Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: FYVYStmm0/DQu5oxjrXlcmCiRar1Om3VMGPL0Hq/Lf4=
Subject key identifier: D1:FA:0C:2D:12:55:47:49:9B:49:EE:1C:12:77:BE:12:04:46:0E:0B
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 01A12C1FED4949119AAF71D3B155FAA33A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 0A7E
Signing time: Sun 11 Oct 2026 18:00:52 +0000
Manifest this update: Sun 11 Oct 2026 18:00:52 +0000
Manifest next update: Mon 12 Oct 2026 18:00:52 +0000
Files and hashes: 1: WPsZu0t0gwCtDu9DluM2JpNAigM.roa (hash: 1nZv6ryPRTSI42lJffh2EsY2m6JCVkOOWCXauYoQ2vk=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: 0tKcEwnpkORdyzKF2Jf0ZZrYMapNofjdnD7EKhZKjmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:1f:ed:49:49:11:9a:af:71:d3:b1:55:fa:a3:3a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Oct 11 18:00:52 2026 GMT
Not After : Oct 12 18:00:52 2026 GMT
Subject: CN=d1fa0c2d125547499b49ee1c1277be1204460e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:57:4c:b7:09:69:6a:32:87:a7:7c:79:f3:
26:be:26:e9:15:04:09:1d:df:cc:97:39:df:95:75:
d9:f5:1f:18:59:22:c4:c9:67:fe:2d:84:f9:b3:df:
de:46:a9:1b:df:fe:61:05:2d:3f:dc:4c:b5:1e:0c:
fa:7a:72:e7:5d:35:b3:8f:de:7c:a1:9a:9f:e9:81:
d0:7d:9e:9a:d1:a8:65:50:ee:5e:e5:fa:11:9e:a8:
e9:e6:a6:1b:0c:eb:df:76:7a:22:6d:03:66:d9:38:
1b:fc:21:96:b3:ec:44:40:9b:22:dd:8d:fa:f0:4a:
4b:ee:79:2f:39:53:a1:c5:73:66:ac:4c:a3:d0:33:
d1:0e:2e:ae:33:23:4e:f1:63:b4:07:bc:3d:e7:6a:
6d:fb:32:e9:f6:f6:b1:03:6d:da:3a:12:0e:4d:7c:
ee:04:f7:ae:30:33:27:f3:4c:2c:97:df:52:a8:9a:
92:e0:86:3b:99:6f:f2:3a:55:f2:6f:75:91:1d:d4:
2d:2c:da:6e:e1:06:e6:8d:aa:3d:c7:d3:e0:ed:1c:
d4:ec:ce:0a:8d:ba:a9:02:4b:91:ad:bf:e9:ec:a7:
7a:f9:26:e2:4a:c4:98:74:45:83:81:38:a4:62:3d:
93:5b:95:d1:64:51:46:2c:83:1c:f7:7e:e7:cf:4a:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FA:0C:2D:12:55:47:49:9B:49:EE:1C:12:77:BE:12:04:46:0E:0B
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:dc:72:02:79:35:bf:82:bb:25:37:72:8c:e3:92:c1:e7:b2:
18:19:99:cc:09:b6:0b:6a:ab:43:02:62:8c:3d:9a:a4:89:4c:
a2:6f:f7:19:b4:c5:db:e0:e9:9e:d0:fb:0e:09:be:e1:ed:8b:
d7:e3:ea:eb:d4:d3:20:2a:91:fe:ed:20:7d:bc:9a:ed:72:c9:
d9:2a:73:d0:ab:1b:67:8a:c1:5b:ab:fd:ae:19:69:64:cc:25:
f2:dd:fc:85:d5:de:93:21:12:27:7d:0b:71:d1:d4:8d:67:c4:
4c:e1:c0:f6:b4:89:ce:25:cd:68:05:48:a3:e5:c8:b8:e8:6d:
2a:3c:6e:c7:b3:d9:64:fd:26:cb:3c:bb:85:d2:e2:b1:f5:88:
30:fb:13:19:c8:14:58:6e:ac:1a:11:7f:8f:62:04:0f:04:3b:
01:3a:09:55:e2:07:9a:73:10:16:dc:3b:d3:30:4c:1a:f1:ca:
6d:2d:36:b6:cf:a2:b1:e2:c2:24:bc:10:c7:08:4c:24:ca:36:
ba:2a:20:c0:51:88:ae:80:ff:4c:44:66:cf:7b:59:2a:d6:ef:
a6:75:ae:d9:f9:3e:56:c2:fe:61:9f:3b:05:af:ef:18:3e:af:
3a:bc:b9:fa:b5:7f:29:31:f0:b6:c7:27:46:24:23:d9:3a:85:
d4:6e:67:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:38:10 2026 by rpki-client