Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier: TB4v9qVGNc+bRu2uE9wScY/3sGGnZHFYN3+25tq208A=
Subject key identifier: 4C:40:DB:F5:25:2D:FD:7D:02:FB:AD:86:75:5E:34:95:B7:7D:A6:28
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial: 01A18B9C8FBBAC2EA95B85229A21E74F769C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number: 1ACD
Signing time: Fri 30 Oct 2026 07:00:55 +0000
Manifest this update: Fri 30 Oct 2026 07:00:55 +0000
Manifest next update: Sat 31 Oct 2026 07:00:55 +0000
Files and hashes: 1: vZ8MxOiXegtHuoU9azc_92OWfV4.roa (hash: iwh0Pl3Hne1gOnuU6enDkJTWZ+3nLBGQ17Ta8mwUfwg=)
2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: 2NUFHPNhosVuY4eu5G37LjPKRiIsCs/evSoaK7204uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:9c:8f:bb:ac:2e:a9:5b:85:22:9a:21:e7:4f:76:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Validity
Not Before: Oct 30 07:00:55 2026 GMT
Not After : Oct 31 07:00:55 2026 GMT
Subject: CN=4c40dbf5252dfd7d02fbad86755e3495b77da628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:05:8c:c9:32:9a:ca:d2:b1:21:66:b2:28:
09:98:5c:aa:ea:92:bf:99:d0:68:7e:d5:04:ba:3e:
68:25:b0:7a:11:b3:26:a3:6e:91:d7:8b:28:43:9f:
1c:5f:b9:69:bc:43:a0:ae:fc:85:15:30:32:55:fb:
ea:2c:8d:b1:46:f6:8e:24:e3:87:a5:55:48:fa:9f:
c2:53:d8:53:5b:79:1d:b5:66:85:04:17:94:ca:d2:
47:bb:55:3e:d0:a5:18:7c:d6:8b:7c:71:32:89:e1:
90:20:ec:61:80:1c:04:b9:7b:ff:54:db:2b:ff:68:
a2:c5:58:13:8a:36:a6:61:f4:b7:74:67:8b:49:b7:
b4:80:63:7b:79:87:5c:94:c7:f8:57:0a:26:cd:ec:
53:ca:69:90:df:0e:00:bc:25:cc:aa:5f:8b:f4:3e:
59:9a:42:c8:23:0c:47:c1:bc:97:eb:ee:50:82:87:
39:48:9c:33:46:43:6a:05:b5:4a:fe:16:47:9f:b1:
ae:72:4f:63:aa:2b:96:fd:83:fe:f3:04:99:8f:dd:
e7:bf:fc:b0:93:1a:3f:e5:96:86:2a:1a:9e:85:8c:
40:b6:f3:e3:10:16:a8:2d:eb:32:dd:db:40:98:18:
b1:bb:83:d4:6b:3c:02:47:67:c6:1b:0a:f6:91:f4:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:40:DB:F5:25:2D:FD:7D:02:FB:AD:86:75:5E:34:95:B7:7D:A6:28
X509v3 Authority Key Identifier:
keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:94:1a:e6:1c:41:fb:7c:b8:05:d4:f9:cd:93:84:37:92:db:
69:d9:da:19:3b:ff:f6:e6:6c:96:03:39:5c:82:bd:88:06:88:
09:45:af:19:a1:36:51:58:7f:58:55:41:bc:43:c9:ea:b9:f1:
8f:5a:ee:9b:ff:b6:8b:a9:44:2c:0c:71:da:a7:9f:7a:e9:00:
3c:68:ac:88:da:34:4f:0c:f5:5b:ce:40:88:73:02:9e:b6:4f:
1c:e2:9f:e4:e6:d5:66:09:b8:f8:61:14:09:b2:45:93:c1:64:
6e:a8:8f:2c:a4:b0:a2:1d:a4:64:b2:a6:b9:64:ee:eb:20:0b:
5d:eb:1d:03:70:c1:2a:77:4a:2b:1e:da:83:1e:e3:aa:0b:16:
40:1d:61:df:f1:23:8a:2c:3c:67:48:41:94:08:82:3e:cd:34:
27:a8:23:cb:d0:a6:e6:9a:24:02:21:5b:c0:a9:d4:b7:43:c4:
34:44:3b:06:77:b3:b0:68:b9:45:9e:80:2b:3e:fc:c7:2e:74:
61:b3:5d:33:0d:20:b6:de:7e:83:9a:bf:36:6f:97:0a:d9:ce:
96:c5:41:33:61:c2:45:f4:16:84:0a:12:0a:53:88:5f:26:bb:
fd:82:1c:32:39:ba:d3:ff:e2:90:89:bc:4f:8d:66:0a:38:77:
bc:99:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:04:49 2026 by rpki-client