Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier: Qru4nHcCmgjfTONC7HxnTdIU1f9W8y6h7V2AplsM80o=
Subject key identifier: 34:90:93:E9:B1:AC:92:E8:22:6C:DC:E8:27:FF:7E:F3:35:84:AE:4A
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial: 01A17A723549EF16556C4C0C0A2FD0CE8F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number: 09FF
Signing time: Mon 26 Oct 2026 23:01:07 +0000
Manifest this update: Mon 26 Oct 2026 23:01:07 +0000
Manifest next update: Tue 27 Oct 2026 23:01:07 +0000
Files and hashes: 1: C25elKe2pxAvHopmJZwOBFRueMk.roa (hash: Qq1OVKMJ6dN2Sv+dYbNP/bXX/PATPp6T5W6nqB2fjes=)
2: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: GxgguOZAfm2AHRvN6DcWwwHMGG0Uwl/uBCfLaevSXBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:72:35:49:ef:16:55:6c:4c:0c:0a:2f:d0:ce:8f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66689087e787990916878db20d555684c22cd9d5
Validity
Not Before: Oct 26 23:01:07 2026 GMT
Not After : Oct 27 23:01:07 2026 GMT
Subject: CN=349093e9b1ac92e8226cdce827ff7ef33584ae4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:6f:d8:de:8e:f1:2f:ce:25:ad:e1:20:fd:
3f:65:fd:a7:aa:3b:0f:c3:c4:49:52:5a:5e:d9:3e:
98:59:67:f3:3f:77:57:c5:c0:df:ee:9f:fb:d0:9f:
a6:2f:ef:a3:8a:e0:22:0a:4a:49:2d:91:17:10:d2:
38:9e:63:ea:42:54:cf:fb:9e:33:c0:14:6d:af:d5:
5f:3d:0f:e1:4b:01:a3:d2:cf:36:0f:9a:7b:aa:a9:
a9:bc:93:4f:db:ac:22:2a:f4:c2:42:47:cf:4f:39:
30:a6:8f:52:14:53:c7:0e:bf:1a:47:35:eb:4a:22:
ed:40:9e:f0:ad:b1:cc:5d:95:5e:05:ef:3c:87:83:
8c:bc:d9:bf:66:e7:84:08:30:fa:fa:ff:8b:09:38:
38:0c:c8:65:18:22:e6:47:5f:8c:99:2b:39:fa:40:
01:64:36:8d:9c:82:15:b1:58:23:b8:e0:cc:d4:4a:
9b:1e:55:4a:6a:4a:04:e6:ac:36:6b:84:0f:d1:9a:
06:f2:ea:f7:b1:69:20:fa:79:bb:6b:65:c4:37:83:
49:d6:5d:76:23:72:5d:a5:16:06:cc:41:c2:c1:95:
21:d0:69:7b:e3:48:68:80:4a:f0:85:c2:ef:68:64:
2b:90:0b:79:4f:35:ef:96:09:76:3f:57:1d:d9:28:
fd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:90:93:E9:B1:AC:92:E8:22:6C:DC:E8:27:FF:7E:F3:35:84:AE:4A
X509v3 Authority Key Identifier:
keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b7:6c:b0:58:48:e9:b5:dc:d4:48:bc:34:68:4d:bf:8a:60:
18:5c:b2:f0:fc:7a:86:8d:4e:d7:35:ea:60:15:6a:11:8e:97:
d1:88:42:c3:9d:f2:20:a3:10:e7:52:12:89:11:d0:b5:e3:98:
39:0c:8e:ff:fc:14:8e:6f:58:bd:6d:ff:3a:0f:f4:6a:ac:f6:
b8:4c:18:91:e6:87:77:81:cc:2a:10:76:50:f8:41:5f:b7:62:
08:f6:52:7d:23:a7:11:5e:39:d9:30:bb:03:2b:d8:3c:32:6c:
0c:1f:97:90:f9:e7:af:21:98:89:c5:d3:83:af:ea:c2:13:b7:
58:9b:4f:66:cc:9c:5f:54:46:ed:83:39:20:a7:2d:12:d0:79:
e7:22:c6:9b:b8:13:39:8f:46:01:b4:f5:58:10:84:47:0b:eb:
5f:4a:7b:27:4e:ac:c2:50:0c:17:a9:08:d3:8c:19:4c:34:30:
ee:fa:01:d3:56:c8:49:57:61:a4:ae:35:58:68:3d:6d:e0:db:
e0:37:02:e7:cf:48:db:23:14:76:6d:77:c8:12:5b:3d:5f:34:
af:88:ed:9e:31:61:db:b4:73:f8:ab:fb:87:4a:75:1e:cd:89:
6b:24:51:9b:5f:b0:75:dc:a1:90:4a:2f:26:d0:ca:4d:55:51:
86:58:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:26:05 2026 by rpki-client