Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier: THEuybvNsiXg04bvirQag1WoMvZ8vkZxWvO13I8gat8=
Subject key identifier: 3F:EB:59:36:22:0E:51:A7:A3:76:BA:CC:6A:28:B8:0B:6D:84:68:B9
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 01A1DCF07E3F6AD235B50EA5326240E9C1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number: 17F9
Signing time: Sun 15 Nov 2026 02:01:50 +0000
Manifest this update: Sun 15 Nov 2026 02:01:50 +0000
Manifest next update: Mon 16 Nov 2026 02:01:50 +0000
Files and hashes: 1: beStaP3U9BouVtR6HKL7Bht809g.roa (hash: 9C0Yz+gtWBKD86eXJ/yNK0jQEWAJqpkTW4DLxbpVN08=)
2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: 4HA7+/80vHGeSxyiSIF9Mw6RL9DB1vtrS4P+jZ7cv1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:7e:3f:6a:d2:35:b5:0e:a5:32:62:40:e9:c1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Nov 15 02:01:50 2026 GMT
Not After : Nov 16 02:01:50 2026 GMT
Subject: CN=3feb5936220e51a7a376bacc6a28b80b6d8468b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:74:fe:87:63:f2:2f:f3:f0:e1:9f:2c:a7:
92:a5:b7:42:16:e3:05:bf:4d:dd:e6:43:4c:c6:ff:
e9:f0:f6:bd:45:cd:b4:c6:4f:1c:35:a1:d6:bb:1a:
78:29:ef:d4:ab:79:b1:a9:56:51:bc:87:e7:5c:91:
ed:03:fe:43:1c:8a:90:11:bd:22:61:f3:a4:b0:cd:
e5:27:34:c4:52:9a:9a:44:8e:81:aa:a9:b4:13:bf:
32:cd:12:bb:78:7c:80:57:76:7c:4d:70:5e:51:d5:
46:cc:0f:10:61:90:3f:82:a7:76:69:13:5e:f2:e8:
24:9f:42:e2:cf:14:8e:a1:6b:18:0a:08:8f:de:a4:
0c:a6:37:61:ac:32:04:26:39:bf:1f:fb:63:95:3b:
11:07:95:2a:ba:dd:7d:56:80:67:80:9c:3a:b2:a7:
b0:19:0e:4b:c7:32:bf:08:7b:41:df:a6:02:33:58:
e4:94:a1:ff:45:b7:72:1a:f7:8a:45:54:e0:53:59:
1b:10:16:70:ab:9c:5e:65:f3:3d:50:6b:d8:a9:9b:
9c:5c:ac:6f:da:db:e0:08:04:07:28:0c:45:c1:93:
08:14:53:3e:b5:44:bd:46:53:f6:e0:e9:9a:b0:d7:
68:83:35:44:96:86:aa:c5:ab:b6:5b:d7:86:47:a8:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EB:59:36:22:0E:51:A7:A3:76:BA:CC:6A:28:B8:0B:6D:84:68:B9
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:70:a9:3e:11:4c:66:79:0c:28:45:0b:29:32:6c:d2:d2:9d:
de:2d:bd:a3:27:d8:09:a1:c8:f8:ce:1e:d5:c7:35:0b:a6:74:
75:3a:f4:bf:23:14:97:2a:89:5a:41:a3:7a:71:2d:42:99:ca:
38:9e:8e:43:7f:31:57:16:32:27:5b:cb:55:c3:ff:52:af:25:
bd:e0:ae:4f:20:b1:ea:45:a5:a0:cd:ed:8d:ce:d6:23:c4:d9:
1c:e8:41:a2:0c:16:ed:93:8b:28:5c:61:01:a8:28:6a:7c:73:
fd:9b:b8:e9:54:14:eb:77:8a:bb:be:f8:c7:31:3c:be:35:78:
f6:c3:d7:f6:f7:bd:83:c9:6d:c3:6d:51:f3:df:29:6b:b6:e6:
9a:e3:4f:bf:b4:24:0f:dd:7d:17:32:1e:41:67:cd:ea:22:b1:
14:21:61:32:d6:3f:d2:a5:13:ec:17:af:b9:4b:8f:71:9d:bd:
e2:ae:02:08:2c:70:b4:f5:3a:5b:35:12:42:ac:82:b1:10:eb:
99:fc:ef:13:af:63:99:36:45:21:0a:96:e1:63:30:08:0f:2c:
49:57:dc:9d:d0:ba:5c:d4:da:02:99:ae:55:03:a1:3c:f7:f5:
41:70:ea:02:19:28:fc:1a:4f:e0:4d:52:42:0b:22:5d:0a:23:
78:32:b1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:35:31 2026 by rpki-client