Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
File: zxMebPBAsKlffsLJPjJqYQh9jG8.mft (raw, json)
Hash identifier: 7j35RlBGiqCWz16P6hOT8ico3QuD2u4g14am/78LdQE=
Subject key identifier: 26:BF:D0:72:39:FD:17:51:47:B0:F1:34:8E:9F:2C:D6:01:FA:74:4D
Authority key identifier: CF:13:1E:6C:F0:40:B0:A9:5F:7E:C2:C9:3E:32:6A:61:08:7D:8C:6F
Certificate issuer: /CN=cf131e6cf040b0a95f7ec2c93e326a61087d8c6f
Certificate serial: 01A183AC0C61C64FAED46D9925C6F29B1C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
Manifest number: 0142
Signing time: Wed 28 Oct 2026 18:00:52 +0000
Manifest this update: Wed 28 Oct 2026 18:00:52 +0000
Manifest next update: Thu 29 Oct 2026 18:00:52 +0000
Files and hashes: 1: vuq6nmS2o2IaE2-cQCXY0v0dkjM.roa (hash: /QlR6UrnyGXIfWBFiHE7gFFLbMr1qU25LazaUkwU8DA=)
2: zxMebPBAsKlffsLJPjJqYQh9jG8.crl (hash: lblfegSK+0/veMTSuyOMsvzfULA1HtsvZDhxuhTatqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:0c:61:c6:4f:ae:d4:6d:99:25:c6:f2:9b:1c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf131e6cf040b0a95f7ec2c93e326a61087d8c6f
Validity
Not Before: Oct 28 18:00:52 2026 GMT
Not After : Oct 29 18:00:52 2026 GMT
Subject: CN=26bfd07239fd175147b0f1348e9f2cd601fa744d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:b4:42:62:d4:5f:e0:97:78:6c:6d:83:6b:
0d:34:ea:95:23:14:c6:3b:d4:11:ef:42:7b:35:61:
2c:f1:9e:f3:cf:73:40:4d:6e:49:b8:d8:6a:ae:84:
fd:7b:9c:d7:22:a5:c0:bd:33:b7:7d:75:7c:81:d8:
17:27:01:ad:aa:3b:40:9d:bd:7f:de:e4:cf:43:31:
e4:43:96:9f:a1:aa:d4:aa:dd:ab:74:f4:83:e7:52:
69:0f:e1:4c:1b:62:6b:3f:66:3e:b6:6a:14:1d:ad:
fb:08:5f:f7:6b:c3:c0:6e:eb:b4:75:43:8b:cb:5d:
48:29:29:ad:05:d0:6b:25:dd:8a:fa:d8:cc:ad:39:
a0:5b:79:6d:72:2c:0c:8f:09:37:18:3c:a8:82:61:
35:36:be:00:60:90:d1:1b:73:4a:60:7d:76:cc:fa:
d5:41:99:4c:ed:68:77:63:0b:8e:71:4a:63:97:dc:
b2:d5:46:bf:f7:cb:35:0d:2d:75:63:b5:32:95:0a:
f3:97:0d:b9:56:1d:85:d0:72:55:8e:27:54:21:57:
e8:93:7f:1a:36:93:50:a0:63:0a:ad:ca:9f:d9:98:
b2:95:bd:9e:72:20:c3:4d:32:2e:1c:ce:75:f8:68:
99:25:89:ce:f4:4e:c6:15:33:f0:4f:20:0a:7d:a1:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BF:D0:72:39:FD:17:51:47:B0:F1:34:8E:9F:2C:D6:01:FA:74:4D
X509v3 Authority Key Identifier:
keyid:CF:13:1E:6C:F0:40:B0:A9:5F:7E:C2:C9:3E:32:6A:61:08:7D:8C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:86:3f:90:c7:25:f7:ce:00:5f:52:f5:a1:6d:b0:24:56:38:
5e:a7:98:80:d4:1b:27:dd:35:66:aa:0c:75:0a:88:e7:71:6d:
7f:a5:4d:ba:10:fb:08:8e:d7:96:88:88:65:66:ad:65:b3:8e:
2d:ca:15:a2:1d:16:9a:b8:fb:59:92:e5:f1:46:3d:e6:e6:cb:
04:a2:05:4c:a0:ac:fd:45:25:de:21:53:16:24:5a:d5:77:f2:
36:f0:95:db:73:78:d4:0d:61:61:69:57:61:02:ac:89:00:42:
fb:14:4c:b8:30:4d:6f:e0:cf:44:1c:a1:72:12:3d:53:4b:f1:
f0:87:0f:8c:5a:f6:dc:c0:93:a7:7a:ae:d4:00:5a:c6:27:3f:
0c:8c:91:81:8f:11:fb:3a:73:13:59:81:8b:f3:e9:84:d1:08:
29:cd:9a:87:df:e5:b7:26:c0:f8:62:e0:f3:05:0f:85:eb:15:
76:15:c1:d7:c1:84:84:a4:0c:ab:3f:51:34:cd:af:2b:0c:c9:
83:29:0b:dd:df:5c:a8:3c:3e:b1:a0:f0:a4:45:27:e7:db:03:
08:90:22:02:f5:16:57:02:5a:fe:b9:44:9b:5e:9f:f5:ef:a6:
e1:13:f0:a2:d3:cf:e8:18:3c:62:fa:86:b8:66:f0:02:b2:7b:
e4:27:d7:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDrAxhxk+u1G2ZJcbymxyCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTMxZTZjZjA0MGIwYTk1ZjdlYzJjOTNlMzI2YTYxMDg3
ZDhjNmYwHhcNMjYxMDI4MTgwMDUyWhcNMjYxMDI5MTgwMDUyWjAzMTEwLwYDVQQD
EygyNmJmZDA3MjM5ZmQxNzUxNDdiMGYxMzQ4ZTlmMmNkNjAxZmE3NDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj+0QmLUX+CXeGxtg2sNNOqVIxTG
O9QR70J7NWEs8Z7zz3NATW5JuNhqroT9e5zXIqXAvTO3fXV8gdgXJwGtqjtAnb1/
3uTPQzHkQ5afoarUqt2rdPSD51JpD+FMG2JrP2Y+tmoUHa37CF/3a8PAbuu0dUOL
y11IKSmtBdBrJd2K+tjMrTmgW3ltciwMjwk3GDyogmE1Nr4AYJDRG3NKYH12zPrV
QZlM7Wh3YwuOcUpjl9yy1Ua/98s1DS11Y7UylQrzlw25Vh2F0HJVjidUIVfok38a
NpNQoGMKrcqf2Ziylb2eciDDTTIuHM51+GiZJYnO9E7GFTPwTyAKfaHgOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCa/0HI5/RdRR7DxNI6fLNYB+nRNMB8GA1UdIwQY
MBaAFM8THmzwQLCpX37CyT4yamEIfYxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhNZWJQQkFzS2xmZnNMSlBqSnFZUWg5akc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMWQ2YzEtMTE0Ni00NTg4LTgzOGQt
MTQ3MTc3YjgzN2RlLzEvenhNZWJQQkFzS2xmZnNMSlBqSnFZUWg5akc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8zMWQ2YzEtMTE0Ni00NTg4LTgzOGQtMTQ3MTc3YjgzN2Rl
LzEvenhNZWJQQkFzS2xmZnNMSlBqSnFZUWg5akc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8IY/kMcl
984AX1L1oW2wJFY4XqeYgNQbJ901ZqoMdQqI53Ftf6VNuhD7CI7XloiIZWatZbOO
LcoVoh0Wmrj7WZLl8UY95ubLBKIFTKCs/UUl3iFTFiRa1XfyNvCV23N41A1hYWlX
YQKsiQBC+xRMuDBNb+DPRByhchI9U0vx8IcPjFr23MCTp3qu1ABaxic/DIyRgY8R
+zpzE1mBi/PphNEIKc2ah9/ltybA+GLg8wUPhesVdhXB18GEhKQMqz9RNM2vKwzJ
gykL3d9cqDw+saDwpEUn59sDCJAiAvUWVwJa/rlEm16f9e+m4RPwotPP6Bg8YvqG
uGbwArJ75CfXAQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:52:02 2026 by rpki-client