Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: S8hEwDzhrHnWp5XHiXSeo68HeanP8q4bPbEnvs/2lKI=
Subject key identifier: F1:2B:04:B6:8B:8D:CB:07:70:36:A6:B2:0F:67:55:D9:74:00:1B:80
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 01A1280C96E89AE0BE2939F72A14A06B60D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 08BB
Signing time: Sat 10 Oct 2026 23:01:16 +0000
Manifest this update: Sat 10 Oct 2026 23:01:16 +0000
Manifest next update: Sun 11 Oct 2026 23:01:16 +0000
Files and hashes: 1: hS5Y9HzX910k9UpkCXgXK-DSHdc.asa (hash: 3kQjrGqXqHnzL6l9Be46QjhfSNn8qYwPe+6rsfQM6lE=)
2: sQDcvzwfINZL1YKhOjuNrTumwws.roa (hash: 1SADRpnWZPKf4KWSJGPvG1rU1NGMXTSVZgSGEdq16/Q=)
3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: v8efCpRHaqDPtwyfw5hV8EPlt9frLTfkrQN4Ryba4SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:96:e8:9a:e0:be:29:39:f7:2a:14:a0:6b:60:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Oct 10 23:01:16 2026 GMT
Not After : Oct 11 23:01:16 2026 GMT
Subject: CN=f12b04b68b8dcb077036a6b20f6755d974001b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:e7:0d:d1:e5:58:61:64:34:67:37:9f:d1:
3a:7a:fb:4e:4a:32:9d:ab:ea:3d:15:de:5d:64:ce:
31:a6:c6:46:49:5d:11:7c:70:b5:ec:38:04:ea:8d:
a7:c0:7c:e2:07:d3:63:fd:b3:4f:81:17:1b:de:db:
ab:67:d1:ad:0b:3d:c3:48:29:8b:ec:37:30:dd:18:
60:21:7d:4a:6d:30:b7:97:b8:a8:63:f9:c9:b0:ee:
de:50:51:21:70:69:67:b2:37:61:18:14:f1:2b:fe:
9f:b2:a7:94:f9:f4:60:e0:d3:98:cd:be:67:26:b0:
88:99:6c:6d:a0:47:ad:68:d3:07:54:7c:0b:8b:9c:
09:59:14:2c:94:2b:0e:23:e9:e3:e2:88:3b:f1:82:
c3:e9:87:49:dc:29:60:02:06:ca:1b:14:ff:5c:01:
65:ae:70:90:3b:f5:39:06:10:1c:7e:7e:e6:7f:cd:
f5:1b:b1:a3:b1:82:12:96:18:74:80:59:6d:e9:dd:
69:45:08:68:b1:39:62:09:80:76:4c:24:c1:1e:a3:
d2:66:5f:42:cb:3a:8f:6e:d7:66:05:34:47:4b:61:
4b:b8:d3:77:53:a7:43:8b:87:a6:59:6d:d6:f1:da:
18:27:71:f1:d7:af:f0:a3:f9:d7:d7:eb:94:be:41:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2B:04:B6:8B:8D:CB:07:70:36:A6:B2:0F:67:55:D9:74:00:1B:80
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:99:35:77:5a:49:a2:5e:b8:09:b9:27:e4:8c:ee:6d:c5:f9:
47:5a:7c:3a:af:d2:64:c3:c0:51:16:6b:a9:04:97:22:98:29:
85:4e:9a:5a:d6:cf:74:1e:f5:4f:57:88:c7:20:a4:d5:1c:e8:
1b:47:50:26:d1:b2:4f:d0:d3:7b:62:72:fb:cc:40:c4:a9:a4:
e9:31:f3:e6:76:cd:a1:e2:be:ac:5a:7b:91:79:e1:9d:4e:ef:
46:3a:44:e1:52:b0:55:90:3f:49:0a:f3:e0:8b:4e:00:80:72:
6c:87:21:9c:7b:98:83:76:f2:f9:e2:f0:a0:55:3e:42:4f:5b:
21:a4:2a:9c:ee:17:9d:18:85:3d:45:27:64:e5:63:b6:88:97:
7f:22:99:55:22:76:bf:20:13:e0:e2:33:34:bd:7a:75:e8:c6:
24:ab:60:a9:92:01:29:77:bd:a0:09:0c:8a:23:ca:22:b5:62:
d2:89:a6:b1:00:2d:1f:0d:bf:35:ea:99:3e:a7:75:ec:a4:cd:
3f:02:b5:cd:23:08:c4:40:be:b4:54:6a:c5:19:c2:08:dd:f4:
be:a6:9f:99:18:62:bf:29:9d:8c:4d:a1:4c:e4:05:94:43:c3:
39:79:37:12:5d:3a:cc:4a:24:1b:c2:08:2d:98:83:39:52:d0:
38:b3:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:24:24 2026 by rpki-client