Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: mZZsPW2co/H8gSBA9W/v8qRao4AnS+XLEV2mqoR2a5M=
Subject key identifier: A8:DB:B8:65:CA:AE:13:6F:54:18:BD:5F:FF:6F:7F:8C:2D:DA:29:B7
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 01A1DD9508890576F1F24F165E9B19BD3DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 05FD
Signing time: Sun 15 Nov 2026 05:01:34 +0000
Manifest this update: Sun 15 Nov 2026 05:01:34 +0000
Manifest next update: Mon 16 Nov 2026 05:01:34 +0000
Files and hashes: 1: DV_1PU5sghttOAyD5Fk0auja6M4.roa (hash: vyYX2XFHKs4PfXvL2MDa+XaKNUQzIY/+9Y9TmVp9CiU=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: kh5Hb4kx6WZ7OkuNwWNAfrNi39YgbVDIiiqMQpQTNeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:08:89:05:76:f1:f2:4f:16:5e:9b:19:bd:3d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Nov 15 05:01:34 2026 GMT
Not After : Nov 16 05:01:34 2026 GMT
Subject: CN=a8dbb865caae136f5418bd5fff6f7f8c2dda29b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:4f:aa:91:0c:a6:9f:2e:25:2c:1a:e9:39:
69:31:d0:d6:cf:f3:47:15:85:8c:ef:c7:93:47:78:
9f:38:ce:6f:6e:e0:02:f5:d8:a9:1b:7e:36:21:b2:
4b:60:bf:02:a5:b3:7b:41:99:7d:a6:05:b1:c2:6c:
1e:33:e1:7b:0d:ca:53:19:e6:d9:b9:77:bd:73:81:
6f:75:d1:0c:34:c8:65:03:26:69:ce:15:b8:5c:41:
0e:c0:96:83:fc:3c:74:69:e6:39:0b:8f:86:7f:9a:
e7:61:fb:02:68:2b:c4:69:ce:ed:44:df:c9:df:26:
ce:22:5e:43:3d:d8:8e:24:59:76:58:ff:f0:f8:02:
e3:10:2d:b1:41:b4:ca:34:d5:84:3e:55:2a:a1:d5:
dd:36:f0:be:01:6a:51:db:04:fc:a7:d3:ba:be:8d:
3f:4f:db:23:52:00:3a:7e:14:2b:d6:af:fe:b4:20:
56:97:90:7d:ff:82:2c:b3:f3:7d:00:f6:28:c0:aa:
55:b2:2d:cc:86:cb:d1:dd:0e:1d:82:c9:c7:d0:be:
fe:32:c1:3a:56:9a:f0:d1:60:66:02:7f:60:cc:82:
35:cf:13:f2:a2:88:7c:06:5a:d9:fb:8f:8d:a4:7a:
28:32:8e:1e:dd:9f:53:5d:b9:60:65:4c:31:c6:f7:
15:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DB:B8:65:CA:AE:13:6F:54:18:BD:5F:FF:6F:7F:8C:2D:DA:29:B7
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:e7:b3:92:93:6f:e1:90:7b:dc:7a:fc:28:d5:52:93:f5:46:
aa:f5:75:51:d0:c6:a6:9b:07:e8:cd:79:e8:77:16:5d:3c:41:
20:25:69:86:e2:1d:8d:c4:96:01:4f:dc:71:d7:19:f6:a4:4f:
62:9e:ee:6b:c5:43:f4:30:25:34:d6:6b:06:35:67:11:f1:5a:
ea:16:34:5d:f3:35:b8:36:3b:e2:94:80:8a:17:d8:29:df:c6:
50:58:71:d9:60:e0:3e:63:1c:c5:40:79:14:2a:b5:4f:26:59:
bf:fd:74:1c:b5:82:37:5f:c6:2c:7b:9a:64:6d:56:c2:66:e2:
c1:e4:e6:31:92:34:4d:82:43:9a:e3:25:56:8e:4e:ab:79:bb:
36:89:af:46:3c:9b:58:46:c4:aa:9b:24:09:57:ba:ef:72:55:
9f:b0:01:4a:20:60:60:ec:7e:8d:91:eb:f3:0f:f2:42:49:35:
f2:03:d7:a5:b3:04:dc:26:3b:0a:97:f0:67:66:07:cf:65:3a:
9e:02:98:e9:0d:4a:3f:63:87:e9:3a:ba:01:22:a6:08:f3:3f:
41:ea:14:f5:fc:58:7d:fe:37:42:c2:18:87:62:1f:8b:7c:a1:
b1:26:41:8e:b1:5b:dc:0c:6e:00:b2:2b:e5:69:97:ca:7c:7f:
eb:c1:1f:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdlQiJBXbx8k8WXpsZvT3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDNkMTNkZDI2ZjAwNDRhMjgzZmM2YTExZTc1NmEyYTJi
NTY5MWIwHhcNMjYxMTE1MDUwMTM0WhcNMjYxMTE2MDUwMTM0WjAzMTEwLwYDVQQD
EyhhOGRiYjg2NWNhYWUxMzZmNTQxOGJkNWZmZjZmN2Y4YzJkZGEyOWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU5PqpEMpp8uJSwa6TlpMdDWz/NH
FYWM78eTR3ifOM5vbuAC9dipG342IbJLYL8CpbN7QZl9pgWxwmweM+F7DcpTGebZ
uXe9c4FvddEMNMhlAyZpzhW4XEEOwJaD/Dx0aeY5C4+Gf5rnYfsCaCvEac7tRN/J
3ybOIl5DPdiOJFl2WP/w+ALjEC2xQbTKNNWEPlUqodXdNvC+AWpR2wT8p9O6vo0/
T9sjUgA6fhQr1q/+tCBWl5B9/4Iss/N9APYowKpVsi3MhsvR3Q4dgsnH0L7+MsE6
Vprw0WBmAn9gzII1zxPyooh8BlrZ+4+NpHooMo4e3Z9TXblgZUwxxvcVawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjbuGXKrhNvVBi9X/9vf4wt2im3MB8GA1UdIwQY
MBaAFM0D0T3SbwBEooP8ahHnVqKitWkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jZmQ0MWUtMzk4ZC00ZjFiLTk5OTUt
MWEzZmY1MzJiYzIwLzEvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jZmQ0MWUtMzk4ZC00ZjFiLTk5OTUtMWEzZmY1MzJiYzIw
LzEvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0eezkpNv
4ZB73Hr8KNVSk/VGqvV1UdDGppsH6M156HcWXTxBICVphuIdjcSWAU/ccdcZ9qRP
Yp7ua8VD9DAlNNZrBjVnEfFa6hY0XfM1uDY74pSAihfYKd/GUFhx2WDgPmMcxUB5
FCq1TyZZv/10HLWCN1/GLHuaZG1WwmbiweTmMZI0TYJDmuMlVo5Oq3m7NomvRjyb
WEbEqpskCVe673JVn7ABSiBgYOx+jZHr8w/yQkk18gPXpbME3CY7CpfwZ2YHz2U6
ngKY6Q1KP2OH6Tq6ASKmCPM/QeoU9fxYff43QsIYh2Ifi3yhsSZBjrFb3AxuALIr
5WmXynx/68EfGQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:29:25 2026 by rpki-client