Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: XAainPXS19PIa37nV9B+AXDvCxSGloG3zDefnbLxyXg=
Subject key identifier: 83:FF:78:74:E9:F2:E6:43:53:BC:7B:01:2C:89:08:71:8B:9B:41:D6
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 01A17AA8699F928DF5366594E3B46B6B9064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 10B8
Signing time: Tue 27 Oct 2026 00:00:19 +0000
Manifest this update: Tue 27 Oct 2026 00:00:19 +0000
Manifest next update: Wed 28 Oct 2026 00:00:19 +0000
Files and hashes: 1: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (hash: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: 4VRVmicYBWNRWE2gLaJaHiF8+7lzZjEX2dV7tcTyiTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:69:9f:92:8d:f5:36:65:94:e3:b4:6b:6b:90:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Oct 27 00:00:19 2026 GMT
Not After : Oct 28 00:00:19 2026 GMT
Subject: CN=83ff7874e9f2e64353bc7b012c8908718b9b41d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:ea:b5:3f:36:e8:5e:cd:7f:aa:76:c8:eb:
89:7a:24:79:a9:c8:16:4f:b0:90:64:a7:45:55:7d:
c6:fa:cd:02:22:4b:1e:0c:32:7e:17:7e:fd:a2:b7:
7f:61:b0:df:f0:f8:37:cf:3c:6a:e3:ce:d4:e3:fa:
07:f5:25:ff:66:0a:b4:ea:0a:e0:a8:13:79:23:55:
c3:ee:3a:cf:d0:5f:df:8d:39:51:7a:1a:b9:9e:64:
b1:d6:35:63:dd:05:92:7b:b6:a3:2d:b8:5c:30:be:
cc:d4:79:54:78:c1:9e:ce:93:a8:9a:50:0c:00:2e:
95:5e:04:2b:23:51:0d:83:63:d4:f8:92:fd:31:00:
30:9e:25:c8:b9:bf:89:e7:b0:87:88:bb:8e:fa:b8:
91:5f:bb:a4:15:6f:a6:3b:5f:20:b4:f7:54:a6:ca:
36:44:de:87:51:73:cf:36:93:e9:50:cb:ef:1a:b3:
f5:04:ed:96:4d:a5:33:79:a2:be:86:f1:46:15:0d:
c5:fc:28:6e:79:2d:64:73:b4:5e:0d:20:f9:0e:9e:
cd:74:5f:ce:91:23:ad:38:44:b2:41:99:7f:ab:3b:
ac:25:76:27:06:0b:f7:d2:36:29:83:b8:52:af:76:
e6:b3:31:a9:99:ae:3a:14:b2:2c:83:f6:33:c1:3e:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FF:78:74:E9:F2:E6:43:53:BC:7B:01:2C:89:08:71:8B:9B:41:D6
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2b:a7:7e:a4:41:44:8c:81:70:9f:f8:93:c6:02:88:e8:27:
7e:a1:ac:42:3b:c8:3a:5e:66:00:c5:81:8a:d2:01:18:fc:31:
87:b5:21:77:6a:50:f3:0a:f2:54:f2:76:e1:7d:73:47:6a:95:
73:6c:3a:dc:34:ac:ad:3d:ec:0a:e9:7d:c4:54:1e:16:ca:86:
6f:ba:06:09:e0:b3:89:25:71:e1:39:d5:98:7d:05:ec:6d:bc:
89:e5:b3:f6:7e:b1:ea:fe:9f:8f:11:ac:8d:31:54:20:62:7c:
bf:d7:84:da:26:49:49:9d:84:fe:5e:e2:fa:1e:69:c3:87:31:
15:79:f2:17:05:83:ba:68:5e:71:e3:d1:99:b4:b7:64:dc:94:
14:8e:42:19:de:11:df:d5:e5:70:25:ac:ed:26:98:22:be:9c:
fb:2f:81:13:3c:2f:dc:72:34:11:a9:4d:91:34:6a:87:14:3c:
96:9b:15:d4:36:12:d1:c9:1c:bb:6a:ae:7f:50:2c:1b:99:dc:
67:24:ac:1a:16:ed:ac:b2:05:d7:12:1a:9a:51:d2:ef:5d:de:
3a:f6:8e:7b:ee:71:a2:15:51:68:00:ee:cf:08:0a:3b:43:42:
28:b6:e6:99:a4:8b:f6:18:d8:11:da:f2:c2:bb:f5:18:6d:39:
9a:43:10:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:06:13 2026 by rpki-client