Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier: Bs3tGWd4kxK0iOSJVsX41sMazwgeS05/sTT8RlY5pek=
Subject key identifier: A1:A4:21:CE:E0:58:BC:DB:10:C5:A2:2F:4F:AC:B9:3E:F1:A3:C4:01
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial: 01A19A6AA0BC0B98649DB2054209349B04FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number: 1660
Signing time: Mon 02 Nov 2026 04:00:41 +0000
Manifest this update: Mon 02 Nov 2026 04:00:41 +0000
Manifest next update: Tue 03 Nov 2026 04:00:41 +0000
Files and hashes: 1: EwsR7ogZ2YLZZ8aegj4DELyBhHo.roa (hash: Y1tJ60G7x0ZKhUEEE5jcmruvEdQYLf/RNmOle950aNY=)
2: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: j0ZglcDtAVP1Z+RUHlqystVoT98DRWx5fl6lcxVq1ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:6a:a0:bc:0b:98:64:9d:b2:05:42:09:34:9b:04:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Validity
Not Before: Nov 2 04:00:41 2026 GMT
Not After : Nov 3 04:00:41 2026 GMT
Subject: CN=a1a421cee058bcdb10c5a22f4facb93ef1a3c401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:0a:2f:ae:37:dd:32:ad:d5:b5:d4:8b:ea:
21:5b:bc:15:b1:b4:e6:2d:1d:08:c2:de:30:ff:6a:
c3:3d:48:e1:6c:59:c4:c8:ea:87:ad:4a:57:c3:87:
71:dd:fc:56:7f:d0:5a:6a:44:79:79:d7:92:e5:ac:
be:6a:ec:5a:96:7a:8e:c2:ed:31:4e:41:04:62:74:
4c:2a:50:20:c9:8f:4b:41:ff:a7:03:32:1f:3f:d2:
2f:77:de:c6:6f:e3:39:13:2c:97:ce:52:da:08:b1:
88:f3:6c:ce:c1:ec:05:88:14:45:4d:98:41:4d:cc:
cf:93:e7:fc:d9:27:bb:61:db:5c:62:60:8a:67:d9:
2e:f4:a4:2a:a5:85:99:e7:6c:c9:89:e2:39:b5:2f:
95:f3:0b:8f:22:7d:90:43:42:81:fd:27:77:56:86:
0c:13:be:1f:24:69:24:81:bb:66:9a:91:54:59:e5:
e5:98:41:13:8e:96:6f:0c:aa:de:0d:3d:68:de:f8:
0c:d7:2c:43:1e:5a:9d:09:a1:94:ba:39:42:89:21:
7a:78:2e:d7:35:1e:e2:16:f2:4a:88:5b:3d:ba:8d:
ea:78:4c:e0:f0:bb:94:31:2f:97:6b:a8:f4:e6:26:
0e:e7:70:ee:ff:4c:43:b8:b5:5a:5d:05:3f:0b:28:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:21:CE:E0:58:BC:DB:10:C5:A2:2F:4F:AC:B9:3E:F1:A3:C4:01
X509v3 Authority Key Identifier:
keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4c:27:51:b5:ae:46:b0:e4:5e:2e:a8:f7:6d:ca:77:01:45:
a8:35:bc:eb:fb:63:20:79:a2:f6:f2:d8:19:76:0a:0e:c7:ae:
51:82:f1:14:39:94:1e:4f:08:3f:9f:2b:80:e7:6c:93:01:01:
1c:3c:a3:68:db:ec:6d:31:92:05:38:62:8f:60:da:dd:f7:28:
c1:d1:07:9e:76:63:ba:e5:17:25:cc:e5:57:08:52:3f:9c:94:
64:e8:63:71:2d:64:50:1d:7c:27:5e:33:c0:44:7f:e6:35:42:
6b:8a:91:7c:af:51:11:bd:64:5f:b6:5f:31:44:44:fc:1e:b1:
f2:aa:2f:49:b0:a2:34:ad:9f:bc:79:d0:18:34:93:66:e8:4e:
2c:be:7d:1e:a3:c7:42:f6:8e:05:01:8b:04:44:09:04:c9:07:
a0:f6:c9:8e:f9:6c:7b:bb:5d:47:d6:eb:75:c7:ad:0b:63:fc:
de:de:d9:a6:fc:40:e3:be:1e:f8:47:cf:ef:fc:dc:cf:55:7f:
67:24:df:2c:b1:37:08:89:b3:42:2f:5f:28:b8:05:9e:5f:98:
24:db:3c:3b:4b:fe:4d:b1:46:90:e3:b0:aa:d4:d4:f9:4b:6f:
50:ca:2c:b5:bc:11:15:f1:3b:cb:05:ea:b7:e0:38:97:34:1c:
70:e0:59:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:29:16 2026 by rpki-client