Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: ZntbgWbdhrnxmceT6oCd//W7WVSmOPoLRzzulAuS/hY=
Subject key identifier: 66:F6:9A:02:42:E7:7E:C7:52:C0:B0:A0:FA:F0:13:74:D4:31:D6:F4
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 01A1DBA67FFCA70DA253599D6FF1FF5EAF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0F0A
Signing time: Sat 14 Nov 2026 20:01:24 +0000
Manifest this update: Sat 14 Nov 2026 20:01:24 +0000
Manifest next update: Sun 15 Nov 2026 20:01:24 +0000
Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: 3NHtqwy7bf96R0rzlyNnAculIwCwl1x124+ODNmtCwE=)
2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=)
3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:a6:7f:fc:a7:0d:a2:53:59:9d:6f:f1:ff:5e:af:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Nov 14 20:01:24 2026 GMT
Not After : Nov 15 20:01:24 2026 GMT
Subject: CN=66f69a0242e77ec752c0b0a0faf01374d431d6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:1d:e4:d5:c3:a0:13:67:59:e5:08:1d:75:
e0:3f:e5:4a:dc:59:cb:91:8e:56:78:22:e3:ae:47:
74:2b:75:16:34:d3:30:b8:e2:82:92:1d:0a:d4:e6:
54:d8:1e:4e:fc:ad:ad:09:ec:26:bd:58:c8:33:4f:
09:7e:39:23:65:b6:de:dd:44:28:e4:43:dc:51:59:
57:a1:dd:bd:3a:43:e2:99:60:75:fd:f0:e4:9f:a6:
9e:49:a2:12:3a:43:9a:12:e8:91:02:8d:81:83:3c:
a2:bb:2a:2a:2b:b5:88:49:74:20:ee:73:a7:1b:d8:
56:ab:09:83:4a:69:59:59:41:4f:a8:cc:53:52:e5:
c0:15:2a:34:e1:7b:6b:73:4f:03:e1:b9:e6:7c:96:
b0:0c:3a:f0:7d:1f:db:9f:aa:e3:bd:33:ca:08:d1:
89:c1:49:74:99:19:ea:4e:b6:ac:fe:18:cf:22:09:
0f:10:43:04:2b:66:8a:4c:3c:94:b2:f1:f1:1e:74:
d0:55:34:64:7e:0e:ff:f6:3a:2b:32:c0:5d:23:87:
82:0a:e1:3e:44:92:cd:ad:59:54:f4:71:f6:07:b8:
77:e3:fd:23:cc:76:d2:c8:d5:91:93:3d:30:5b:ec:
a0:10:6a:a0:18:55:e7:fd:c1:21:7f:1f:a3:8c:9a:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F6:9A:02:42:E7:7E:C7:52:C0:B0:A0:FA:F0:13:74:D4:31:D6:F4
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:96:5f:05:18:53:e5:a1:f0:b5:80:f9:70:12:53:52:f9:84:
0e:22:da:f6:59:91:df:6d:31:42:93:8a:ab:ca:ee:ed:d2:be:
31:99:13:f0:e1:22:01:52:41:5f:89:67:02:59:59:70:0b:b7:
68:b9:9e:c9:ac:f6:1c:16:c9:21:d4:af:56:89:ec:6a:c8:32:
f6:35:ca:8c:4a:a9:7b:42:a4:1b:c0:b3:99:8c:d6:f0:f9:cc:
71:3d:cf:dc:cc:50:5f:00:c5:63:0c:91:56:fb:8f:38:08:f4:
a1:1d:55:25:67:fe:ff:f3:11:51:cb:77:a0:9e:2f:df:cc:ad:
e5:4f:45:c2:ff:0e:be:4f:f3:cc:54:0f:58:d3:1f:b5:58:2d:
82:ea:46:f7:b6:41:17:66:22:83:38:e1:44:b1:0e:e6:45:04:
8e:be:72:f4:46:01:36:1e:1c:d0:66:7f:cd:c7:52:f1:ed:b6:
48:31:6f:82:e5:b2:62:91:b9:7f:c2:87:b4:0e:c2:13:c1:03:
24:a8:e1:4c:93:ab:34:d4:77:80:c0:4b:14:cc:dc:c9:83:25:
e6:e7:73:ae:ea:1f:09:ea:dc:81:e9:cd:0d:73:0e:98:5e:4d:
75:c5:30:fe:af:1f:16:d1:88:0a:6d:0b:e2:be:2b:df:f1:fb:
c8:58:8f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:33:14 2026 by rpki-client