Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier: JDh2t7cxaTmoolRqo9xiOUwbMeErCjyTHVItsM4m9i8=
Subject key identifier: B6:4A:C7:33:DF:45:43:2B:48:B2:4E:4A:5E:F5:8D:3D:E4:05:B7:29
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial: 01A12A316D6BA8AF19952A451D43EC23B9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number: 155B
Signing time: Sun 11 Oct 2026 09:00:44 +0000
Manifest this update: Sun 11 Oct 2026 09:00:44 +0000
Manifest next update: Mon 12 Oct 2026 09:00:44 +0000
Files and hashes: 1: gX3BQ48KT1SBCIdQ1BTvFv5yWJs.roa (hash: DEwg47W0q/dNOjfYsnuPLnMnC+CGQgRpMPoSjjP+Lr4=)
2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: Di71INhXC0Ciu1gRmfdFUbIkwsvrFDs8/G9HCsZNlCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:6d:6b:a8:af:19:95:2a:45:1d:43:ec:23:b9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Validity
Not Before: Oct 11 09:00:44 2026 GMT
Not After : Oct 12 09:00:44 2026 GMT
Subject: CN=b64ac733df45432b48b24e4a5ef58d3de405b729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9d:dc:65:19:2e:3b:c5:27:59:24:27:a1:12:
ac:9c:29:4d:44:db:6e:1f:16:d8:56:9e:62:80:41:
85:a9:ce:e6:46:d8:92:f2:e6:9f:67:45:98:42:c8:
f6:d3:a0:2e:08:f7:68:28:c0:28:83:18:59:cf:6b:
4f:b3:a2:9b:cf:fd:cd:20:68:6b:df:0f:99:4d:e2:
2b:ed:27:77:ff:23:c1:da:74:84:ae:5a:7a:27:12:
5a:ea:24:c9:0b:93:ce:f4:b5:25:65:fa:5f:91:f0:
37:cf:04:90:49:4f:b6:0b:f4:5a:3e:00:e9:c5:d0:
c4:ba:16:f5:ba:62:83:33:b1:f1:c0:63:de:42:7f:
02:6a:85:3a:53:3e:29:b0:9b:a4:e5:ff:18:84:4a:
6c:b2:0c:b9:ac:f9:04:e2:3e:63:7a:3b:2c:08:53:
5a:6d:d6:34:ec:bf:9c:97:99:40:56:b7:a5:69:12:
46:6e:ed:4f:2a:94:0f:78:1d:1f:cf:ba:95:99:b5:
43:6e:a7:10:b0:cd:b8:96:05:3d:96:dc:e5:d6:1d:
6e:da:c6:3b:60:10:16:9f:28:df:89:fd:04:00:87:
ee:52:ec:f2:ee:38:86:b5:2f:a0:87:6a:07:e3:77:
ed:47:58:97:9e:c0:d5:27:d4:15:24:31:b1:6a:2b:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4A:C7:33:DF:45:43:2B:48:B2:4E:4A:5E:F5:8D:3D:E4:05:B7:29
X509v3 Authority Key Identifier:
keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d3:cd:17:24:ce:b7:09:b6:6e:54:7a:42:0c:9c:df:36:a4:
69:85:a7:16:26:2c:e0:4a:e6:26:37:b4:f6:5a:8f:1c:34:24:
5e:3a:27:cb:3d:ff:cb:b8:9c:e4:7a:1e:03:d9:94:ff:4f:37:
44:ee:43:6c:8f:9d:60:bd:f8:ac:1f:24:3d:d6:66:7b:b5:80:
a5:02:fc:65:34:40:12:d4:c9:af:6f:da:88:8e:2f:55:fc:82:
ec:7f:c8:62:47:ae:38:3e:72:be:41:78:81:58:74:bc:69:35:
a4:d0:80:28:6e:08:7f:7c:dc:e7:4f:b8:50:2b:d5:55:c7:4d:
da:c5:b6:b7:9c:29:28:b8:79:f7:15:70:0c:2a:03:7f:07:77:
e5:28:09:2a:8b:69:7b:83:82:c3:5b:ef:01:db:91:99:bd:33:
98:ff:78:cf:e4:b9:8e:e3:2d:3e:58:36:5c:4a:bb:78:58:4b:
f4:cc:df:05:9b:d7:13:15:e0:29:cb:e3:6b:87:98:c2:ec:4d:
f5:51:72:74:0d:0e:53:7c:2a:45:da:08:85:de:cb:19:4e:de:
51:0e:79:80:44:b5:86:5a:54:13:c6:91:94:ae:dd:58:6f:fa:
7c:ff:d8:73:09:e8:79:22:01:bf:c3:97:c7:90:cb:a4:43:89:
f5:29:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:26:32 2026 by rpki-client