Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: cGYeHm0AFdCd9qmrpJl7gDTMUK0ku2qsLBZqthoouTM=
Subject key identifier: 33:25:36:06:E9:43:77:3B:BB:A3:1C:B2:9C:93:B0:C6:9F:A6:F9:6C
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 01A1769593BF3BE4C7BA2925760A9CBBDB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 100C
Signing time: Mon 26 Oct 2026 05:01:16 +0000
Manifest this update: Mon 26 Oct 2026 05:01:16 +0000
Manifest next update: Tue 27 Oct 2026 05:01:16 +0000
Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: bf/e3+BjLIvrXBBpM55pcHWZBA1esb1sIc0CIw1mOK0=)
4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:93:bf:3b:e4:c7:ba:29:25:76:0a:9c:bb:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Oct 26 05:01:16 2026 GMT
Not After : Oct 27 05:01:16 2026 GMT
Subject: CN=33253606e943773bbba31cb29c93b0c69fa6f96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:9c:93:48:31:69:b4:1a:0a:16:d8:59:41:
9d:8c:85:4f:06:38:1f:ec:af:d3:c4:dd:fd:b9:70:
e1:0f:df:da:10:73:81:e0:c7:0c:e8:7b:ee:cf:17:
9d:87:73:5a:9f:78:33:00:0f:4e:6d:8d:7e:d2:34:
86:68:12:8a:84:da:dd:89:9b:d5:16:ff:ea:b2:c6:
20:7a:66:b9:35:be:d3:6d:fc:c5:34:59:bd:74:df:
4b:bd:66:be:c1:84:de:99:a8:85:43:5f:27:fe:35:
bf:79:8d:f1:81:2e:c1:f7:5a:66:a0:ab:18:43:47:
12:e9:ea:3d:81:2c:f0:58:ba:3f:fc:41:65:67:5a:
15:6d:17:1c:7b:7a:c5:e4:55:1a:a7:66:58:a2:c9:
7a:b8:79:9f:9c:d2:1a:bd:ee:d7:d3:fb:31:ef:bf:
72:2d:76:9a:7d:8e:13:e5:81:44:12:c6:35:92:24:
e8:e0:f5:40:d0:f5:3b:91:c9:f3:ac:63:1c:fc:f0:
5b:84:9c:61:41:72:1e:02:6f:85:fa:97:bf:a3:8b:
b9:2a:43:24:6b:b8:7a:ac:51:e9:2b:6d:6c:3b:cb:
5d:df:9e:d4:f3:29:ce:62:5a:fa:38:20:dc:21:40:
2d:ec:1b:da:8a:d5:e7:cb:67:a9:ea:40:2f:09:83:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:25:36:06:E9:43:77:3B:BB:A3:1C:B2:9C:93:B0:C6:9F:A6:F9:6C
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7c:c7:24:24:a8:ce:39:66:42:9b:9b:89:96:01:83:42:53:
e0:8e:90:0e:18:e5:5e:8f:d8:15:2a:98:a1:1f:7c:38:d7:d6:
21:dc:20:9a:5e:20:be:26:b8:25:a3:86:89:30:fd:23:32:9f:
97:b6:06:83:ae:77:aa:84:10:3c:11:95:cf:75:95:a0:63:17:
82:4b:c1:5e:e9:97:1d:3e:b0:8c:f7:77:da:d5:6a:90:32:ea:
36:a2:68:bc:c5:63:9a:d6:01:46:9a:29:2b:c5:67:fe:8d:8d:
87:a2:64:a6:38:90:bb:72:92:7e:b6:6e:29:b2:fd:53:9e:5c:
d0:0a:b5:99:3b:3a:64:b2:98:58:9c:73:46:e4:f1:3f:1c:fd:
26:05:e2:2b:37:91:e0:10:4e:45:c3:55:ad:89:15:14:b2:f5:
32:7a:2e:49:ce:92:68:d2:d8:68:34:41:98:ec:09:ec:22:a3:
5f:f1:53:bb:ed:17:54:cf:65:49:fb:b5:f0:5a:05:3c:bc:92:
37:49:d7:f7:83:25:d1:f3:32:e0:7d:4a:f7:30:31:06:fd:68:
70:38:2b:ef:41:78:54:6c:13:b5:7c:1f:93:43:6e:73:9f:a9:
87:8e:cc:c0:8b:37:53:fd:24:f5:74:ff:5a:08:cc:7a:51:8a:
ea:02:04:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:41:08 2026 by rpki-client