Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File: _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier: F5MDlKeTE6GClf4IHejO+Iua63neKhwWkf7V1uXVr98=
Subject key identifier: CE:18:15:63:1C:C2:69:BE:8E:59:23:08:E8:D9:D1:AA:72:83:F8:D1
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 01A1DBDCFC06439469A299343203F44E35B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number: 08F1
Signing time: Sat 14 Nov 2026 21:00:55 +0000
Manifest this update: Sat 14 Nov 2026 21:00:55 +0000
Manifest next update: Sun 15 Nov 2026 21:00:55 +0000
Files and hashes: 1: 1BBaPp941n7lRekLls2gkEPkxSw.roa (hash: Mey4F7CLklthEIV3FcO4A8tKfmRaDpoJ7U+sPCU8Dmg=)
2: KMzQyZn0sL4K5ZP9K9I0Og-xt_U.roa (hash: Gf/LGVEeT1adLQAQqGIqK3h3EJC7/QXPQ3sFnCSBko8=)
3: O-iagWg9GVze1N-qb1ZeT9IJcTk.roa (hash: 2tIqkqB1u0MXJ3GlgzzbL3tL3nxAAGsb6mDhKKaUmLU=)
4: RHPDs6sUuiLT-opMfIoVNA3PEBU.roa (hash: r6LvBHgYmuPZ9hX2eAYd0nzis+vBTF0gYS9uk7yNew0=)
5: VhOF_-ZwH-Ij9c572yDNjux4fzw.roa (hash: Nhl3pkPtydmkOvzTuIKFasUFKkUenmuHlPilrVP3JII=)
6: Y9ihmV93zK8JMhpBWC6s3FEAd_s.roa (hash: Qc0l0Xa+qhsOrfZPm67YxB9qiP7Vo3I0Yg8mibRMIZk=)
7: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: I6wqFIlLpt6+w5Y8JZxp1EOINU9e9z+G/EJqnY7C93w=)
8: a9tH5TPsdMc7VNawu4-mRWegXQE.roa (hash: ruRkSgxmBG3LgJIf/H+dDcjTlDpmTjUbwHqWldUcrQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dc:fc:06:43:94:69:a2:99:34:32:03:f4:4e:35:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Nov 14 21:00:55 2026 GMT
Not After : Nov 15 21:00:55 2026 GMT
Subject: CN=ce1815631cc269be8e592308e8d9d1aa7283f8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:03:16:1f:48:82:7b:5f:ca:fe:5e:06:5e:bd:
a3:b1:c1:86:9b:e2:6a:a4:6d:d9:a0:ff:7d:07:c2:
e6:d8:02:39:65:ac:12:cc:ba:e9:66:03:38:2f:b3:
b0:2c:67:b7:6c:97:87:a1:f6:e8:23:65:5a:b8:04:
7c:24:20:4c:fb:4f:68:8f:7c:73:9f:01:88:fe:bf:
7b:33:39:84:49:74:39:64:bd:c3:55:8a:64:8b:7d:
c4:00:f4:d6:02:fc:23:29:d5:93:b9:32:af:1f:57:
9f:37:5b:5a:54:f9:1e:4d:50:c3:fe:f4:d0:88:a2:
7f:c8:a1:fa:54:b2:c9:5b:1c:5b:90:d4:2d:8a:82:
9a:dd:a9:e8:04:96:fd:c5:fa:0e:8e:5f:8f:ba:6c:
ea:6a:6d:13:4d:00:54:6e:61:1a:66:45:63:6c:96:
fa:6d:44:51:12:e8:19:7a:13:8a:f3:5d:df:c0:06:
f6:b1:4f:b0:43:66:54:ba:73:cf:6d:46:f8:b3:cd:
bb:48:70:e1:be:e9:36:89:6e:58:07:2f:21:0f:ab:
5f:ea:1e:cc:42:12:06:c1:6f:4c:57:ea:80:4e:8a:
67:73:f7:a4:8f:97:03:c0:7b:73:4b:5a:7a:f1:25:
5d:4e:a0:d1:5b:ea:5e:09:c1:05:7c:8f:bf:fd:61:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:18:15:63:1C:C2:69:BE:8E:59:23:08:E8:D9:D1:AA:72:83:F8:D1
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fc:1a:61:e6:7d:f2:94:1f:06:3e:0e:31:0f:3d:7e:ee:ce:
4f:bc:d5:dd:94:73:19:81:7a:29:87:72:70:4b:dd:41:25:5d:
a8:ce:25:b7:69:6f:eb:33:c0:dc:a4:e2:6d:9f:fc:5b:13:fc:
65:9b:ba:0a:99:19:d4:7b:b6:89:d1:ab:ec:f3:95:c2:d7:ba:
9c:a7:bd:5c:e2:99:fb:d8:3d:14:d0:3f:8d:05:ea:20:b0:ef:
09:54:56:dd:aa:6d:19:af:c7:9e:f4:c6:01:80:de:64:c6:20:
1b:09:e0:75:51:c4:5e:01:8a:14:88:26:6c:2f:32:4e:e6:92:
5d:5d:cb:f3:ec:41:f9:86:13:cf:e0:4b:42:20:d2:6d:7b:c1:
69:95:bc:fe:fe:83:62:bb:6d:4b:2b:68:d3:3e:fb:95:11:ff:
e2:96:35:83:24:87:2e:f1:8c:4d:29:14:7f:85:45:7a:f4:54:
5e:f1:d1:af:73:01:32:61:93:03:89:52:0e:dc:37:ba:f6:bc:
d9:fe:4e:c8:b2:ea:df:ce:12:bd:af:13:c2:9f:fe:1b:ab:45:
25:bf:07:2f:d5:cc:e3:bf:b9:b5:ac:cc:e2:58:15:02:9f:28:
40:be:95:70:21:62:09:03:81:3b:7b:de:99:99:5b:06:74:1e:
d9:b6:6c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:55:20 2026 by rpki-client