Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: wYAerTjZmyEUtE/iY+ccutGc7BE0ZTCIiDBkYh3VDIU=
Subject key identifier: 9B:87:E5:07:0D:06:CA:4E:75:7C:A0:51:F2:FC:D3:39:05:48:7F:B3
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 01A17F61D6CDBC16B3D3DE6FE4EB9EDAB548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 22:01:20 +0000
Manifest this update: Tue 27 Oct 2026 22:01:20 +0000
Manifest next update: Wed 28 Oct 2026 22:01:20 +0000
Files and hashes: 1: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: gRIcWtEXp81ksJxpCMi1kib2lpg3envSfWSwgTcIq10=)
2: tLzYTCMgcEaSpA6pqJ49xM0mJhg.roa (hash: v1AukhZWCgWLe1okLFBBNkZmMt/d4/1gGQHfd9186v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:d6:cd:bc:16:b3:d3:de:6f:e4:eb:9e:da:b5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Oct 27 22:01:20 2026 GMT
Not After : Oct 28 22:01:20 2026 GMT
Subject: CN=9b87e5070d06ca4e757ca051f2fcd33905487fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:aa:a4:48:a1:fe:5c:f0:3e:e5:84:65:3d:
81:4f:45:1a:aa:d8:fb:c3:63:8e:81:4b:a1:fd:fd:
ea:d0:98:c7:ef:06:94:86:8b:29:c7:a7:bb:fb:af:
f9:58:7d:51:e2:c6:cd:da:cf:02:3c:5c:e1:db:aa:
c0:59:18:68:b2:72:32:03:55:f2:9e:d9:a7:2b:b8:
49:d0:7e:e1:86:f4:8b:3f:09:f6:81:58:f5:c2:12:
c1:5e:9b:f4:26:9d:ba:0d:20:77:1a:a5:c4:39:df:
d4:df:b0:ea:a9:fb:0f:2f:46:e8:72:52:7d:36:ac:
ab:f3:e8:e9:a0:b5:76:33:d6:28:d7:63:39:64:d3:
a5:ad:66:31:9d:36:c7:66:58:7a:fe:c4:b9:4c:e2:
52:71:bb:4d:a4:9c:b0:a5:ce:4c:51:88:27:29:a6:
5f:0e:c9:24:4b:e5:b0:9e:e8:f3:07:ee:cf:a0:f8:
0b:d3:87:27:76:af:f9:d0:96:08:4d:50:4a:f5:ef:
90:e7:dd:fe:8b:41:6c:07:77:dc:fb:f5:d6:29:49:
fb:32:ef:30:e7:a1:37:94:a0:16:50:1c:67:d9:b9:
5b:ba:85:16:33:03:76:53:1c:2b:a3:06:fa:f2:c4:
b4:84:f9:7b:09:20:bc:9b:cd:f0:04:2e:79:54:6b:
31:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:E5:07:0D:06:CA:4E:75:7C:A0:51:F2:FC:D3:39:05:48:7F:B3
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4e:8c:9f:37:75:ca:aa:8e:72:79:82:46:74:27:06:c4:08:
a9:e3:db:a1:96:1d:1b:4b:50:97:8c:16:31:e4:3f:76:a8:04:
4d:71:64:65:e5:5a:d1:c3:9e:31:10:d9:87:78:ca:8a:c1:0e:
92:be:35:97:72:4e:89:07:4a:76:c9:41:19:83:06:f6:07:ff:
0f:4e:de:0f:9e:b1:b7:25:a2:0f:e7:fd:e0:59:16:17:ce:88:
d5:cd:77:71:d6:21:71:d7:09:16:da:a6:e7:45:d4:97:ec:4a:
a7:0d:54:77:6a:40:8c:a8:57:3b:5e:7c:09:de:47:bd:6f:04:
15:50:8f:02:04:df:67:53:67:4d:2d:ba:f2:eb:c2:19:3b:64:
a1:d4:22:12:c6:f1:9f:1c:7e:59:8c:9f:85:89:8e:63:7f:49:
d5:6f:b9:fc:b3:91:70:73:55:b6:8e:0f:57:d1:e9:48:dc:ba:
e0:1f:e2:7c:7e:86:34:8a:5e:ab:a4:89:62:8a:34:95:65:b3:
f6:d2:a0:2d:22:23:0d:b7:58:ca:c8:79:2f:c2:5f:56:ba:4e:
db:41:1d:ee:2e:6f:e6:49:b2:72:30:b2:03:0e:46:ce:2f:91:
47:d6:24:63:1a:49:da:76:ca:e8:80:bc:2a:fa:f5:f5:01:67:
92:45:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:26:21 2026 by rpki-client