Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier: CrrK+HU19kOVZ5BF5UHH0oxHCbvC9HYl01bk1EV/lVU=
Subject key identifier: 97:A2:78:9B:BE:63:DB:0C:9D:08:B5:B6:C6:2C:28:EF:44:61:2F:1A
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial: 01A1987C455D260D02050954721E2896B6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number: 165F
Signing time: Sun 01 Nov 2026 19:00:43 +0000
Manifest this update: Sun 01 Nov 2026 19:00:43 +0000
Manifest next update: Mon 02 Nov 2026 19:00:43 +0000
Files and hashes: 1: EwsR7ogZ2YLZZ8aegj4DELyBhHo.roa (hash: Y1tJ60G7x0ZKhUEEE5jcmruvEdQYLf/RNmOle950aNY=)
2: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: /+znA3L46csGzxkm01ds1qvZl6JCauKAS+J1DwtvxDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:7c:45:5d:26:0d:02:05:09:54:72:1e:28:96:b6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Validity
Not Before: Nov 1 19:00:43 2026 GMT
Not After : Nov 2 19:00:43 2026 GMT
Subject: CN=97a2789bbe63db0c9d08b5b6c62c28ef44612f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:95:21:2b:4a:c2:22:72:52:df:65:e2:1c:
a2:4b:b7:d7:16:e4:ec:11:8c:3c:fc:52:df:c5:29:
ff:2b:d6:75:4d:be:fa:96:6f:7f:8b:c3:8b:6d:05:
b4:9c:5a:b0:aa:f6:98:86:8a:fa:98:e3:a2:c2:d2:
74:25:71:71:53:c3:99:63:f1:ed:dd:a7:ab:bc:88:
4d:53:f0:06:73:a7:57:e2:0a:f2:99:f7:d2:6b:38:
8d:be:3a:88:78:8f:a3:cd:bb:96:69:89:e5:e2:4d:
3f:8a:5f:07:be:60:c1:25:73:69:67:82:34:db:c1:
b5:13:e5:59:3d:22:98:66:7a:f3:26:db:3b:ee:47:
f5:1f:63:41:e7:fa:8d:1e:30:c3:4b:57:e6:18:1d:
b6:c1:26:1a:4d:e0:c3:bd:e5:c8:5d:5d:22:81:08:
a4:ed:2c:31:b4:43:86:3b:2d:6d:37:a7:57:f9:c5:
f0:e8:b5:6f:a2:e7:92:1d:90:ab:3d:89:62:7b:5a:
1a:93:88:1c:c2:d9:79:1f:24:83:48:ef:6e:d9:51:
89:83:8b:58:dd:f2:98:d6:91:d4:31:7d:1a:e4:03:
63:e9:ef:56:7b:ce:87:27:b4:a5:3d:c1:f7:b0:78:
2e:5d:b4:04:2e:c5:78:0a:a1:de:2c:52:36:66:36:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:78:9B:BE:63:DB:0C:9D:08:B5:B6:C6:2C:28:EF:44:61:2F:1A
X509v3 Authority Key Identifier:
keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:05:2d:52:00:8a:db:7d:e5:9e:cb:9f:a5:0a:ef:54:fb:c1:
43:e7:2e:9c:83:05:22:9d:5e:27:84:ee:58:13:1a:76:11:20:
f1:f5:6f:c9:d8:38:0f:14:3e:1b:2e:7d:62:19:b1:66:8f:c1:
93:e7:d5:d7:3b:87:92:79:ff:27:09:99:28:84:8c:b4:ca:df:
9c:46:e6:ea:49:5f:5b:6b:02:fb:e1:93:23:02:56:79:e6:fd:
1d:e8:45:fc:1d:8b:4e:54:7f:fc:dd:1e:8d:ac:62:4a:84:d1:
3d:ba:43:f3:f6:39:5c:35:9a:ea:bb:98:67:dd:58:6e:fc:ca:
f0:02:4d:f1:fd:36:d4:7c:2b:90:0f:5b:e5:86:81:50:32:f0:
5c:e3:f5:e3:34:59:90:ea:67:2f:bb:31:85:ea:e1:5a:4f:73:
44:ca:c5:28:3e:2c:33:73:cf:b1:2e:e1:3d:ed:36:53:34:53:
6f:91:23:ab:d0:5f:5a:bd:5a:53:1d:88:ea:0b:03:4b:60:dd:
83:34:26:97:38:cf:b9:8a:cb:d6:47:83:45:46:96:21:f1:96:
f3:f3:1a:db:e1:e9:ff:c2:59:2d:a2:35:79:ec:bc:2e:e7:1b:
b3:e9:2e:31:5d:93:a5:cf:7a:7a:c1:18:d0:d3:03:d2:bc:a4:
ef:3b:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 00:40:56 2026 by rpki-client