Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: YwYkONMPUmQFJ9LbS9Cz1xc4eoRQfzHuBQtFn6uOweA=
Subject key identifier: 2A:2B:33:38:56:0B:DB:4C:A2:20:DB:F1:FC:E4:9F:F8:EB:72:05:7E
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 01A0FFB543FE022EB0504036045D8A277D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 03:01:04 +0000
Manifest this update: Sat 03 Oct 2026 03:01:04 +0000
Manifest next update: Sun 04 Oct 2026 03:01:04 +0000
Files and hashes: 1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: JjRTAOZcRddee4c5rcbmey4XH6c9sfKW5x2zB0xTjE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:b5:43:fe:02:2e:b0:50:40:36:04:5d:8a:27:7d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Oct 3 03:01:04 2026 GMT
Not After : Oct 4 03:01:04 2026 GMT
Subject: CN=2a2b3338560bdb4ca220dbf1fce49ff8eb72057e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:d2:84:cc:c1:f9:57:9f:69:84:37:91:dd:
6c:7b:a4:89:2c:46:b6:81:60:ac:4c:a1:a5:25:e5:
0a:1c:71:f1:97:e8:1d:d4:ca:a5:7b:a0:a9:aa:dc:
06:6b:6d:99:e5:56:be:6a:26:98:8c:5a:a9:cb:2a:
3c:a4:4d:1b:6c:75:d3:ea:1a:74:1d:3a:8e:85:64:
c5:b8:7d:b8:62:3f:dd:4c:5e:55:f4:eb:e7:33:d2:
c1:2a:ae:fe:9e:94:df:ee:b4:04:a9:da:9a:23:ea:
8e:7f:77:3f:79:8d:7b:eb:4b:fd:c9:54:ef:1c:f9:
62:e3:cd:26:16:0b:a6:2b:8f:b2:f6:24:fd:92:77:
83:86:bd:eb:c7:fb:85:a5:b8:e6:69:a9:18:18:a1:
40:e9:bd:93:db:53:ed:c7:cb:e5:ac:ba:a4:b0:fb:
87:be:38:db:4f:56:a5:c6:1f:bc:45:fc:3d:ed:a8:
7a:24:b1:dd:b2:1d:28:de:71:d8:e7:99:20:bc:c0:
47:17:e2:0b:31:bc:c9:cd:14:c9:c9:66:ed:06:8c:
14:51:12:7f:9f:f1:3c:e6:24:a5:a6:f7:93:41:c5:
b1:ee:c6:93:4b:99:53:5f:53:89:cc:d6:0e:6c:8c:
45:ef:e4:5c:3a:e7:7d:12:06:9e:bc:95:ee:6a:6b:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2B:33:38:56:0B:DB:4C:A2:20:DB:F1:FC:E4:9F:F8:EB:72:05:7E
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:86:4f:17:1b:aa:70:78:d2:99:86:31:d9:65:2b:90:38:53:
a9:bd:4d:89:11:10:ce:ab:c7:ac:b7:1d:10:f4:50:7c:dd:8f:
7b:f0:3a:6d:9e:44:da:de:45:9c:a6:2b:50:cb:83:be:74:68:
88:25:13:e3:13:26:91:68:d1:c9:df:94:dc:3f:5e:14:34:26:
53:3c:94:4b:de:a5:c7:cd:98:95:6d:fa:0f:84:82:5f:62:d3:
e1:d6:15:97:a0:21:ed:ff:01:7f:17:af:f6:0d:b2:dd:e7:95:
5e:27:4f:71:79:26:45:49:33:8a:90:3d:f9:e6:3a:5f:b0:6b:
7f:cf:ce:5e:88:65:cb:49:44:eb:e7:91:37:ad:e1:53:af:a3:
0d:23:be:f8:f4:ef:16:c8:19:87:e8:7e:e6:e0:b3:6f:a2:31:
34:db:83:d1:e2:3e:e9:fb:3c:4c:cd:70:ea:cb:d1:26:62:cd:
14:58:d8:68:48:e3:c9:6a:81:c0:e0:50:55:f4:88:12:c8:b6:
48:43:c7:23:17:4c:84:1d:9f:5c:fe:82:ed:39:79:c8:c9:70:
f3:3b:8c:5f:21:69:ae:fc:53:fc:ab:a8:74:da:dc:e9:32:a0:
1c:3a:30:ad:89:b1:38:5c:92:bb:f5:3a:6b:7c:0a:78:af:64:
93:f9:bc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:14:59 2026 by rpki-client