Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: FuP+dKS5JhfDLiiI9Sf1hV5JmUXKkBRZNCr81H6p+6M=
Subject key identifier: DB:12:53:3A:78:8B:2A:7F:E3:61:72:5C:5A:0D:4E:93:EC:51:45:20
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 01A1DF4C0A64D8574A7F84EB254822CCD801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 1A89
Signing time: Sun 15 Nov 2026 13:01:04 +0000
Manifest this update: Sun 15 Nov 2026 13:01:04 +0000
Manifest next update: Mon 16 Nov 2026 13:01:04 +0000
Files and hashes: 1: f8pXdTunsFienw12OWOwkjd9_Sg.roa (hash: D84B6IFhxTwUljKKeuMD7kN/I53xCeCr1djjSkG38Ek=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: VwYr3g0jAOK+PozUaz65e11oCc70KHqCMwNS/646KbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:0a:64:d8:57:4a:7f:84:eb:25:48:22:cc:d8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Nov 15 13:01:04 2026 GMT
Not After : Nov 16 13:01:04 2026 GMT
Subject: CN=db12533a788b2a7fe361725c5a0d4e93ec514520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:54:40:39:88:fc:56:34:d5:ad:d9:33:c4:
b4:a5:06:b9:e6:65:e3:e3:dc:43:c3:08:e9:8a:7d:
28:97:75:b8:5a:ac:36:e0:2a:06:c7:ed:34:5e:58:
f3:c1:12:39:f6:6d:5d:09:f3:50:2a:e4:ea:f9:27:
36:95:27:45:2e:81:4e:9a:a3:a4:ae:31:fb:4d:3c:
94:98:50:16:74:43:28:29:61:5e:7d:51:61:44:74:
24:5f:67:6b:43:74:f5:fd:f0:c3:25:c1:3d:80:d2:
49:86:16:f5:13:23:47:e1:9c:c0:78:77:14:e0:4e:
f3:9b:1a:07:be:12:a5:5d:21:20:a4:32:a6:82:2a:
63:b2:9f:38:19:02:69:1e:aa:af:86:d7:28:0f:51:
c6:c8:df:b0:97:60:8a:8e:f6:e8:b5:8f:f4:97:ee:
14:27:cd:9a:a2:7d:cc:0d:8f:a9:d9:64:82:36:05:
f1:9f:7e:ee:b8:4f:64:b8:b8:42:1c:62:02:ad:9c:
a3:50:4e:18:cb:0c:76:69:2d:81:d4:86:45:26:00:
55:a9:f4:c5:3b:98:4b:f9:9d:8d:c6:94:e7:5c:0f:
08:33:b5:f6:5f:3a:4c:e4:2c:24:c3:79:d5:e8:04:
5b:a9:e5:df:8f:3a:fe:2e:bf:bd:b5:09:90:45:bb:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:12:53:3A:78:8B:2A:7F:E3:61:72:5C:5A:0D:4E:93:EC:51:45:20
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0c:8c:3a:b2:f6:42:dd:f3:01:0a:4d:6f:ee:13:da:6f:8d:
a3:b8:f8:04:a8:0c:60:a2:96:93:5d:be:34:2d:b6:05:a9:9f:
6c:a9:a2:a9:d1:87:6d:75:6f:a1:af:2c:f1:7f:3a:89:b1:a2:
2d:d2:88:86:b5:c8:4b:93:56:78:42:06:01:2c:38:84:44:ba:
fb:3c:14:16:94:75:1c:cd:43:99:24:77:01:93:3b:21:07:d9:
5a:f9:ed:fe:c1:44:65:a7:ab:d6:f7:6c:bd:b8:42:60:7b:59:
60:02:ad:88:13:e2:94:df:95:52:38:98:9e:fd:b5:04:e3:3b:
d0:5a:89:ab:36:0a:df:37:cb:f9:1d:d6:8c:7a:89:d3:d9:78:
1b:82:32:61:a1:d5:e1:d6:73:2d:a7:1e:d0:86:e4:c6:df:c8:
ed:9b:26:7e:f8:e4:9f:5c:4a:95:dd:33:a1:2f:ee:32:b0:5d:
a9:f4:8a:79:34:ae:5e:17:8f:aa:45:b3:62:ab:5d:ae:d0:8a:
ab:8f:36:77:28:3b:8b:a5:90:43:6c:b4:9a:e2:a0:84:c5:6d:
84:67:e8:1c:d6:66:5f:3d:7a:c8:e2:09:4f:95:c6:66:f5:22:
e0:68:1f:9f:c7:c3:9c:79:45:a5:3c:7b:ad:ea:4c:a4:fa:b8:
90:67:a5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:46:09 2026 by rpki-client