Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier: 2rArPuwskdT7DpOLtwYbqfk3kW+aU3QxzCJdpxvlyUQ=
Subject key identifier: 52:93:2D:73:D2:59:87:52:8D:1D:3C:11:27:DB:BA:BC:F1:1C:D3:5D
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 01A10A3979226467A810F046DD24821722F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number: 1A87
Signing time: Mon 05 Oct 2026 04:01:40 +0000
Manifest this update: Mon 05 Oct 2026 04:01:40 +0000
Manifest next update: Tue 06 Oct 2026 04:01:40 +0000
Files and hashes: 1: TAemyk33p1zXgyxiSJqWPeQVynw.roa (hash: qzyHhOuBo7tPm0yMPXt6srTNFtIZysUY2o24I/uqBiU=)
2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: XyYQD+kLBqBEFe7C5KjBRkhxAhrVwKNn356mmEzU5Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:39:79:22:64:67:a8:10:f0:46:dd:24:82:17:22:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: Oct 5 04:01:40 2026 GMT
Not After : Oct 6 04:01:40 2026 GMT
Subject: CN=52932d73d25987528d1d3c1127dbbabcf11cd35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:e5:3c:d0:e6:dd:c1:1a:1a:41:c3:be:e6:
a5:7c:35:4d:ef:15:1c:2e:58:02:59:7e:29:71:86:
12:15:8e:74:bb:da:02:87:22:79:0e:3f:a6:78:64:
00:1c:d2:b3:89:09:e0:4d:73:4c:fd:3a:e4:f4:90:
44:fa:5e:9b:00:0e:1b:81:61:1c:5a:30:15:ee:69:
06:54:46:5f:24:5b:d7:d8:1b:5b:c0:96:d8:e0:1c:
3b:d4:88:61:04:af:35:9a:c8:2b:64:03:27:3a:32:
29:54:4b:9e:da:c0:bc:91:3b:ca:f9:72:c8:9d:b8:
02:8e:74:8d:1d:f2:14:39:e5:65:a6:d6:3a:dc:6e:
62:7f:14:47:27:bc:0b:8a:a3:7b:37:a0:d5:96:cc:
47:56:e7:93:f2:0b:85:1b:48:a1:b5:57:59:9c:d0:
fb:e6:bc:57:8b:5c:93:91:19:5f:a2:34:83:f7:ff:
15:53:a0:c9:7b:c2:d2:3a:92:ab:28:07:5d:cf:03:
08:83:ec:9d:9b:05:7f:8d:21:20:31:d9:9e:d2:ea:
fd:fe:79:8d:42:c7:00:3f:76:44:3f:72:d7:e5:23:
5d:e9:cf:60:c2:07:06:71:42:8a:64:ac:31:c6:78:
24:00:ab:ca:4e:c5:fe:e0:5f:74:25:e1:cf:ba:30:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:93:2D:73:D2:59:87:52:8D:1D:3C:11:27:DB:BA:BC:F1:1C:D3:5D
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:78:a6:43:40:25:73:71:93:c0:85:57:7b:d7:53:3c:81:14:
24:11:b8:e4:a0:a5:37:64:f2:10:00:fa:0a:46:db:69:e2:90:
8f:92:52:4f:a0:2e:2a:16:4f:c1:52:fb:14:81:2c:c1:d5:e4:
3a:78:c5:9f:fa:8e:5b:ca:d2:49:01:98:8e:7b:5d:6a:8f:43:
63:30:d9:f3:bd:1a:d5:00:0d:3e:54:f5:b8:4d:37:1a:a9:2c:
8f:e6:f5:1d:c7:8e:22:02:00:68:58:1b:67:ae:24:3c:d1:44:
97:98:95:7a:e1:5f:db:33:c2:9d:e8:f9:54:42:ff:ca:ab:29:
84:a0:09:ce:61:c3:08:d8:58:8b:74:0c:88:1d:ce:99:58:49:
a0:2a:97:26:5f:4f:60:3e:83:39:e8:60:ae:b1:24:ef:38:60:
5e:9f:19:95:c3:64:d5:34:22:2c:0d:e2:a0:38:bc:29:13:f8:
8f:b8:f2:66:5e:87:37:f2:e1:76:01:38:07:69:29:de:01:b1:
fa:87:0b:78:ab:cd:73:1f:d9:12:6e:4c:07:a2:82:4b:1b:a0:
6f:ac:6f:77:56:24:73:79:7f:cd:a4:5a:31:56:8f:63:43:60:
8e:e5:ae:45:8a:4b:fd:bb:2b:d7:a7:1f:a0:8d:ca:3b:36:b3:
75:91:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 14:42:30 2026 by rpki-client