Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: qU0kZM0+XFEbI7aV24UnDZWEwlZ0K3J7aNOWlJdnO4E=
Subject key identifier: D2:70:4E:FC:8E:AB:08:14:EF:3D:75:99:58:F1:7C:1D:09:02:9A:3D
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 01A168A29CCEFABEE2B5D91BF8F2F873EA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 0A57
Signing time: Fri 23 Oct 2026 12:00:49 +0000
Manifest this update: Fri 23 Oct 2026 12:00:49 +0000
Manifest next update: Sat 24 Oct 2026 12:00:49 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: IAnS6bEzch3TIofLALz1ygB0iyo.roa (hash: lyXUvYyQfJt4aH/SJqViQQv03gKvKKB5vsWtq0xG3Ro=)
3: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: Ufrh69CudffWTQLf/bqfzvy5ATcuR1Qhv4NGXb10svQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:a2:9c:ce:fa:be:e2:b5:d9:1b:f8:f2:f8:73:ea:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Oct 23 12:00:49 2026 GMT
Not After : Oct 24 12:00:49 2026 GMT
Subject: CN=d2704efc8eab0814ef3d759958f17c1d09029a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:ad:59:f8:39:c4:9f:2f:e2:7d:3d:59:b5:
5b:17:f8:52:1c:06:6d:10:41:13:0e:32:d0:b5:22:
51:a0:92:3a:24:98:1d:e4:a3:61:ae:3b:de:ef:39:
52:e2:a5:b6:2f:79:fd:ce:62:4c:0e:5b:36:00:d4:
e9:9e:42:33:00:13:08:37:ae:25:9a:95:72:97:68:
ab:25:07:ca:8f:dd:8e:6f:d7:f1:76:fc:7c:7f:90:
11:f1:dc:c8:8d:f8:cc:91:71:09:b0:db:61:9a:f7:
ed:2b:2a:38:a1:42:9a:94:75:0b:23:af:ef:a4:39:
42:d4:d5:b6:81:9e:33:bf:b3:6d:a7:eb:0d:96:8a:
b5:e9:b9:c4:b0:dc:2b:8a:29:b3:67:2f:87:3e:67:
39:16:69:6e:9b:d8:35:2b:cb:08:e6:5f:22:4b:03:
e0:a5:7b:58:c8:0c:f7:1d:21:b5:4f:e5:0b:f3:fe:
51:4f:56:b6:68:8d:35:2a:53:e0:0d:2c:a3:a1:6a:
12:fc:d6:e1:47:7c:25:2d:03:aa:ff:72:fb:fe:47:
8e:56:cd:c4:00:07:5f:16:02:2d:fa:a8:51:82:7d:
d7:da:83:6a:c5:e3:58:22:a4:57:2e:a7:b6:47:a7:
7d:eb:3f:1e:5c:1f:b2:b8:cb:00:f2:f9:73:2e:d6:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:70:4E:FC:8E:AB:08:14:EF:3D:75:99:58:F1:7C:1D:09:02:9A:3D
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e4:08:da:33:0e:13:6f:aa:a9:28:95:d3:f4:5a:be:5a:db:
aa:33:d7:a1:66:22:45:0b:9f:8d:dd:5f:e0:c2:f0:74:6c:74:
e5:d9:73:97:5a:75:92:72:08:18:bf:bf:6c:1d:ed:b4:58:42:
67:c3:c1:f3:a2:f4:21:06:27:56:74:7d:93:15:ca:16:28:2c:
98:08:94:a7:df:a0:b5:a7:a0:1a:88:54:1c:1c:07:e8:c1:fe:
e4:62:10:22:38:37:70:0a:e5:f1:33:43:09:f2:1e:9b:d2:21:
aa:b3:4a:d8:26:6d:93:dc:20:34:eb:67:52:92:6b:d2:4b:82:
f8:9f:fa:c5:f7:99:e6:ef:e6:77:6b:0d:93:d7:0e:19:c6:0c:
2b:ff:53:a3:52:1b:df:15:18:e1:ef:6d:00:9a:de:4e:49:25:
90:1c:90:1b:15:f2:15:68:8d:51:2d:ac:4d:27:b5:5e:9f:9a:
3b:1b:ce:8a:30:94:b6:59:8d:51:78:a7:7f:fb:52:66:65:e6:
87:31:ac:8a:55:0b:b1:7a:1e:69:d6:1d:d0:48:2c:ae:65:7d:
ca:6d:e9:d5:e0:fe:23:4a:55:3a:b3:bf:97:ab:14:59:d4:ac:
37:de:4c:1d:9d:11:81:a8:e6:75:9e:33:f6:4a:16:eb:13:5e:
cb:d6:10:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 18:30:11 2026 by rpki-client