1f05t5IJ1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:00:39 +0000
Manifest this update: Tue 27 Oct 2026 06:00:39 +0000
Manifest next update: Wed 28 Oct 2026 06:00:39 +0000
Files and hashes: 1: Lw2dKcD-BJDDcwvv_ZkEs2nszhM.roa (hash: 0OJI/EzD/n3ipktQrZsvOEjmO2nCJlICQHLxRKAtWw4=)
2: OM0HzHsrMZ29JyaGfdBe1f1AmqU.roa (hash: q96qYiUtNKDfInNeYYE/bDuvgA7MdaU6WyzLOvLJMS8=)
3: zgKxRiLD7gOVCucSP1f05t5IJ1o.crl (hash: lnaV+J28qhVmkAMLLm+mVmn3nXNkov1fcF7Jq3YMeZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgKxRiLD7gOVCucSP1f05t5IJ1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:4c:75:a4:bd:c2:85:af:f7:24:f9:a0:88:af:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce02b14622c3ee03950ae7123f57f4e6de48275a
Validity
Not Before: Oct 27 06:00:39 2026 GMT
Not After : Oct 28 06:00:39 2026 GMT
Subject: CN=373465f9aa60f581dd80767388e89b8a7dd283bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:fd:01:ca:30:5d:61:f8:02:4b:5c:cf:98:
66:2a:f7:57:ce:ba:cc:9e:ab:f4:71:8b:fc:31:7b:
27:f5:3d:f3:7a:2c:f5:a8:97:1b:df:3c:01:e6:37:
e0:d2:14:00:25:9a:8e:39:78:e0:72:93:80:46:53:
c7:f0:a4:99:09:52:df:b4:fa:4a:50:14:43:53:58:
e6:5d:d5:78:15:65:98:76:80:a8:f0:fc:51:4e:96:
3c:09:74:ad:dc:ea:16:57:71:c4:45:8d:eb:53:83:
4f:c8:79:f9:06:41:7d:82:da:2a:13:15:c0:69:08:
e3:ac:8f:d8:fc:c2:65:7d:dc:36:2b:da:ff:d7:10:
32:c8:50:cb:b7:bb:8c:b6:1a:6f:8f:b3:17:17:94:
af:a1:0b:e0:39:7c:09:51:8b:cc:a6:60:39:7c:f3:
29:bf:42:d0:8d:ae:8e:69:10:5d:23:b4:04:63:29:
d5:8f:81:8a:dd:33:bf:92:48:c9:a9:d0:e7:87:1f:
9b:54:47:3f:63:a9:5d:13:89:7e:c0:68:28:5d:68:
8f:ba:5a:a5:9a:6f:c1:e5:6b:57:6a:f0:5e:a5:cb:
54:f8:f6:1c:08:8a:be:77:5a:1b:75:ae:db:d9:3c:
90:83:42:75:c2:37:b7:ce:81:3b:45:25:79:6b:56:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:34:65:F9:AA:60:F5:81:DD:80:76:73:88:E8:9B:8A:7D:D2:83:BD
X509v3 Authority Key Identifier:
keyid:CE:02:B1:46:22:C3:EE:03:95:0A:E7:12:3F:57:F4:E6:DE:48:27:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgKxRiLD7gOVCucSP1f05t5IJ1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d0:53:d0:16:00:5f:13:9c:1e:77:f1:3c:e6:7d:27:0d:75:
7e:3f:e3:86:7d:cb:80:59:c0:25:df:9c:2a:1e:9b:65:05:c2:
03:ec:84:f7:03:39:e1:4b:31:b2:41:43:09:2f:cf:42:78:1d:
16:d0:71:bd:f7:77:df:e4:16:a3:8b:61:2c:36:15:b1:cc:f8:
08:0b:90:1b:95:d7:71:ce:70:51:ab:f7:a0:1a:c2:cd:61:71:
ba:07:ed:16:c0:38:22:b7:e5:ab:c9:d6:b5:dd:ad:58:53:fe:
33:b6:aa:b2:fb:c8:60:f4:10:7d:16:3e:71:ed:10:7d:25:d8:
de:99:fa:95:ea:e3:8d:ed:12:08:ef:0f:45:12:92:f6:ef:7c:
a1:fd:21:36:8b:f5:21:d3:74:88:f2:f6:fe:b9:84:49:c0:f9:
22:37:c7:90:19:d3:21:00:c6:91:0e:03:ad:42:d0:8b:5d:4b:
e6:4f:e4:8c:08:09:de:6a:8b:ab:f6:fb:a7:5f:01:7b:4e:3e:
46:b4:33:1b:64:f7:24:dd:88:00:41:02:c2:5f:e9:f2:be:af:
62:67:43:e0:37:94:11:4e:ce:be:63:3b:6d:4a:11:36:49:b3:
f3:11:49:52:dd:20:69:cb:ef:eb:be:01:17:41:35:8f:a8:05:
a5:88:4c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:44:13 2026 by rpki-client