Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
File: zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft (raw, json)
Hash identifier: SmCuzM6BVboPFOtcdJgQxuDXTtulcZV8UUAU4mgPyB0=
Subject key identifier: 46:B0:79:9E:60:3F:AB:13:7B:74:E2:0C:B4:B0:A8:BD:06:3D:59:C5
Authority key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
Certificate issuer: /CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Certificate serial: 01A176CC5A559258AF235CA4B14D33C9871C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
Manifest number: 0A23
Signing time: Mon 26 Oct 2026 06:01:05 +0000
Manifest this update: Mon 26 Oct 2026 06:01:05 +0000
Manifest next update: Tue 27 Oct 2026 06:01:05 +0000
Files and hashes: 1: zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl (hash: BN3LZz7Fhx5bwhzYjoQ4kmyBt4D8d7sjGrAPPZhFWRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cc:5a:55:92:58:af:23:5c:a4:b1:4d:33:c9:87:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Validity
Not Before: Oct 26 06:01:05 2026 GMT
Not After : Oct 27 06:01:05 2026 GMT
Subject: CN=46b0799e603fab137b74e20cb4b0a8bd063d59c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:63:8a:4a:c7:11:6e:10:a7:51:c0:ef:c8:
fc:28:42:e4:81:78:2f:8e:a2:9c:e8:57:92:9b:ef:
94:05:86:e9:6b:34:31:ec:2b:98:ba:aa:a2:ae:1e:
69:14:05:82:b8:bf:64:70:8e:cb:f3:47:5e:76:c2:
c9:e3:44:d5:a3:88:b7:77:5a:6a:c1:66:14:88:81:
2b:41:45:91:bd:9a:cc:8e:98:7c:02:1e:11:cf:ef:
4f:90:bf:b0:42:56:aa:57:88:61:f1:4a:c4:67:b1:
18:ca:52:8d:8c:6d:47:41:df:56:f8:dc:2a:e6:e9:
c1:37:4f:42:64:52:06:96:aa:08:16:ce:74:a6:5f:
3b:9c:32:58:a2:6e:77:d8:96:c9:54:3f:b2:93:6b:
39:e7:38:a6:e2:00:04:d2:dd:5d:44:e0:de:32:81:
a0:90:2d:e1:75:59:08:0e:bd:aa:22:3f:cb:ae:3c:
5d:55:3e:e2:bb:7f:18:72:c5:87:bf:7d:12:9e:f5:
e5:bb:69:49:69:cc:59:26:ec:ff:d6:93:7c:61:60:
28:45:6b:0f:70:e0:23:67:20:1b:55:c9:77:49:ba:
73:ac:ea:2b:83:86:2a:e8:04:ca:f8:21:8a:c1:80:
17:7e:79:6b:1c:0c:62:a7:ba:ec:b9:04:a0:0b:df:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B0:79:9E:60:3F:AB:13:7B:74:E2:0C:B4:B0:A8:BD:06:3D:59:C5
X509v3 Authority Key Identifier:
keyid:CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f7:43:08:07:2b:42:87:f6:f5:ff:89:2c:7f:f6:1c:50:d4:
6f:44:fd:3f:fb:9c:e7:7d:a8:cd:3d:51:3e:c6:9c:be:24:fa:
58:13:73:64:27:7f:e6:bc:10:92:1c:1d:4e:64:c1:d6:d7:a0:
9c:60:5b:8a:2d:af:b5:e1:61:2b:8c:cd:23:7d:a0:fb:62:63:
98:97:11:1f:f3:cb:35:84:95:81:ac:ee:4e:3f:fb:d1:60:62:
d0:53:2e:25:40:ae:70:c7:27:ea:f9:6e:2e:4c:95:25:1c:23:
0f:a4:a1:7d:81:f6:01:69:ae:64:e3:2e:26:0b:f1:be:cd:0f:
24:ed:8b:f9:2c:8b:1f:83:34:0a:32:15:cf:e5:ca:3c:c6:ac:
aa:2e:0e:b1:7d:a5:9d:f7:14:ac:1c:b1:4a:2e:96:98:65:da:
70:66:6a:20:2c:1e:5d:eb:45:28:ea:0c:b6:95:87:28:03:ce:
77:ea:c7:d3:21:bb:8c:3d:d7:e7:a6:4d:31:24:63:fb:99:8b:
6b:35:c3:b2:d7:09:1c:fd:c1:d4:26:e4:6b:1a:ec:22:a4:00:
da:e2:75:5a:d1:76:53:0b:a5:c0:e2:f9:9a:fd:1b:88:f1:a5:
c0:5c:e7:64:ac:9a:82:44:96:f8:64:41:e2:6e:f2:53:89:51:
24:e2:91:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:34:04 2026 by rpki-client