Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: jfo49g3SP5wPUnriHmUxIkbEbF6VHULMTVXLykyqqRY=
Subject key identifier: 29:39:27:98:D6:20:1D:E1:A1:6C:6D:01:47:F9:BD:9F:C4:BF:50:F1
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 01A1DD5D9520C7EF70426E2ADE950276852F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1B06
Signing time: Sun 15 Nov 2026 04:01:00 +0000
Manifest this update: Sun 15 Nov 2026 04:01:00 +0000
Manifest next update: Mon 16 Nov 2026 04:01:00 +0000
Files and hashes: 1: kLUG7I7zaleUboTqrqB19XXsTkQ.roa (hash: cKKeB+BIlOYQDOr355c8ocGK4xiw2EqpjCd7kzeueqs=)
2: ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa (hash: gVb5IHgLpvS8ffqO/hNhQNz/nK0f5pvRNLYLZEY7RQs=)
3: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: wVZ7/TC3edqpxszq7iUFYNPe3CXqKzAqI2aQZkNzOZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:95:20:c7:ef:70:42:6e:2a:de:95:02:76:85:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Nov 15 04:01:00 2026 GMT
Not After : Nov 16 04:01:00 2026 GMT
Subject: CN=29392798d6201de1a16c6d0147f9bd9fc4bf50f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:9c:f6:af:c1:f3:a8:30:d8:ad:c3:de:dd:
67:03:ad:a8:d0:8d:ac:b9:97:00:45:29:83:9e:d5:
10:12:af:2d:bb:a8:38:eb:11:25:97:ca:a0:a5:75:
8c:eb:c0:d7:4d:77:2a:7c:42:2f:2b:af:e7:5e:54:
07:ae:b7:75:84:d2:8a:7c:f2:61:78:43:7b:13:cc:
49:1e:59:06:d1:e3:a4:2d:ab:4e:3a:0e:6b:18:e1:
9f:a7:82:3b:44:74:8f:25:bc:0e:87:f4:02:02:7a:
db:46:41:15:95:22:58:6c:83:82:7a:3d:fd:54:35:
11:5b:82:97:87:41:90:11:23:4f:57:04:58:ab:53:
ff:d1:8a:c9:b6:6b:83:f0:42:15:ab:c4:e5:16:0c:
b5:6f:ce:04:05:41:6e:39:1e:7e:4d:53:2b:d0:fa:
c4:40:5b:4b:ca:06:18:01:9f:a2:38:85:45:7d:10:
2a:db:f0:d4:1d:23:68:fc:57:74:73:55:f1:8b:ec:
eb:0a:12:d0:02:7d:74:8b:ae:8d:93:17:a1:55:c2:
db:4a:a0:7f:c5:39:7f:f0:06:0f:66:0e:d4:b4:e6:
2b:02:b8:d9:f1:db:28:74:bf:3b:62:52:85:44:76:
ac:42:3d:c4:6b:b0:42:e2:31:15:c2:44:6c:b3:89:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:39:27:98:D6:20:1D:E1:A1:6C:6D:01:47:F9:BD:9F:C4:BF:50:F1
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:73:66:83:0f:df:18:aa:70:7f:65:bb:c6:1b:f0:98:5e:a0:
8d:60:3d:c2:25:5a:ee:f0:9e:e5:ba:4a:65:42:de:b6:71:bd:
aa:b7:a6:19:7c:c7:a1:7b:3d:d8:67:58:1f:5f:77:df:b9:65:
05:2e:73:2e:55:f3:1f:50:c4:ef:b0:a9:bc:cf:f4:b0:fc:d6:
12:1a:80:4a:c2:00:d6:9b:13:dd:6d:b1:8b:65:ec:ef:1a:03:
da:86:71:55:b4:dc:2c:5a:5f:dc:f7:90:db:38:83:3f:01:85:
e6:7c:18:13:dd:05:97:c6:24:92:94:13:e8:ec:81:55:0c:91:
45:12:f0:01:66:15:cb:95:3e:40:20:35:74:78:68:f0:84:1f:
d7:70:17:d7:e9:9a:c8:55:ec:9a:4d:47:df:f3:b1:47:87:6b:
45:ca:2c:8c:86:60:46:6f:dd:35:b0:c4:2b:33:78:4d:46:38:
b7:92:96:62:8a:d2:d8:61:b5:c1:a3:dd:c1:93:87:9a:5d:fc:
20:4c:0c:90:bf:11:83:35:e6:c9:21:19:41:c7:10:59:4e:6e:
c7:07:a6:1a:51:b9:ef:bd:1b:82:cb:a7:5c:c6:eb:4e:0f:f6:
45:b3:e4:11:73:4d:2f:02:66:aa:85:91:e7:43:b1:d7:77:d1:
24:42:b0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:10:27 2026 by rpki-client