Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: EiIFVw4FRJEamqrorBiRTF5DoTKF7SSdvQ6145A29mk=
Subject key identifier: 85:39:3F:71:BE:C9:02:68:58:D3:71:59:5C:0A:82:DC:79:2D:99:30
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 01A1DD271C9A2D06E4E80EA4BF7B8645DB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 1502
Signing time: Sun 15 Nov 2026 03:01:30 +0000
Manifest this update: Sun 15 Nov 2026 03:01:30 +0000
Manifest next update: Mon 16 Nov 2026 03:01:30 +0000
Files and hashes: 1: 3XuA-YVzPEgJjeMJ8s1Vm2HEV7M.roa (hash: L2BlNBBMkivGXWvUezO7Aw0uWHpwLq/KSkHq0trlQZE=)
2: 9_TVXot_dyIkEe9KiLsuyW2oktk.roa (hash: AY0ZbEX8AuKpfJf3mMe1LHPcHhetoh8C291fNwOvGkw=)
3: Cn96GIs9Itz9jMYQMAvNCRxJbnI.roa (hash: dhrJL8kAA83gsjwria3zjGukfC7phsHuYB9kmXJVNb4=)
4: M2b0AyIxBEZE26l78yx_U6jH-HM.roa (hash: qI3z2lgsBJDNei5CDronPrCJiOhj9yjVA1Waw1BZhZw=)
5: l42LyB_1C2P-LllZFiZxTraA8VY.roa (hash: DBvrQLij/XijOP3rNHrPmHSYFZ7FdPcqe5/jQy1zmiA=)
6: l9YATmb7OlSNk8-X-Gw47s_i3j8.roa (hash: tjgPLQtmZhv+xT2ZVPBDEllJQosoi/bzaWAa0mefrzk=)
7: s13GH00hV2jIxjzw03ezHAtEnrE.roa (hash: wwzOhbN/GMGtfE1ca6NvpkVgz3P26P0FotyIBvRPTpA=)
8: uoFotumudq3NjyT7As7Fryz5Yd8.roa (hash: mw63hA5ar4VzWJCYRYvKfOXr/a6G9aeBNTbiDc+XBsY=)
9: zVdth24X5nqjsfHBDas52yk14is.crl (hash: 92dI/gcJVrOH+/nFRZJxyIHHWT02eig58h2B0XuB3AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:1c:9a:2d:06:e4:e8:0e:a4:bf:7b:86:45:db:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Nov 15 03:01:30 2026 GMT
Not After : Nov 16 03:01:30 2026 GMT
Subject: CN=85393f71bec9026858d371595c0a82dc792d9930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6f:f4:36:01:8b:55:a4:3a:f3:da:e3:b1:9f:
ae:5b:06:0c:b4:f4:96:a2:a3:3e:88:23:f3:66:b5:
e1:b8:c8:fd:c5:71:62:64:6a:f5:dd:b7:fa:0e:44:
9c:9b:0a:8c:b1:f3:a9:8b:15:41:5b:d1:16:bc:92:
ee:80:d2:70:71:ec:bd:a2:ff:4a:ff:c5:e9:7a:61:
d8:94:b4:b1:de:ca:80:62:83:40:85:e0:b9:96:ff:
a9:7d:6a:b0:8d:82:5a:d0:83:f8:b7:3e:9f:18:f5:
40:9e:b9:d0:3c:3b:94:9a:da:eb:e8:f6:8f:4b:39:
9d:80:61:81:d4:8c:cb:9a:c0:e0:b1:10:f4:09:df:
c9:e6:50:5a:87:de:6a:ff:fb:87:52:08:39:ba:09:
27:51:91:35:5d:f3:09:24:e2:e7:c0:a2:c5:39:cd:
1e:aa:84:21:23:fd:39:8e:e9:0a:13:60:8d:36:c9:
52:4f:cb:d0:2a:f9:88:fe:c6:dc:19:79:3f:d1:ed:
e0:7a:53:be:45:33:82:7e:d8:1b:9c:79:21:ea:dd:
bd:2a:50:cf:4a:fa:ae:99:9a:a6:06:cc:5a:80:d2:
83:17:1d:df:5d:eb:da:9e:e7:bd:18:fc:aa:e4:1e:
9b:48:3b:88:77:b5:c6:c7:45:93:27:08:e8:9e:05:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:39:3F:71:BE:C9:02:68:58:D3:71:59:5C:0A:82:DC:79:2D:99:30
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6c:c5:da:f4:f5:b1:ff:27:c8:62:72:41:8f:96:ec:fa:8f:
13:e6:b3:ed:61:72:fa:a9:fc:80:ed:d2:16:3c:bc:f7:b7:76:
ef:9c:62:54:7f:1d:f8:56:d7:97:4f:30:00:34:a3:26:95:a5:
d1:d5:d0:cd:0a:e6:1d:71:ce:08:c8:e4:6e:10:79:be:c7:40:
17:cf:0c:5d:92:48:cb:a0:e1:8f:79:d6:6c:8d:58:84:09:e6:
eb:50:87:fd:11:81:7c:55:ce:08:a9:33:3d:53:02:0e:23:a2:
f4:68:ae:ee:56:fd:93:cf:8e:1a:0b:44:65:21:bb:ae:b6:c1:
d4:91:a2:fe:b4:76:4c:ce:e9:8f:64:be:95:4f:3a:65:cf:2b:
ad:4c:c0:76:65:17:88:3c:95:8b:fa:af:ee:13:51:af:17:3d:
38:cd:d3:65:82:96:09:dd:2f:9b:81:15:a0:bc:60:06:98:48:
bf:ea:11:5f:98:09:2f:15:87:52:2b:46:4d:7d:1e:cf:ab:e4:
98:8b:58:b6:0c:e7:7b:9b:15:39:25:fd:3c:fe:a1:be:4f:b4:
fd:04:df:fb:a0:f4:ef:90:87:37:84:c3:09:75:46:f1:6b:c9:
12:a1:ea:0e:ad:45:15:17:01:e9:78:fa:77:22:85:d7:b9:39:
22:0b:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:08:32 2026 by rpki-client