Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
File: ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json)
Hash identifier: cbEiXxOa2jqp0S+UeBcsOOHFmg2DvjZzrqdid6xvgHk=
Subject key identifier: 73:B5:CC:87:38:B2:34:18:4F:3A:20:6C:FA:1A:DB:E2:AF:F0:04:25
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial: 01A139377D04158FD04D1452C100E82F3CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
Manifest number: 1AA6
Signing time: Wed 14 Oct 2026 07:01:39 +0000
Manifest this update: Wed 14 Oct 2026 07:01:39 +0000
Manifest next update: Thu 15 Oct 2026 07:01:39 +0000
Files and hashes: 1: LT7SpeHVHrImIlmvmDypryVJsMA.roa (hash: UY3Bc5Ii8P52rm9NhIsYSUCYO4P4gv1+uleYch2vT5A=)
2: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: fa/k+UQB6NdaT2q0QVO2vWr51S+Oyhk1u8FnzLfjdnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:37:7d:04:15:8f:d0:4d:14:52:c1:00:e8:2f:3c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Validity
Not Before: Oct 14 07:01:39 2026 GMT
Not After : Oct 15 07:01:39 2026 GMT
Subject: CN=73b5cc8738b234184f3a206cfa1adbe2aff00425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:00:86:b1:af:ce:81:5a:b1:6e:59:1a:d2:a7:
4a:71:8e:85:a4:59:c5:f3:57:ed:de:3a:c2:d8:ff:
1e:5a:36:6c:28:c7:2f:10:24:45:c9:2f:49:f3:03:
4b:52:93:5d:89:0b:a1:ad:c2:6f:bd:67:ab:43:98:
b5:f8:bd:a1:84:36:cd:3a:7b:d4:ad:3b:5a:4a:72:
25:2e:56:0c:da:8b:9b:90:b2:00:21:75:9c:97:ba:
23:ea:e9:df:03:09:de:99:6d:d1:5e:cf:c5:79:a6:
b3:54:0f:ba:ff:a7:d7:fa:06:83:c5:87:3a:20:24:
01:b3:40:f3:b2:b0:f5:13:06:29:06:16:f4:96:6a:
db:08:05:67:2c:ac:ad:e5:f7:9f:03:37:9a:9e:04:
c1:08:ce:97:11:73:22:86:96:56:60:c3:d6:e5:9b:
92:6f:69:63:5e:db:0f:46:93:c6:f7:4a:70:a1:a9:
ae:ae:8a:43:c8:c7:28:48:fb:e5:38:2f:4f:bf:33:
db:b2:3b:91:f0:51:0e:71:e0:d7:c3:07:b2:85:88:
3b:a6:bb:35:35:a2:2c:14:d0:3d:0d:e3:8f:a2:1f:
c4:d5:f4:4c:36:b4:a3:80:29:5b:6e:ad:d2:dd:f3:
28:3a:a3:3e:f6:76:9a:7b:3b:64:bd:2a:83:21:9f:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B5:CC:87:38:B2:34:18:4F:3A:20:6C:FA:1A:DB:E2:AF:F0:04:25
X509v3 Authority Key Identifier:
keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a5:b3:42:19:f9:9c:da:b4:63:68:97:52:cc:21:27:cd:e7:
18:e9:43:63:23:f0:e3:4c:0c:ed:f2:56:69:e8:8d:1c:e0:5f:
41:68:7c:17:66:42:36:0f:18:8a:33:87:cc:16:d1:cc:1d:48:
be:ac:84:05:ee:d6:6f:ef:c5:03:f4:70:2f:74:3a:bc:ea:a2:
14:3d:4c:12:f9:54:3e:d4:d6:b3:5a:c3:3e:d6:c9:77:71:f5:
1e:48:02:1b:3c:e6:aa:3e:d6:3c:53:2f:2a:76:90:96:96:73:
3b:57:90:f6:9a:55:b8:62:e3:cc:b2:14:bb:56:83:07:b3:24:
ef:e2:3d:24:02:ee:d0:54:56:14:7a:f8:d6:ac:f9:2e:aa:f4:
fc:40:d2:de:f8:4a:09:ca:66:90:d3:dc:d1:ea:ae:fa:41:db:
cd:8b:0e:57:c7:23:06:1e:b1:4b:2e:bc:45:65:51:ed:2c:bb:
53:dc:b2:e2:7b:fd:fd:32:0b:40:e2:a2:91:d6:88:94:7f:15:
4f:b0:4d:4f:c6:92:9e:a5:92:48:cb:ee:76:43:47:ed:79:29:
1c:de:e4:18:0d:57:24:31:26:41:74:51:b9:7d:fb:8c:6b:1f:
eb:9e:99:0b:29:de:14:26:28:1a:5b:88:4c:40:58:81:87:dd:
28:b3:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:50:55 2026 by rpki-client