Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: sekI7RpE2dHYUav2dnsGsxMwgsKS2wrLBzCRhPXLWjM=
Subject key identifier: 9E:9D:36:8F:80:8D:A4:7B:8A:0D:53:8D:71:94:44:A3:01:9B:82:81
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 01A15CD562032DB43CA6A0E8249241613A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 1AB6
Signing time: Wed 21 Oct 2026 05:00:50 +0000
Manifest this update: Wed 21 Oct 2026 05:00:50 +0000
Manifest next update: Thu 22 Oct 2026 05:00:50 +0000
Files and hashes: 1: 8r944bJqG_LM17rTDE1uGAYMcO4.roa (hash: US/6Z/+ktv9Mac1FJpsH2XS8YNAZ76aWDA9Ebr1o3lU=)
2: BcVatgINhehxpYUrBXABJ41nAt0.roa (hash: GcuNKsGTXhiIzKjZT1cDQ3vbaLRIxIZoGDWXVty3fns=)
3: YPjYJdppvJ-xVHyJ3v-XHJpuM2M.roa (hash: zURKZ3NvzQl2kZFa7NPOhYYc5nLxhkqpMkhOysGx3l0=)
4: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: mHgbwyGirIRK64YjnibxvYwrWCOZcUY7vpF+vaBqDf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:d5:62:03:2d:b4:3c:a6:a0:e8:24:92:41:61:3a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Oct 21 05:00:50 2026 GMT
Not After : Oct 22 05:00:50 2026 GMT
Subject: CN=9e9d368f808da47b8a0d538d719444a3019b8281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:6f:6f:64:b3:6c:6b:dd:14:0f:93:a5:a7:
54:44:3a:24:4b:b9:8d:7e:1e:80:db:6d:5e:30:61:
81:f4:9f:e8:51:68:ec:29:4c:9c:ca:cd:87:01:11:
21:2d:c0:08:96:2b:93:62:db:a9:43:ad:db:92:2e:
3d:67:02:f7:4b:a0:48:30:9f:b2:ba:3a:4a:d0:57:
bc:5a:22:23:cc:b7:32:64:36:23:c6:d0:52:b3:db:
ec:c8:e5:0a:c2:13:44:cd:ae:b4:77:50:8b:ac:e0:
7e:04:04:84:7c:7b:70:8e:be:54:59:c5:d5:8c:74:
19:0a:0f:d6:4f:9b:2e:f9:1e:73:1c:b7:64:d1:cb:
ba:04:83:8b:a3:b9:91:f2:ff:e4:61:fa:25:ce:19:
35:30:a7:db:9c:0c:33:44:82:47:6b:bc:4a:6e:53:
36:75:3a:24:54:54:9b:fa:8f:f7:5f:7a:c0:e8:03:
84:a9:f7:72:83:50:66:86:a6:7d:33:95:22:b1:3e:
59:f0:97:fd:b3:a6:d2:14:c0:17:f5:39:5a:9b:4f:
8c:4b:10:8a:41:c4:f8:da:6f:1f:70:64:3b:23:64:
cf:a8:ca:0e:ee:03:c5:cc:e8:31:73:84:19:11:d3:
b2:b6:b3:26:c2:80:29:f7:3a:8e:ae:81:7d:28:b9:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9D:36:8F:80:8D:A4:7B:8A:0D:53:8D:71:94:44:A3:01:9B:82:81
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6d:4c:3e:b2:8d:7f:01:1c:13:67:67:d8:2f:e2:b3:6b:45:
93:05:9f:ad:5c:76:30:a1:83:02:14:3b:57:2e:2c:67:ca:d9:
a2:1c:78:4a:f0:a7:84:46:f2:6b:06:1d:dc:fd:1d:d0:f5:b5:
73:4d:e3:5b:fa:ad:f5:c8:a4:f5:86:4d:2e:12:a5:08:98:97:
30:1a:29:fa:2f:cd:6c:48:ea:28:30:2b:e6:a3:8c:58:4b:4d:
7d:a9:c7:46:53:b6:d7:a6:6c:ed:a9:3e:78:14:96:27:47:af:
97:58:d6:b9:29:da:b2:09:21:06:a6:2c:44:32:49:54:0f:c1:
eb:c6:66:9c:84:9e:78:2a:f9:16:eb:6d:90:b9:d4:b7:97:5d:
e5:51:41:7b:ca:cc:41:3b:e0:41:f8:7e:43:ac:10:fa:7c:3e:
81:07:74:c7:b8:5a:0e:3b:42:26:c0:db:ec:92:03:2f:b3:4d:
74:75:29:dd:4b:ba:08:c4:30:0d:d3:05:f4:9a:1b:38:6f:19:
af:a3:f1:10:bd:71:74:11:db:e4:2a:2a:64:78:5f:03:54:2c:
43:1f:62:9f:31:4a:43:d4:87:3b:de:69:bb:9e:91:54:d5:e9:
b0:59:1b:85:f2:ef:ce:f3:da:75:db:9c:ca:e7:cb:7f:b9:c2:
95:ed:92:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:14:57 2026 by rpki-client