Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
File: ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft (raw, json)
Hash identifier: TZ8hyz+qtJe+9NBCQ4FL81ZZyQlw2d3PoL6pnd3RznU=
Subject key identifier: 52:19:C4:E9:49:9E:CD:D7:0C:1C:4A:92:1D:F6:87:07:B9:B7:0F:BA
Authority key identifier: 66:59:D0:20:7D:89:6B:18:28:29:22:AE:EF:6B:47:2B:78:8F:94:32
Certificate issuer: /CN=6659d0207d896b18282922aeef6b472b788f9432
Certificate serial: 01A18C41A04A8870C1430C174539FF04BF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
Manifest number: 95
Signing time: Fri 30 Oct 2026 10:01:13 +0000
Manifest this update: Fri 30 Oct 2026 10:01:13 +0000
Manifest next update: Sat 31 Oct 2026 10:01:13 +0000
Files and hashes: 1: IIpkiT0DsKtry5SfDibaOaf5Gmc.asa (hash: piz50WCwexz+zSmea8jYzJEYb2s6Vf251Ay/agIa33g=)
2: ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl (hash: GhHkWgKs+O2X6N983RDjkNP0UOcJnFPzELThknli/kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:a0:4a:88:70:c1:43:0c:17:45:39:ff:04:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6659d0207d896b18282922aeef6b472b788f9432
Validity
Not Before: Oct 30 10:01:13 2026 GMT
Not After : Oct 31 10:01:13 2026 GMT
Subject: CN=5219c4e9499ecdd70c1c4a921df68707b9b70fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:37:ba:d6:4f:bb:e6:b6:5b:b0:bc:68:c7:
d1:60:a0:79:50:01:41:b0:cf:99:df:07:a5:2c:92:
ae:a0:e3:a1:d6:1e:30:8c:e9:a1:d5:28:73:ad:2e:
6b:6e:ce:58:61:e9:1a:65:b2:b6:69:5e:3d:8c:69:
96:42:6f:c8:6e:d6:d3:83:37:70:a8:73:63:85:31:
81:d6:89:b1:c5:a9:40:7c:61:0b:3a:29:d3:9f:19:
51:45:05:6b:f6:f1:fa:27:80:73:4b:2d:94:be:5e:
ff:c3:ed:00:32:f6:0f:86:18:dd:6a:72:fb:69:d3:
97:fa:44:1b:6f:24:07:32:02:46:b8:fa:fe:c5:1e:
45:4e:74:c8:98:84:c5:dc:c1:9e:a9:f3:c8:27:87:
5d:df:b0:d7:4b:2d:e9:87:19:f7:a5:32:96:71:8a:
85:68:a9:65:09:32:5b:21:e3:86:25:47:90:0c:ff:
7d:97:b2:f5:57:81:a0:a5:4e:bc:e1:f4:99:07:56:
17:24:85:27:ad:5a:32:c3:cd:8c:b7:69:5d:ee:19:
de:fa:8e:4b:b6:0f:5b:f5:0c:2e:46:18:10:0e:da:
0a:eb:b6:6f:5b:76:20:43:26:dc:38:20:c8:3b:45:
44:84:d9:46:22:a1:bf:dc:55:84:7a:7e:cc:95:a4:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:19:C4:E9:49:9E:CD:D7:0C:1C:4A:92:1D:F6:87:07:B9:B7:0F:BA
X509v3 Authority Key Identifier:
keyid:66:59:D0:20:7D:89:6B:18:28:29:22:AE:EF:6B:47:2B:78:8F:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:dd:95:aa:a6:3c:de:80:97:cc:b0:e6:49:49:79:49:5c:6a:
ba:c2:4d:88:76:56:23:a6:d0:9e:96:7a:20:c9:58:9c:66:84:
93:40:b2:2b:d6:8a:2e:7d:8f:05:ed:62:7f:c4:7c:db:a2:17:
d9:9e:ae:81:a7:35:42:9e:ca:c7:40:87:4c:ce:a8:5f:0c:9d:
83:19:ce:1f:80:be:1c:54:26:92:b0:6d:43:a2:4d:a0:60:60:
e1:e4:4b:02:49:96:3d:26:13:21:4d:97:08:91:fd:5c:1f:74:
5f:ef:c0:0b:a3:ed:27:8a:9d:28:e7:c3:20:55:8d:73:ea:ba:
24:fa:0c:c2:59:d2:14:cf:75:c7:57:54:30:e5:61:e0:6f:56:
bf:1f:6e:4d:93:80:13:b4:53:a1:5d:65:4f:f4:f9:21:71:ab:
2c:3b:9f:4d:26:e0:cd:4b:43:de:de:7a:46:01:26:33:05:c3:
be:ea:10:63:0b:67:77:16:33:45:66:73:79:4a:6b:dd:3f:6f:
50:97:f5:8f:0a:4c:17:73:05:81:67:5a:61:a2:a5:3d:b7:47:
7a:cb:af:a5:b7:7b:93:64:a6:6a:aa:f4:9b:a2:f1:1f:14:a2:
9e:f3:f8:fd:60:ee:86:db:f5:33:e0:0f:cb:9a:03:ba:e7:dc:
d9:a3:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:08:48 2026 by rpki-client