Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: srylFKOwRidwXXfCfBCfDmHPMbU1f+MuPMBuIRivkAU=
Subject key identifier: 4A:40:C9:84:B0:1A:C9:E9:54:6D:44:05:C5:DA:1A:A8:7B:B9:79:A4
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 01A16F806183B4AFF330C711E7D422D8D536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 0711
Signing time: Sat 24 Oct 2026 20:00:46 +0000
Manifest this update: Sat 24 Oct 2026 20:00:46 +0000
Manifest next update: Sun 25 Oct 2026 20:00:46 +0000
Files and hashes: 1: IAA66PvhbnZNq6DYqFa4jxHq9Mg.roa (hash: CI2b/MsfzBD//bruekgU/jIDPxItVVrUl8xZ4Kyd7+M=)
2: P0v6mR3smcBt5UiE9QMtEljH-o0.roa (hash: 1OZZCNxK0pEOgMba5af7rR5wKnFTBqdHQ6QRRxIRAJU=)
3: XO6sev2FSqLYRr5iJTi7ipxkMsw.roa (hash: elcbj3ZPXUwSlQ0W1VHvrn7ftkq6V4JJB3c4lvRA2B0=)
4: hjWKjeV-jJppeG0fD1H6zmH-Ykw.roa (hash: OeUU/W5Kc0WkJxZpiZAujOCtL2D7yZcVNpe7fsq3VBQ=)
5: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: ox/2ywFc1uNF+UNB+UqnTexKjMdbJfQRbk+vY3Dz/YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:80:61:83:b4:af:f3:30:c7:11:e7:d4:22:d8:d5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Oct 24 20:00:46 2026 GMT
Not After : Oct 25 20:00:46 2026 GMT
Subject: CN=4a40c984b01ac9e9546d4405c5da1aa87bb979a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:74:6a:87:fe:f1:5b:94:16:85:74:2b:71:
33:fa:44:44:fa:1d:99:5d:86:f3:f1:80:e4:43:c2:
e4:cd:fa:ce:96:2e:65:43:be:65:05:e6:42:fa:ab:
6c:36:34:1e:bd:c1:1b:1c:cb:aa:f6:e4:00:68:7f:
5d:c4:09:b3:18:4b:45:69:fa:1d:ac:db:50:7e:ad:
6b:4c:b0:cb:89:7f:66:d9:50:ca:3a:f4:0d:91:f4:
5d:51:2c:3b:67:d1:eb:11:73:4d:88:39:ca:56:01:
17:5c:03:60:53:75:cd:1a:1a:ac:59:f5:81:b3:65:
93:06:ad:c8:d5:ef:61:13:cc:5a:22:f5:ef:c4:47:
51:f4:6f:f0:15:40:b3:b5:76:41:35:2b:4b:ea:25:
77:15:a8:4f:fd:da:00:c6:4f:38:87:fc:a1:e9:0d:
3d:58:39:ed:e9:00:b5:0c:92:6c:12:3a:82:f4:0a:
25:dd:82:86:2d:45:e7:a5:bd:33:19:90:a0:d3:8c:
94:d5:8f:b0:ec:34:eb:df:c0:3a:14:45:6b:c6:0f:
1f:45:63:83:60:64:ce:3e:72:a0:89:32:1b:b5:29:
3a:5e:02:8e:14:82:73:f1:0c:02:f1:fc:57:66:35:
45:e4:dc:41:ae:8e:50:14:17:04:23:2f:2a:4a:57:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:40:C9:84:B0:1A:C9:E9:54:6D:44:05:C5:DA:1A:A8:7B:B9:79:A4
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cf:b5:84:a4:8b:69:2f:c6:cb:a3:23:cb:85:03:e4:42:46:
19:63:04:3e:23:e3:da:bb:a3:c7:d0:b1:40:68:49:a2:b1:0d:
24:cc:e2:e2:66:e6:a2:ab:96:28:8b:bb:aa:2a:e5:ed:98:82:
a4:33:fd:23:e4:da:23:13:d5:69:47:43:22:36:72:05:5d:73:
07:4d:dd:1e:a2:00:5e:aa:bf:8b:8a:77:1b:e2:a2:c6:a3:a5:
98:05:33:94:99:81:37:84:b5:ec:cf:1a:71:82:73:fe:08:05:
ae:67:7b:14:58:65:fd:80:08:dc:b9:16:e2:b4:84:a2:d9:97:
de:e4:5b:19:b3:3e:25:c8:be:61:31:5f:65:7b:63:96:f5:51:
52:91:2f:76:ce:e2:c2:67:fa:a0:5a:2d:d4:e7:39:d7:73:0c:
fc:58:a7:3b:3f:8e:12:7d:c1:6f:b7:fd:c9:93:cb:1b:b1:9f:
4c:ad:6f:90:1f:57:bd:ed:9e:f5:39:2c:c2:6e:dd:c6:b1:af:
99:12:8b:b7:09:eb:43:74:4c:82:0c:7c:20:be:55:0e:c2:8a:
ae:49:0b:a7:a2:49:f8:28:3e:1e:a4:2a:d7:b4:75:51:80:02:
62:01:ca:08:35:69:08:89:5e:7f:17:58:31:dd:f3:1f:fa:c0:
8d:e1:23:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:23:23 2026 by rpki-client