Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File: zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier: 7fKcBTuo8oYaWwwhu+vfyFGz2rbpLWutkd8ldyCdMbk=
Subject key identifier: F3:08:77:BB:90:F2:8A:A3:77:C8:49:B5:E4:EA:24:A4:7C:BC:C0:B0
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial: 01A1DD5DA321DFCD7696C2D7470C2C87DC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 04:01:03 +0000
Manifest this update: Sun 15 Nov 2026 04:01:03 +0000
Manifest next update: Mon 16 Nov 2026 04:01:03 +0000
Files and hashes: 1: CXkKc_BGGlQDVJndPZpJEIKApLM.roa (hash: lB6WL5NHR05zZ3JJcK7U/WiKpx7SIVQpEQDB/XRsPv0=)
2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: XtcIK83kPYCpxdHXBzRai5rUDeia8Sn3GXim/+zM6FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:a3:21:df:cd:76:96:c2:d7:47:0c:2c:87:dc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Validity
Not Before: Nov 15 04:01:03 2026 GMT
Not After : Nov 16 04:01:03 2026 GMT
Subject: CN=f30877bb90f28aa377c849b5e4ea24a47cbcc0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:31:4f:7c:1b:d5:75:ea:76:8f:e1:17:3e:
30:73:4b:85:79:99:03:87:af:84:99:48:c5:32:b1:
36:40:70:f5:76:eb:cc:50:9c:26:b5:f3:05:8a:f7:
58:d2:78:31:55:7b:ec:13:17:4f:84:9d:fc:4a:2f:
63:57:fd:ef:d7:ed:ba:b3:29:2b:b7:4f:2b:7f:90:
5b:a3:72:76:80:76:35:c7:62:00:8b:9c:03:41:dc:
5e:f0:6e:bc:a2:47:ff:c5:be:4a:8a:e5:6d:0f:1c:
13:6c:98:82:36:00:d2:82:c5:4d:94:e9:b3:94:f7:
00:69:33:f0:af:60:d2:d6:19:cc:6a:10:48:ba:35:
b7:cd:10:be:0b:82:94:e0:79:ea:62:56:97:9e:4b:
cc:2f:4e:15:62:4c:3b:a9:8c:5d:9e:c4:e8:89:17:
3d:1b:5d:cd:eb:96:58:38:73:74:b5:07:4a:8a:9a:
bc:6c:88:c3:58:0d:0c:7b:89:8c:e9:7d:99:20:c7:
ec:4c:a0:5d:13:d1:48:f5:64:d6:24:51:2b:f9:1c:
c1:f5:13:0c:a4:78:5f:c7:12:97:a6:f9:fe:ea:b7:
8a:e6:30:d8:e3:ad:62:89:78:7b:f4:d5:d3:ed:16:
7c:10:da:35:a8:18:33:ab:ba:5f:36:44:35:33:7f:
41:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:08:77:BB:90:F2:8A:A3:77:C8:49:B5:E4:EA:24:A4:7C:BC:C0:B0
X509v3 Authority Key Identifier:
keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0e:33:b6:e8:ac:08:68:e2:82:ef:d7:dc:d8:2f:fd:ce:87:
6c:ff:2a:1f:3d:a7:0b:8b:d6:91:cb:38:f5:c8:7a:a3:e4:78:
90:91:47:67:b7:57:24:71:c3:25:fe:69:bd:e8:c3:f7:a3:55:
36:e9:9f:8c:dd:6d:ee:8c:4a:ba:01:29:9c:13:49:8a:0f:41:
4e:98:4c:9f:6a:b2:0f:a5:70:a9:cc:7b:05:0b:6e:a4:bd:7e:
21:8a:f3:32:42:10:e2:f6:4f:3a:98:bf:8e:f2:b4:de:36:b9:
7b:af:84:7e:d7:e9:95:9d:e8:0d:4d:55:c8:aa:16:5c:6f:b0:
64:29:8b:16:93:4f:7a:6d:45:2e:d3:ae:44:02:af:bf:ea:7e:
35:c0:fb:9a:21:71:e7:79:bc:37:58:18:40:4a:6a:0b:7e:f7:
9e:a7:5f:82:e0:8d:14:54:2d:ac:0b:14:5f:8a:b7:aa:22:1c:
35:0c:7f:34:9f:b6:d1:71:91:fc:23:a4:3e:e8:9a:ba:68:da:
03:08:53:bc:0b:39:d7:77:3d:91:91:34:74:88:c3:52:bb:01:
9e:ee:9b:02:c2:16:ad:bc:6c:2a:6a:85:88:cc:fd:78:37:94:
58:7c:e5:42:3f:5a:fd:4e:cb:fb:0a:f7:0a:ec:1b:b2:82:5e:
ce:4d:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:26:22 2026 by rpki-client