Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File: Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier: oVOfLikyiZex478q5M08hqTY0Vb9b1n1Iypt9sq1fU4=
Subject key identifier: 50:F0:88:D0:FA:9F:13:A9:85:D7:60:94:A4:E8:EE:A2:6F:CB:2E:6D
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer: /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial: 01A15A424949623DB82BE3FE13E4D1B11C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number: 1AB8
Signing time: Tue 20 Oct 2026 17:00:55 +0000
Manifest this update: Tue 20 Oct 2026 17:00:55 +0000
Manifest next update: Wed 21 Oct 2026 17:00:55 +0000
Files and hashes: 1: 0R8Nyml_jNijyqA_Jia2Nz1Ew_0.roa (hash: j8m8dgU0c2ttdrUH0oHPxb+CqlN+qsjDTMJ+LPXhKnk=)
2: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: EhBz45noj6oHibHQDAK8CMF8xGrpzDlAEIZLVTdnpbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:42:49:49:62:3d:b8:2b:e3:fe:13:e4:d1:b1:1c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
Validity
Not Before: Oct 20 17:00:55 2026 GMT
Not After : Oct 21 17:00:55 2026 GMT
Subject: CN=50f088d0fa9f13a985d76094a4e8eea26fcb2e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:59:a0:9b:f1:22:05:5d:5e:6a:39:1b:ad:
97:e6:5d:5c:b6:0d:10:cf:49:8b:3e:68:cf:82:f6:
80:70:61:66:cd:27:72:ce:92:b9:a1:86:3c:8b:4d:
61:0b:74:83:e5:85:9b:d0:a4:31:84:0a:44:40:9d:
42:a2:a5:2f:77:c2:34:0c:74:5f:1e:34:41:56:c9:
f6:0b:eb:a6:3d:74:66:2d:b2:a1:88:a1:fe:5b:c7:
e3:a0:23:8b:8d:73:8e:94:dc:05:15:61:49:cd:b6:
b1:34:20:2b:d6:17:83:0b:71:d3:1b:f9:12:22:03:
e9:fe:dd:18:98:ab:b4:bc:4b:76:0f:1f:08:9e:8a:
21:9f:2c:e2:c4:5f:30:25:b5:5b:51:33:b8:5e:51:
60:44:37:0c:50:69:f9:7d:84:6c:5c:1a:a8:7e:13:
44:e1:31:13:da:ba:15:c8:71:b2:d1:77:2a:0d:d0:
1a:37:ea:cd:9c:0b:a8:88:0c:fa:4c:22:a8:2d:2e:
c2:50:e6:72:33:38:1d:c4:ff:77:d3:96:36:cb:96:
58:ee:30:35:67:f8:15:b1:15:24:61:da:83:14:cf:
85:d1:20:69:ef:d0:d2:59:0d:cd:dd:90:35:d2:d6:
22:cb:02:58:68:ca:a1:cc:d9:33:24:be:7d:5f:d5:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F0:88:D0:FA:9F:13:A9:85:D7:60:94:A4:E8:EE:A2:6F:CB:2E:6D
X509v3 Authority Key Identifier:
keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d5:d7:01:fa:22:8a:14:4d:fe:dc:1b:0b:8e:b9:00:db:fb:
a1:a0:ae:ef:f5:88:35:ce:35:d4:73:d8:b3:f8:51:3a:4f:e9:
06:bb:04:f9:45:91:3c:93:ab:ff:07:bb:4b:48:9d:7c:5a:23:
c8:f5:ce:d8:b8:4e:0b:cb:2c:aa:d8:39:4a:93:d9:3e:75:a5:
ac:d4:e0:ca:7c:2c:b0:85:13:d4:be:a5:56:db:bd:a1:18:8c:
62:a7:2e:d6:97:d7:aa:49:53:5c:ab:5a:75:1d:84:44:5e:72:
7d:07:fa:fd:7a:65:d8:e4:28:ff:b4:74:3f:1f:fe:e9:b0:f1:
7c:64:fa:c7:d6:d2:5c:a5:b8:01:5f:5f:8f:1b:f9:13:91:26:
ee:30:b0:95:9d:91:58:6f:fc:e3:c1:46:5d:5c:b7:4a:16:f9:
fb:c5:a7:6a:b1:48:41:68:d1:32:ff:70:e5:83:2c:3d:52:97:
b5:e0:b9:24:ce:fd:81:75:ad:72:16:fb:26:62:98:04:4f:8b:
f7:36:13:6e:c0:7b:35:3e:18:6e:5c:fb:83:fc:57:52:e7:75:
4a:2f:d3:87:64:01:66:90:7d:11:f0:1e:0b:e4:8c:ac:1c:e2:
da:82:f9:a3:ff:12:14:f6:b1:e2:dd:9b:7a:a4:35:23:f9:32:
38:b6:7e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:20:03 2026 by rpki-client