Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: I6lpdqpK0S2ZeIhFQHhfk4dHIz68YviDuORPH79rkhE=
Subject key identifier: 54:B7:8C:7E:A5:9D:A8:97:DD:BD:9C:1F:3E:86:4B:B3:71:B1:54:F6
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 01A17B84EA72157136B63C9397E427E9F6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 04:01:10 +0000
Manifest this update: Tue 27 Oct 2026 04:01:10 +0000
Manifest next update: Wed 28 Oct 2026 04:01:10 +0000
Files and hashes: 1: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: XB+jUWC4DpdcqmEp+SA+NC+sFnEQSSoM7KeiTEHzl5U=)
2: tLzYTCMgcEaSpA6pqJ49xM0mJhg.roa (hash: v1AukhZWCgWLe1okLFBBNkZmMt/d4/1gGQHfd9186v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:ea:72:15:71:36:b6:3c:93:97:e4:27:e9:f6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Oct 27 04:01:10 2026 GMT
Not After : Oct 28 04:01:10 2026 GMT
Subject: CN=54b78c7ea59da897ddbd9c1f3e864bb371b154f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:98:79:ed:c5:12:99:f5:4f:f0:dd:0f:ab:
c1:1a:f9:de:ff:a6:49:23:34:88:d8:bc:6e:5b:1e:
22:62:38:0e:89:e3:8d:c8:01:c0:d6:5d:d1:90:9d:
10:97:93:13:e1:b1:a3:af:c4:39:46:50:ca:8f:0b:
ed:a0:7f:7a:d0:f4:97:32:a9:8e:6f:10:39:17:91:
e1:89:4e:8f:66:8c:d1:5e:1c:5e:f0:16:c8:d8:ca:
78:0a:a8:d0:45:35:28:7e:2c:0b:d4:18:63:75:5b:
ad:57:c2:1d:ff:00:22:a6:34:a4:3a:57:85:bd:29:
fe:b4:a8:4b:67:db:5b:a8:0c:11:d6:d5:fd:84:a4:
08:97:93:ea:81:34:ed:72:09:25:68:47:79:b4:36:
19:3b:b7:6e:16:64:6a:fe:8b:2c:9b:e2:a9:84:74:
dd:95:20:4c:34:46:2c:ec:78:74:53:b8:79:c0:30:
52:c5:52:3e:b6:51:77:21:8e:54:56:3e:62:60:6f:
72:23:16:d8:7e:a8:89:70:33:ef:f3:a0:49:c7:a2:
ee:7b:53:f3:2f:6d:51:1e:31:86:56:42:9f:37:f3:
be:36:6c:3c:eb:95:ec:c3:e5:ee:6a:73:40:24:4d:
19:71:2e:62:36:d4:b8:d4:58:c0:7d:7c:30:e9:62:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B7:8C:7E:A5:9D:A8:97:DD:BD:9C:1F:3E:86:4B:B3:71:B1:54:F6
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b8:35:4f:08:6e:c0:ba:fa:8d:d3:5a:7e:89:7b:a2:72:90:
94:04:75:f7:2b:27:28:58:a0:b3:b3:c0:13:db:9e:17:b6:6e:
84:1a:f2:02:e9:99:99:55:cd:7b:9b:a0:1b:f8:72:e9:f6:5f:
a3:d3:47:4c:3b:e0:e6:20:da:a3:0e:89:39:62:bc:cf:da:be:
32:04:37:19:14:2d:53:95:04:4f:10:1d:be:79:3a:cc:72:1e:
84:fd:ca:3e:43:e0:5c:a3:cd:05:95:31:48:41:d3:8b:0d:70:
36:52:57:c4:20:ab:6f:c2:ac:bb:62:9a:bf:1c:2c:2c:8b:6f:
86:d2:16:a4:26:4a:41:b9:42:c6:b5:14:4f:8b:f3:6f:d0:32:
3c:86:db:db:fd:81:53:b8:ff:04:63:ae:24:90:65:e5:67:60:
78:60:f9:e4:cd:a2:f7:5c:6d:9f:71:c7:a6:8c:12:9e:b0:1c:
db:6e:9b:80:7a:02:22:c2:62:86:04:ea:23:e4:71:59:e3:f6:
78:f8:ff:fa:c8:2d:3b:73:1a:d7:b2:06:12:31:61:ca:cf:6d:
11:aa:f2:5e:77:b0:e6:2c:57:f5:e2:60:d7:3a:d0:f8:03:d6:
ad:20:4a:6e:7d:9a:10:e8:8d:5d:09:d0:5b:75:d7:71:83:69:
6a:c0:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:43:51 2026 by rpki-client