Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: NYSvFTFsweSoDAs3b7R8uM2AOchjI3q12qnUt7uDsH8=
Subject key identifier: B5:42:51:5D:87:50:60:38:46:C9:F1:C7:F9:6A:13:58:40:E2:B8:12
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 01A15DE7D565E6F63D5E43A7BAFCAA4A22BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 1AB5
Signing time: Wed 21 Oct 2026 10:00:36 +0000
Manifest this update: Wed 21 Oct 2026 10:00:36 +0000
Manifest next update: Thu 22 Oct 2026 10:00:36 +0000
Files and hashes: 1: Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa (hash: MI2P4v9i+kU4F9eDStIUnkN/VYUaWV71u0evfwMIhOU=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: DPlvOMYyBjyoZSliCc8uNpmO+5nzvDDOWDDzLK44eFA=)
3: fzcY56XdnFZoFNt0HXida4aSHGU.roa (hash: MqoKni1V8waFiRzOClIF15P78qFKBD2MS62bZfGpfEI=)
4: n43sGwmhzZ66iynJ53zXSTJbQU8.roa (hash: fV5lfxAtxqffZkSRdmIPhZPQSriuDx7t3nKVTXbhIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:e7:d5:65:e6:f6:3d:5e:43:a7:ba:fc:aa:4a:22:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Oct 21 10:00:36 2026 GMT
Not After : Oct 22 10:00:36 2026 GMT
Subject: CN=b542515d8750603846c9f1c7f96a135840e2b812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:8c:08:87:9c:65:21:88:c1:ba:81:82:29:
b2:e0:a2:5b:3f:b7:fa:ed:1e:a4:12:e8:57:9d:04:
40:10:7b:fb:6b:6c:f5:68:01:9d:b5:93:11:6c:fc:
84:b4:01:87:b6:df:d1:fd:a9:e4:25:c8:da:01:ef:
23:cb:e6:c8:f2:1b:95:7e:a8:3c:23:13:0c:f5:8a:
10:40:90:37:bc:2c:5e:04:1f:fb:dc:d8:26:7d:10:
87:ca:75:94:58:b1:bd:78:c9:a3:04:41:60:3c:78:
fc:aa:4e:cd:3e:78:ed:2c:e0:a9:1c:52:90:51:0a:
fd:0b:a1:69:64:45:00:de:fa:6c:27:a9:2b:77:00:
10:3f:54:7b:54:41:70:19:d8:f2:45:49:87:e7:2d:
c7:01:89:f3:dd:9c:4b:8c:ec:ca:19:6e:8a:f2:32:
69:a0:e4:6d:6f:f3:8d:4b:71:8f:8b:4d:74:a1:47:
d3:01:95:1b:32:09:4e:76:0a:da:3c:5b:26:19:1d:
9f:ad:88:5c:eb:1e:98:b7:3c:45:2a:b2:41:17:71:
67:f0:89:05:ee:44:57:21:0d:30:65:c4:3c:47:a4:
35:cf:e9:6a:05:95:8f:f7:d0:5f:23:a8:44:91:5e:
4f:9c:9a:26:2d:dd:56:c3:01:23:44:d5:9e:bd:dc:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:42:51:5D:87:50:60:38:46:C9:F1:C7:F9:6A:13:58:40:E2:B8:12
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:10:23:cc:f7:3a:1f:d1:19:6c:23:3b:ef:3f:fd:7d:4d:9c:
f4:41:4b:a4:69:4f:33:64:23:c0:86:4d:e6:43:3c:26:98:b3:
d4:e5:53:be:7b:cb:af:54:a4:35:13:63:cd:a6:50:9f:10:0b:
16:49:3c:27:77:2e:2e:e5:98:41:50:07:c3:eb:25:f4:17:a9:
cd:a7:c4:5a:a3:cf:51:33:12:59:74:b3:23:51:99:ef:a9:7c:
76:f2:8c:a7:6b:05:2c:4a:0b:f9:ff:db:ba:2c:ad:2a:4e:21:
5b:8b:fd:e8:ce:dc:bc:7b:d3:3d:ce:f2:bd:8c:74:2b:80:7c:
62:10:45:db:1d:91:05:43:55:1d:77:86:7d:a0:b2:90:d3:15:
09:0c:8f:31:96:d2:f2:9f:28:60:29:7c:76:3c:a3:fb:bf:ab:
b0:80:21:fc:b9:c5:1b:45:27:c1:be:d3:e6:3b:2c:ce:10:bf:
b0:b4:85:66:f5:af:00:05:3f:2b:73:ae:b7:66:4e:f9:01:01:
7c:c7:97:70:1e:ec:c7:68:84:1b:b4:34:eb:e4:72:4a:cb:21:
20:cb:0c:e3:d3:d4:22:25:f6:89:4c:33:52:23:84:2e:19:77:
d5:b7:93:90:65:85:c9:42:7a:47:52:a3:ee:1a:81:fb:0d:ed:
be:b5:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:08:42 2026 by rpki-client