Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
File: zBlkheZzlI1VUF23UQ87lXfNOts.mft (raw, json)
Hash identifier: 28vYoHR8yE3fuEd/RlciwrccEpsxAE9YvA99O4Ov3ho=
Subject key identifier: 16:03:6F:E8:5A:C3:4E:B8:E4:D6:D0:99:48:19:49:9A:3B:BE:7C:34
Authority key identifier: CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
Certificate issuer: /CN=cc196485e673948d55505db7510f3b9577cd3adb
Certificate serial: 01A17F61BD465E9B9AE69C89A3DC771DC1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
Manifest number: 0243
Signing time: Tue 27 Oct 2026 22:01:14 +0000
Manifest this update: Tue 27 Oct 2026 22:01:14 +0000
Manifest next update: Wed 28 Oct 2026 22:01:14 +0000
Files and hashes: 1: X2BbHndtPwpXSs2sGEdVgFLq9BU.roa (hash: emzj289yDYGpibBHeVzv0i5u6U+HSsPi/OSfpVmeMAM=)
2: zBlkheZzlI1VUF23UQ87lXfNOts.crl (hash: 1GTdrf76scTan1huSEhkDZhRa61NSeUn8xG75GjZsa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:bd:46:5e:9b:9a:e6:9c:89:a3:dc:77:1d:c1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc196485e673948d55505db7510f3b9577cd3adb
Validity
Not Before: Oct 27 22:01:14 2026 GMT
Not After : Oct 28 22:01:14 2026 GMT
Subject: CN=16036fe85ac34eb8e4d6d0994819499a3bbe7c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:d1:5e:28:1f:73:15:f1:c9:38:20:46:4e:
62:a4:3a:b9:95:bc:3e:87:54:ca:ad:58:1b:05:21:
43:0a:a0:21:9b:a9:12:65:0f:7d:46:d7:f5:c4:d7:
71:a6:ba:a4:9b:26:c3:2e:89:11:ef:4d:b4:51:dc:
f4:93:99:ba:cb:97:3f:41:6c:32:14:71:21:a5:aa:
c5:12:c3:3e:af:3d:91:08:f9:6e:92:9f:21:2f:7c:
f5:19:a1:74:c6:2e:c3:5a:a8:46:d2:48:49:66:05:
11:d3:c0:5c:25:74:8e:08:41:6a:0d:7c:be:c7:63:
7f:81:f3:b1:ae:c8:3c:bf:06:4a:90:4b:a7:94:ae:
0e:83:24:95:7b:50:fb:8d:fe:f8:84:25:62:3f:ab:
97:ed:6a:70:47:c5:a4:83:87:d6:c0:1e:c9:2b:43:
be:35:19:3a:79:81:a7:cd:f4:da:92:75:96:db:cc:
0b:19:97:5a:39:7e:f0:76:3d:89:3f:1b:88:8e:86:
4a:7a:09:e8:ac:ac:65:9f:06:d1:b8:c9:9f:28:f6:
e2:fd:15:f9:d7:03:ba:5e:03:39:4e:6c:3f:52:56:
96:29:9d:89:5e:0a:21:d6:12:50:2f:67:6c:7c:8a:
7c:fc:7f:13:b8:df:92:df:6b:74:2f:8d:2e:ca:01:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:03:6F:E8:5A:C3:4E:B8:E4:D6:D0:99:48:19:49:9A:3B:BE:7C:34
X509v3 Authority Key Identifier:
keyid:CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c5:76:62:a0:09:c1:62:a4:4d:c2:b3:90:ef:7b:7d:83:ab:
ef:a4:72:fe:1c:09:53:16:0f:9f:76:1e:bb:d8:a0:c8:8f:8e:
b8:d4:39:44:db:23:f3:f3:d8:99:1b:ee:8b:d7:93:c7:cc:21:
38:ab:e8:a9:73:33:fb:81:46:06:d7:cf:e7:e8:e5:3d:59:88:
6b:f7:20:47:0b:cb:c8:3a:31:15:36:01:63:2e:1c:68:a3:23:
24:da:d4:09:23:6f:dc:4f:03:73:82:80:a4:57:73:55:aa:79:
f3:47:c0:50:0c:e5:4b:49:86:cc:23:c2:e3:df:0d:c0:e7:d1:
51:05:23:e6:ce:f8:c6:d0:a1:64:18:36:e5:00:e7:a0:db:6d:
d9:16:25:ed:51:fe:86:f3:15:73:44:34:7c:0e:53:3f:8b:1b:
4f:5c:17:41:37:da:f8:05:c1:9f:36:f5:d9:d1:f8:58:00:89:
bf:f6:b1:b4:b5:9c:4f:88:2c:49:db:c4:ca:c5:13:3e:f0:17:
7b:db:78:c4:13:3b:51:00:6b:26:96:f0:86:b3:84:50:ef:6e:
4e:9b:1b:22:b8:00:6a:11:d4:4f:21:5b:42:d3:c9:68:a3:d6:
f1:4f:43:80:7e:52:a6:e3:4f:be:c3:cd:c3:76:56:97:aa:a2:
fd:0c:ca:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:42:07 2026 by rpki-client