Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: UZge962B/sPZ98BiHCDbEkEQ1cPT+KM9UxZj0u9RH5Y=
Subject key identifier: 85:C1:F2:A2:B7:94:56:90:3E:09:2F:19:57:35:0B:E3:6B:F0:F3:2C
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 01A15E8D5C7FAF156E0D0AD30768028E1821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 1A47
Signing time: Wed 21 Oct 2026 13:01:24 +0000
Manifest this update: Wed 21 Oct 2026 13:01:24 +0000
Manifest next update: Thu 22 Oct 2026 13:01:24 +0000
Files and hashes: 1: TnpKsIrCpfum69mVWYffLpmGkW4.roa (hash: GTcF25unpZajDdgtvW9ktN1du2kJWKPqouAAWsJtWlU=)
2: iUEHX1o0_l8jTQlhzAvjptzhPL0.roa (hash: DpWo5iq7cHsCZy0a6PUHW0Vs0n1oWSh3Ty0O4gm3/dU=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: vtoLJUbuI7/J6kmeY+Fa2yOMXxMxKTOoZyeN6LRPOes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:8d:5c:7f:af:15:6e:0d:0a:d3:07:68:02:8e:18:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Oct 21 13:01:24 2026 GMT
Not After : Oct 22 13:01:24 2026 GMT
Subject: CN=85c1f2a2b79456903e092f1957350be36bf0f32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:4a:45:31:b2:50:c7:85:1a:8d:8c:dd:0f:
bd:76:6c:53:b9:e0:7c:f9:e0:78:8f:6a:da:9c:19:
ad:e4:97:0b:bd:2e:94:61:12:e7:d2:09:5b:25:33:
0c:c3:0d:c3:f3:8d:73:24:fa:03:c3:3b:20:c7:77:
23:1c:3e:1f:5f:54:1b:55:fa:b2:74:d7:f5:31:6e:
8f:84:57:f1:86:07:13:9e:84:5e:70:c7:4b:ec:a9:
5b:f4:2a:e8:67:9b:ef:06:d9:68:64:fd:b9:9b:a0:
c2:d9:64:15:d5:ef:20:1d:ff:c7:5b:65:66:48:e7:
a7:21:d5:5c:8d:1c:9b:a1:fc:b5:3e:45:63:24:42:
f7:38:0b:69:68:61:ea:da:4a:a3:67:f8:58:2b:9a:
49:96:a1:76:98:ec:1e:cd:1f:a0:24:d4:50:0c:c8:
41:3c:b3:22:e1:32:f7:01:5f:dc:68:51:91:1d:96:
ef:09:ab:1c:50:af:7c:39:e1:66:1e:64:77:50:a0:
c4:81:69:03:f0:f5:5b:6c:b5:c7:5b:34:91:14:b2:
13:c3:0f:09:19:10:cb:20:5c:1a:6b:7e:bd:1f:06:
34:80:ee:1a:4f:c0:68:41:41:8d:56:5d:0b:9e:7d:
73:36:6c:f2:7f:b6:03:eb:bd:4b:9e:9f:6a:75:80:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C1:F2:A2:B7:94:56:90:3E:09:2F:19:57:35:0B:E3:6B:F0:F3:2C
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:15:ac:31:28:e0:90:8f:18:c8:8f:55:a8:40:c0:22:26:a8:
53:fb:80:cd:bc:2e:cd:a7:d5:c2:b8:4f:24:8e:e8:2d:79:9a:
01:9b:b0:5c:cd:a2:f3:c1:30:a1:90:03:b0:b6:b0:04:9c:d3:
d0:09:1c:d1:79:84:6d:6b:0b:87:49:88:c7:45:75:71:29:31:
25:e3:33:54:05:a6:5f:2c:1b:aa:c9:01:51:4d:54:de:40:25:
7b:47:7d:2e:83:d3:fa:7b:a5:e3:1a:fd:66:c9:44:9a:bb:71:
ed:3c:5c:66:73:5d:1e:f5:65:75:b7:6a:3a:5b:75:01:b6:4c:
64:ba:10:7d:1f:57:6c:87:94:2c:67:43:93:a2:92:36:32:ea:
e8:c3:a4:ab:3c:cd:4e:93:12:84:99:cd:61:5c:82:7f:5b:e4:
13:90:c1:b3:89:7a:07:01:c9:e9:de:6a:be:73:e4:64:b3:70:
75:a0:4e:2b:bf:80:c4:d0:1d:7d:75:32:82:ca:a4:1a:57:1b:
04:61:c6:f1:07:d1:91:e2:e7:b1:09:5d:21:9e:36:d1:e1:5f:
8b:7f:3e:69:1e:b6:aa:a5:fe:10:cd:dc:3b:42:0c:ff:c3:94:
39:f7:d0:56:15:01:41:97:9d:98:59:e5:55:5a:40:b8:ba:f1:
b7:c1:bf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:48:03 2026 by rpki-client