Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: 0DWS+e6I1t8XVgiMzjbfZCsGRP0EpN6maU8jH31xfkI=
Subject key identifier: 88:A5:34:15:F4:E6:F7:57:94:9D:17:F1:42:24:47:FB:FB:99:C3:46
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 01A106934EC0F010662FD798CF190284BA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 08E7
Signing time: Sun 04 Oct 2026 11:01:19 +0000
Manifest this update: Sun 04 Oct 2026 11:01:19 +0000
Manifest next update: Mon 05 Oct 2026 11:01:19 +0000
Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: MCS+GgaGlNc1Q9VH6jmhXJ05vGePn3mM5O4OdqcNKyU=)
4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:4e:c0:f0:10:66:2f:d7:98:cf:19:02:84:ba:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Oct 4 11:01:19 2026 GMT
Not After : Oct 5 11:01:19 2026 GMT
Subject: CN=88a53415f4e6f757949d17f1422447fbfb99c346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:04:84:ad:80:0d:55:1e:2c:59:36:17:af:
b2:47:3f:92:72:0c:00:1c:19:9d:e3:4e:f8:1c:d6:
15:fb:95:7c:5c:5d:0c:55:bb:8e:93:28:89:ca:19:
17:dc:ce:58:c8:51:5a:cd:03:ee:81:fb:1b:da:bb:
8c:f4:8b:a3:1f:23:14:81:6b:25:db:bc:c4:e7:98:
67:97:c0:1d:ff:04:f8:c9:8e:0b:5f:8b:6d:86:fb:
5c:4a:f2:47:0b:07:e8:f6:ae:b0:5c:f5:aa:d5:b1:
87:15:0e:e6:7e:50:53:9e:31:eb:f5:3b:3d:40:39:
31:0d:79:1f:d1:89:36:33:56:92:9a:49:e7:ab:0f:
c1:15:7c:c0:26:2a:15:18:13:4b:3f:c6:5b:cd:3c:
8c:aa:77:03:a0:0b:82:38:0d:7d:1f:8c:fa:3e:5c:
89:f7:13:8e:4c:21:5e:96:96:49:17:e1:f6:bd:69:
52:2b:48:b0:ae:17:ba:47:a8:da:56:c8:0a:d2:5f:
3f:0e:71:3a:e4:c2:54:fc:16:f3:8d:c0:73:16:a6:
8b:87:4b:86:80:56:74:14:10:68:fc:27:0f:c5:82:
e5:d1:b0:9f:5d:61:ac:0b:a7:8d:e2:83:7e:d7:e3:
bc:51:91:f9:c8:3d:2d:41:3c:0f:4f:11:03:de:e7:
78:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A5:34:15:F4:E6:F7:57:94:9D:17:F1:42:24:47:FB:FB:99:C3:46
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:91:30:27:6f:3f:0b:2a:59:b3:10:69:ba:53:c0:62:cf:be:
6c:3d:b8:41:e1:f2:f9:57:f0:f2:62:0b:91:5a:ec:2a:80:10:
8b:f8:b0:50:f5:ab:96:1b:2d:0f:ab:c1:67:87:7c:c3:4a:d7:
3c:1a:03:33:85:3e:d9:75:a3:dc:4c:19:c8:95:2c:e3:d3:0f:
e5:3a:e3:96:b8:40:50:5d:d7:09:fb:ef:29:93:aa:6c:21:74:
7c:76:87:e9:4a:39:65:2b:de:cf:41:33:3e:a5:04:bb:2e:7d:
da:c8:de:7d:43:76:78:00:94:5c:b8:b0:5e:aa:ab:19:35:65:
50:7a:57:3e:9a:86:51:ef:07:54:f4:99:2b:26:db:48:d3:cf:
ad:b5:e0:cd:67:40:46:29:19:f0:5f:21:fd:b2:27:d3:58:20:
e5:e6:ea:08:e4:30:cb:9f:1b:e6:bf:7e:81:7d:a9:ca:61:19:
e2:66:2d:8a:80:61:89:f7:37:ac:50:45:26:06:66:42:7c:ad:
71:be:4f:fe:5a:d6:aa:8a:06:74:f5:4f:cb:75:a4:8a:4a:c0:
64:03:27:a5:4a:0d:01:4b:d3:ec:9e:6f:4b:a3:b2:92:b9:fd:
d9:17:70:cd:6d:cd:27:42:49:a3:8a:7b:ef:85:b9:5b:24:3c:
22:92:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:40:15 2026 by rpki-client