Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File: znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier: 4X4v7sSVpxJK24BvFFLlMf01iwTElzwvbhifUyd/jSE=
Subject key identifier: 8B:D5:A2:F5:1D:D5:7B:8A:5F:75:6C:DE:64:33:A3:6A:45:17:F8:78
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 01A15DB14EC9B0357FF89B1DCA1AB4937529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number: 1AB9
Signing time: Wed 21 Oct 2026 09:01:03 +0000
Manifest this update: Wed 21 Oct 2026 09:01:03 +0000
Manifest next update: Thu 22 Oct 2026 09:01:03 +0000
Files and hashes: 1: 4io-REhzFRxPhNR2ODLWtq5-pVg.roa (hash: wvYJq+OJ0yBLuz2nx1cnZCl0Nf5x5+pis6cfSb4TkHk=)
2: arrkUMPGlGp12fBDJz-y-TlydqE.roa (hash: FzEjkq/IJVG3rsaQp/9UZuy/iTz0QoR1J2fAeimur2Q=)
3: rDrbyqGHpXISP5iG3Y1GTyKdM24.roa (hash: IEFZML7lOlLhBvi4soPybXTGWqMozr/vczumNvS04HI=)
4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: FSOVxu8dxQx0GSmHJmct5qSF7Azfishsp/gQVmcZHlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:b1:4e:c9:b0:35:7f:f8:9b:1d:ca:1a:b4:93:75:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Oct 21 09:01:03 2026 GMT
Not After : Oct 22 09:01:03 2026 GMT
Subject: CN=8bd5a2f51dd57b8a5f756cde6433a36a4517f878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:ea:52:8b:0d:a8:3c:4b:13:99:70:99:eb:
02:52:54:5e:f0:a0:64:c7:49:ea:a0:41:d7:0a:49:
da:58:d0:66:d8:a5:65:bf:e0:05:7a:66:da:30:9f:
68:86:e2:31:a6:98:ef:e2:4e:f3:b5:21:d5:6b:d7:
0a:d6:88:a4:f9:33:4a:84:34:c2:7d:2b:17:4f:4d:
c3:e0:62:ad:55:52:44:31:d9:ce:e9:e8:85:a0:8e:
1d:b2:d5:bd:21:b0:1b:79:91:aa:d1:de:7e:1b:98:
31:db:4d:a4:32:5d:3d:c8:83:c6:83:7b:75:f9:79:
91:4a:ec:b6:75:93:7d:a6:ab:db:81:b8:2c:33:e9:
4c:9f:b5:9c:09:ab:aa:c2:ed:91:ce:ec:95:f5:12:
9f:6c:b2:cf:c3:d9:db:cf:c5:18:32:ab:d3:93:72:
32:1e:c0:52:94:ca:03:35:1f:56:24:ec:66:8c:f4:
3c:44:c4:50:99:fa:24:ce:33:6c:cb:c5:b4:15:8f:
9f:d0:46:f4:d6:16:17:3e:a4:89:5e:8e:99:16:c2:
8f:96:90:75:16:fe:bf:6d:9b:be:31:34:86:b7:48:
c3:8e:73:28:8b:aa:e1:a5:4c:04:79:f0:83:c2:c4:
6d:4b:8c:f4:24:b7:4f:87:df:89:78:c0:2a:1a:20:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D5:A2:F5:1D:D5:7B:8A:5F:75:6C:DE:64:33:A3:6A:45:17:F8:78
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:69:c8:f4:cb:b2:dc:21:40:4d:4d:d0:0a:40:f4:0c:bc:87:
03:25:f3:3e:38:10:a3:f7:ad:f5:a3:3a:1d:b9:ec:63:1a:ba:
e3:2a:17:94:6b:b6:91:2d:68:10:21:42:d5:ed:9c:d4:72:91:
37:96:ff:72:33:b2:a5:86:48:5a:93:e7:52:7b:92:4c:2b:2b:
02:b3:49:08:4b:2f:2b:bc:6a:fc:14:44:a9:31:2f:83:02:9b:
d6:ed:da:5c:52:bd:ce:2f:02:4b:ac:ab:d2:cc:6a:04:6c:ba:
c3:bf:4a:79:34:f4:4e:2c:b7:59:02:e7:3e:2c:ef:94:e7:29:
d0:2e:95:a6:03:48:e2:d7:9e:2b:fe:22:e1:52:1b:9d:45:56:
27:cd:42:e5:e3:8a:59:de:84:8d:6f:8e:d0:ae:2c:b5:18:fc:
57:89:54:61:f4:d9:3b:d1:6c:37:06:cc:85:3e:5d:36:74:67:
86:09:03:76:2c:1c:c8:8c:9d:b2:9a:44:68:8b:42:24:cd:0f:
e5:78:9d:a3:df:41:83:e9:fd:c0:35:01:0e:87:b0:6d:6b:d8:
17:7c:bb:d2:c7:2a:cd:ea:34:fc:46:48:18:64:ae:e3:fb:26:
22:0b:0e:61:86:4e:c7:32:6d:55:1b:62:47:db:2c:4d:58:4c:
da:60:da:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:52:30 2026 by rpki-client