Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: jTFqdlDW08IbHvIS+bJdA79yaKLD9ILputjjrIAft+Y=
Subject key identifier: 13:6E:E8:F2:8A:E5:EF:07:38:59:E4:2E:70:B1:1E:2D:AE:57:E9:DB
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 01A17FCFB53AB74294F879CC874C3A221A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 14E5
Signing time: Wed 28 Oct 2026 00:01:21 +0000
Manifest this update: Wed 28 Oct 2026 00:01:21 +0000
Manifest next update: Thu 29 Oct 2026 00:01:21 +0000
Files and hashes: 1: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (hash: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: tw65wx6HjOz/KtIdGiLfoz3v+RjM5W/H24aX/VpnJGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:b5:3a:b7:42:94:f8:79:cc:87:4c:3a:22:1a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Oct 28 00:01:21 2026 GMT
Not After : Oct 29 00:01:21 2026 GMT
Subject: CN=136ee8f28ae5ef073859e42e70b11e2dae57e9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:cc:85:14:a2:8d:67:78:d8:07:70:8c:17:
50:97:e9:2d:b6:71:91:d1:bc:48:00:9e:ae:85:76:
e2:fc:6f:7a:8f:12:b8:ca:eb:00:62:7f:b6:ad:1a:
b8:69:88:1d:fc:c4:b4:76:e3:1a:5a:10:c1:5e:96:
13:4f:0c:c9:50:be:cb:d2:d8:b7:04:89:bd:2c:57:
78:5f:9b:29:fe:f4:7b:19:98:61:27:59:e7:ac:1d:
5e:f9:f6:51:d1:1c:98:bb:4f:da:49:cd:a2:25:17:
c6:bf:54:de:17:99:f1:b5:e8:d1:7e:b5:4b:27:5c:
ee:45:71:d5:ba:a6:20:dc:7e:63:4c:71:d0:bd:04:
fb:91:74:2f:70:8f:7d:2e:85:88:5b:97:e2:51:4b:
5e:9e:ef:74:46:3b:e4:bf:55:27:83:40:16:5b:5c:
d9:76:23:82:72:cf:9b:1c:8a:13:5a:69:42:38:89:
be:5d:c2:b1:8b:d9:b7:55:68:d4:22:13:cd:25:51:
0f:d0:70:0b:25:f1:17:9b:49:e0:b3:6c:43:0f:83:
4a:e4:e1:7b:dc:0e:ec:e6:ac:bb:2e:2c:f0:f9:4c:
ec:0b:98:ab:4a:c7:28:27:68:8d:2a:79:92:81:73:
99:f1:12:45:5b:34:9f:20:18:0b:16:16:1f:f5:34:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6E:E8:F2:8A:E5:EF:07:38:59:E4:2E:70:B1:1E:2D:AE:57:E9:DB
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b7:db:49:b4:88:4c:f5:69:f8:a8:b1:64:f5:c6:cd:88:ca:
2c:98:b2:fc:3c:f1:8c:62:b6:02:40:33:c8:a1:48:14:42:a6:
43:e7:31:58:c7:f3:e2:10:52:f0:77:ea:22:60:20:93:95:3d:
92:eb:67:8f:24:2a:c1:7b:9f:f1:26:d4:4d:7a:f6:4d:ce:0b:
12:46:fc:58:86:37:25:2c:b1:5a:69:8a:b4:93:36:59:24:68:
47:31:12:07:94:f3:0e:4e:c1:41:e9:96:0c:60:e7:8e:a9:97:
92:38:69:c7:7b:82:e5:bb:0e:16:15:1a:85:11:6f:65:2e:73:
f7:eb:01:69:7f:78:13:8e:7c:14:54:11:c0:7b:50:16:88:28:
6e:f4:26:7a:52:7c:24:3a:60:4d:73:83:23:8f:97:c8:e6:bd:
42:a1:6f:5c:7d:a8:60:32:ef:44:57:13:6c:7e:1d:1c:60:e0:
57:e4:b6:47:c2:a4:a0:da:ea:8e:a6:99:a1:7c:b9:1a:d3:8e:
2e:5d:c1:74:e3:18:03:c2:3e:e7:bf:92:06:27:14:20:d8:32:
84:e0:c5:ca:c9:29:2f:59:d5:1e:ed:40:11:6d:5d:3d:14:da:
0f:86:13:88:a4:14:6a:57:ac:2b:05:ee:91:14:18:60:ed:1b:
63:89:5e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:21:58 2026 by rpki-client