Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json)
Hash identifier: IOS92+BDgECrKGLDo5m3HxO11Zs0plssEI/yRg7MY6Q=
Subject key identifier: A1:1E:3C:E5:A5:73:E1:59:8B:13:80:C8:E9:D7:7A:BF:F4:26:CA:D0
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial: 01A18F7998B123EA6332ABE1E61B86D7A54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
Manifest number: 1ACE
Signing time: Sat 31 Oct 2026 01:01:13 +0000
Manifest this update: Sat 31 Oct 2026 01:01:13 +0000
Manifest next update: Sun 01 Nov 2026 01:01:13 +0000
Files and hashes: 1: D4Ig0boR8l83Ddi1KhhZUDj3BIM.roa (hash: h7w8EdAomdlx4AIn+vosPrC32sePfUw5l3+p/ucsXto=)
2: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: y/nEVib/KQ+cLL3942srIGeJedXsh9S43In3NvAa2EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:79:98:b1:23:ea:63:32:ab:e1:e6:1b:86:d7:a5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Validity
Not Before: Oct 31 01:01:13 2026 GMT
Not After : Nov 1 01:01:13 2026 GMT
Subject: CN=a11e3ce5a573e1598b1380c8e9d77abff426cad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:d8:af:f1:4e:31:7b:0b:b4:96:be:18:a1:
3f:f6:98:31:e9:9b:db:4c:c5:46:ae:31:10:28:2a:
b5:1a:75:be:12:00:56:c3:58:f2:3a:42:96:dc:f7:
22:ac:b7:3f:f8:7b:b5:f9:e5:63:4d:74:a9:f9:19:
34:5d:9b:be:ac:48:f2:11:7c:dd:06:22:51:55:65:
f3:d0:a1:bd:c6:a2:ca:55:5d:d5:60:9e:9c:7e:e5:
2e:bc:00:91:79:66:39:a3:4f:96:90:2d:79:e8:2c:
c4:d1:63:06:f3:27:8f:7e:68:79:a6:97:cd:14:88:
70:f2:d3:27:3e:33:3c:46:db:2e:90:c1:63:36:31:
13:88:76:7c:91:3a:57:af:63:f9:64:3f:44:4d:61:
6d:77:2b:34:28:54:ea:81:a4:ab:a7:b2:bb:38:70:
a1:33:2c:fb:f4:9d:88:77:be:e3:37:aa:8d:c7:8e:
33:0a:d1:e2:bd:db:f5:83:7f:d0:da:91:ca:83:87:
c4:c4:4a:5b:4f:80:44:07:28:07:58:23:19:51:51:
7b:ae:19:4b:d2:c0:db:9c:21:81:12:87:a7:f0:56:
20:5d:80:13:09:43:1f:ee:4a:9e:4f:a6:26:31:9a:
6c:57:ec:e4:5e:cd:62:2e:f2:5e:c3:68:43:86:53:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1E:3C:E5:A5:73:E1:59:8B:13:80:C8:E9:D7:7A:BF:F4:26:CA:D0
X509v3 Authority Key Identifier:
keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e0:16:31:8a:b5:e9:7d:49:ac:c3:68:dd:7e:43:62:71:fb:
63:25:7b:a5:f2:76:25:f7:d5:4b:dd:fb:c3:ac:6b:ec:a8:35:
2a:f1:2c:d7:7d:55:09:19:69:c8:eb:76:28:96:a0:1d:bb:be:
2b:49:68:4f:ab:75:73:c3:26:2c:98:9e:e8:58:14:3f:4d:e9:
26:32:15:9f:d3:2e:38:99:03:10:41:f9:96:85:bb:7b:e0:ab:
ff:90:17:1f:45:5d:15:65:20:6f:e9:c2:b0:61:51:c8:d0:a0:
e1:6b:30:b0:9e:4b:86:4f:34:e7:b3:4f:6c:dd:31:e8:c1:39:
ea:98:ca:89:3d:a3:74:e3:5d:b9:86:43:b3:53:9a:72:47:53:
68:56:f6:d7:55:21:ff:9d:b4:00:de:d3:a4:0f:54:75:53:41:
b6:a0:4a:17:f8:12:df:a1:1e:b6:5d:e3:cf:43:08:2f:57:59:
4b:8a:31:1d:29:20:48:ae:7a:9a:0f:a5:b5:be:d3:28:d1:3c:
d8:bd:15:fe:8d:e1:6a:f1:2b:58:9c:d6:cd:fe:11:46:31:b1:
84:c1:64:ac:45:ff:85:2a:09:22:97:29:bf:ed:02:3c:ca:a4:
1f:7f:fe:57:a5:31:9b:2f:80:19:a5:73:76:43:0a:44:3e:ac:
7b:63:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 10:05:39 2026 by rpki-client