Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: ArlQbSPbjufyFMeoRgkT/xY64pDVq+idTyqZ//1txP4=
Subject key identifier: 7A:1E:07:00:5E:91:81:8B:11:39:E6:4F:92:D1:03:3C:95:E2:E1:37
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 01A180AB32384FC5B87061518F47A138D6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 04F5
Signing time: Wed 28 Oct 2026 04:01:05 +0000
Manifest this update: Wed 28 Oct 2026 04:01:05 +0000
Manifest next update: Thu 29 Oct 2026 04:01:05 +0000
Files and hashes: 1: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (hash: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY=)
2: g8Z517-jOmVF6Xu2Nxp8NTAxGx4.roa (hash: OXnUsbk5vh8et8vrHb0/ntkeJcO9A+ORppXS73LPvXg=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: HEmQ6sdXk4T5oTyzVLi0AV++BHMZW19ZVYQ2zLFoNnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:32:38:4f:c5:b8:70:61:51:8f:47:a1:38:d6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Oct 28 04:01:05 2026 GMT
Not After : Oct 29 04:01:05 2026 GMT
Subject: CN=7a1e07005e91818b1139e64f92d1033c95e2e137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:7f:b8:a3:a9:88:45:85:db:0d:22:2f:4c:
12:f8:0b:75:f2:7a:d2:cf:87:08:dc:b4:a3:be:06:
b3:97:ec:b5:a8:cd:c6:8d:8f:74:7e:60:9f:e8:a9:
41:03:68:0f:15:0e:0e:9a:fb:25:82:09:c9:f5:b0:
42:07:3d:f7:56:8b:44:31:40:16:03:77:bf:c8:36:
2d:50:29:71:62:f5:18:74:c3:15:37:fe:82:a9:4c:
1e:3e:56:71:67:76:d2:16:99:4b:c2:a8:54:c5:0b:
18:6b:cf:77:b1:04:a9:fc:13:c6:4e:b5:b5:20:ee:
ed:fc:e7:c3:ee:91:2e:9f:48:7b:44:e1:c0:cf:34:
35:f1:41:fd:e3:51:76:30:02:c8:fd:88:77:3c:af:
04:e1:29:9a:19:30:c6:e9:56:7d:40:c5:c7:16:13:
ff:ee:00:68:c5:e5:6f:0e:54:95:70:a4:6c:0f:06:
c2:7b:66:00:e3:b5:b4:eb:cc:2a:a7:e8:61:5d:9d:
01:ea:a2:15:a4:17:0a:d4:f1:50:ec:e5:c8:2f:88:
70:0b:9d:73:bb:1f:be:72:37:5e:5d:fd:19:ac:7a:
2a:ce:ed:ed:2c:1f:8f:b2:5f:4d:55:db:03:a1:65:
1c:9e:31:87:91:6b:d8:31:5a:d5:60:cd:be:c1:a3:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1E:07:00:5E:91:81:8B:11:39:E6:4F:92:D1:03:3C:95:E2:E1:37
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:15:53:ba:ca:d7:7a:82:62:38:97:15:02:e0:55:da:da:c2:
99:72:06:9a:6b:eb:8d:b3:84:47:a9:3e:b0:d5:97:44:a7:69:
c0:cc:01:9c:05:6a:cf:7a:f3:46:3f:78:a7:53:66:37:6b:65:
c0:29:54:09:19:26:b1:bb:b0:f4:b8:68:70:9b:ee:55:ea:5e:
0d:7e:47:c6:2e:d6:15:02:9d:a5:32:e2:d6:14:6f:6f:2b:41:
21:79:9b:cd:2b:df:1e:60:06:a1:68:85:ce:bf:ff:95:ef:18:
98:5d:a6:01:d1:02:ff:bc:5d:af:04:ba:83:60:ee:fd:06:a6:
ae:c4:7d:a2:83:b5:7a:cf:00:88:0a:fc:af:6f:bd:33:b8:68:
f4:28:48:d3:76:fe:e9:c2:85:fd:d5:4f:a7:73:82:52:b7:1e:
01:46:6f:7f:ce:d5:68:ed:fa:ad:b7:0d:5b:1b:d4:b0:2a:3d:
50:e3:b1:e3:94:0e:f7:46:2c:ad:1e:4c:8b:31:99:1b:47:14:
91:f0:94:3b:de:07:5c:f0:50:02:a2:7d:fa:00:72:11:ac:23:
c3:48:84:f5:55:6a:7c:e2:aa:b8:a2:ce:94:5c:f7:3d:cb:3b:
22:7b:ee:12:ad:41:ef:b8:c1:ce:b0:ca:b2:e7:c4:49:2f:0b:
73:9c:71:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAqzI4T8W4cGFRj0ehONbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjY5ZWY4YTU0ODMwYzVhN2I2Mzc4OTFmYzNjOTBhYjEy
Y2JhNzgwHhcNMjYxMDI4MDQwMTA1WhcNMjYxMDI5MDQwMTA1WjAzMTEwLwYDVQQD
Eyg3YTFlMDcwMDVlOTE4MThiMTEzOWU2NGY5MmQxMDMzYzk1ZTJlMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UR/uKOpiEWF2w0iL0wS+At18nrS
z4cI3LSjvgazl+y1qM3GjY90fmCf6KlBA2gPFQ4OmvslggnJ9bBCBz33VotEMUAW
A3e/yDYtUClxYvUYdMMVN/6CqUwePlZxZ3bSFplLwqhUxQsYa893sQSp/BPGTrW1
IO7t/OfD7pEun0h7ROHAzzQ18UH941F2MALI/Yh3PK8E4SmaGTDG6VZ9QMXHFhP/
7gBoxeVvDlSVcKRsDwbCe2YA47W068wqp+hhXZ0B6qIVpBcK1PFQ7OXIL4hwC51z
ux++cjdeXf0ZrHoqzu3tLB+Psl9NVdsDoWUcnjGHkWvYMVrVYM2+waNqDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoeBwBekYGLETnmT5LRAzyV4uE3MB8GA1UdIwQY
MBaAFMz2nvilSDDFp7Y3iR/DyQqxLLp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yMDg2MjMtMjY4Yy00YmY2LWI5NDct
ZjQ1OTIzNWQ5ODdiLzEvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yMDg2MjMtMjY4Yy00YmY2LWI5NDctZjQ1OTIzNWQ5ODdi
LzEvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRVTusrX
eoJiOJcVAuBV2trCmXIGmmvrjbOER6k+sNWXRKdpwMwBnAVqz3rzRj94p1NmN2tl
wClUCRkmsbuw9LhocJvuVepeDX5Hxi7WFQKdpTLi1hRvbytBIXmbzSvfHmAGoWiF
zr//le8YmF2mAdEC/7xdrwS6g2Du/QamrsR9ooO1es8AiAr8r2+9M7ho9ChI03b+
6cKF/dVPp3OCUrceAUZvf87VaO36rbcNWxvUsCo9UOOx45QO90YsrR5MizGZG0cU
kfCUO94HXPBQAqJ9+gByEawjw0iE9VVqfOKquKLOlFz3Pcs7InvuEq1B77jBzrDK
sufESS8Lc5xxKw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:45:07 2026 by rpki-client