Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: lquL/LHdok4Pif3WEyDPxID4eroRDvyAuJaCjD58V9A=
Subject key identifier: D4:87:6F:6B:10:9B:C6:F7:B8:63:15:15:AB:B4:8A:71:80:FB:C3:54
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 01A14127EDBA7ADDF200AB619114A5117895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 1AAC
Signing time: Thu 15 Oct 2026 20:01:38 +0000
Manifest this update: Thu 15 Oct 2026 20:01:38 +0000
Manifest next update: Fri 16 Oct 2026 20:01:38 +0000
Files and hashes: 1: D4uyY53Lmy1XuEBR8gb-mU5orsY.roa (hash: 8oSSSK/7hQ8ikVIjak5cGWlYgkzTSsHj01P8F5aOk0c=)
2: _-wZGwfKC4JuWvajehhHWsCMKV0.roa (hash: d+1R/IWP3rQJYixIA4F2RI4IuR3jIDKC1rUEN0I2u8s=)
3: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: CpPKs6JqTmEWmx4MamdxjKTDH8wKF7Ez9m1k/KqF8VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:27:ed:ba:7a:dd:f2:00:ab:61:91:14:a5:11:78:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Oct 15 20:01:38 2026 GMT
Not After : Oct 16 20:01:38 2026 GMT
Subject: CN=d4876f6b109bc6f7b8631515abb48a7180fbc354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:a9:f2:8e:3e:14:76:b0:73:a3:6d:1a:0b:
d3:50:2e:7d:94:f6:89:20:a2:13:e0:b9:dd:0a:6e:
f6:91:ee:38:6f:4e:a7:99:66:40:5b:13:ed:d1:03:
c1:f2:eb:9d:35:90:7a:b3:cf:95:08:de:7f:ea:00:
0b:95:59:5b:44:38:35:55:40:97:86:ba:81:3f:ff:
58:c1:e3:d2:e4:5b:a6:e9:fc:63:19:4b:5c:ce:c9:
3a:0b:c7:78:42:64:7e:ad:33:c9:48:9d:ea:e4:e1:
23:d1:81:77:eb:dd:06:78:d6:98:4b:71:c2:f2:2a:
8b:9d:29:16:0f:ba:37:08:14:0c:ab:d9:d3:c8:85:
b9:e6:79:5d:e9:80:42:8c:b0:77:4d:df:91:02:0c:
4c:74:37:6f:6f:3b:75:9b:cd:7c:57:df:6c:8b:e6:
06:ec:60:7d:5a:24:40:ec:47:12:a9:c1:d9:58:46:
5b:4e:2d:14:b1:60:01:e1:3d:e5:dc:14:78:df:e2:
81:08:90:73:ed:a9:f4:5e:00:61:2d:f7:6e:48:9a:
89:2f:9f:a4:19:ff:7d:5d:be:9d:66:f4:2e:a9:2c:
2b:bc:51:15:58:2a:7d:7c:ce:e3:70:ee:70:2f:7e:
2c:da:a4:bb:1e:16:bc:0f:08:ce:18:fa:17:e1:c7:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:87:6F:6B:10:9B:C6:F7:B8:63:15:15:AB:B4:8A:71:80:FB:C3:54
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c4:01:c5:4b:90:71:8a:de:9c:a9:f5:23:c6:5a:9b:cc:01:
1e:c4:7f:b8:3c:d7:85:fe:bf:1c:b4:31:99:5f:e0:e0:87:91:
d4:85:51:0f:8b:bd:54:70:1e:26:fb:9d:fc:a2:38:84:26:86:
7a:50:2d:b4:ed:cd:9a:9a:fc:4d:06:df:f8:8a:0f:c3:83:fc:
d9:31:2d:77:8a:2b:b8:a5:f8:29:e8:2c:61:44:79:25:64:af:
0b:46:76:7d:6d:88:77:92:14:cc:4a:d9:9e:3c:6c:9e:af:e9:
45:45:42:d5:80:22:0f:77:f9:87:dc:4f:c8:9e:6d:3e:3a:2d:
8a:e0:39:28:e8:2a:dc:4e:f9:a1:88:0d:a6:13:30:f1:75:27:
d2:5e:36:51:5f:18:07:55:8b:3b:e9:e9:e3:ed:62:bf:61:95:
b2:da:78:ff:97:2f:33:ad:8b:c6:01:4c:cb:d7:21:3d:03:47:
a3:16:54:ef:2d:73:c9:6d:1e:96:7f:32:a2:2c:da:7c:11:f5:
d1:d2:0a:e2:8e:7b:98:e4:37:a5:fa:00:c8:06:b9:f3:a6:33:
23:84:e1:28:41:7a:59:fc:6b:2c:c4:b4:39:c8:85:f4:19:89:
d5:bc:3c:ec:94:9a:7e:2d:d4:02:08:54:4b:3e:0d:75:05:8b:
5a:aa:25:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:06:44 2026 by rpki-client