Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: 2gINBfCIJgka5kXVYmytrgV3x2mubtNv/fOQ6rb3pfU=
Subject key identifier: 2C:6A:FB:80:DF:AF:93:82:62:08:A2:FA:0B:35:EA:47:EE:4F:D3:6A
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 01A12CC5639BA1A018DE1B192EF58817EEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 1A2E
Signing time: Sun 11 Oct 2026 21:01:35 +0000
Manifest this update: Sun 11 Oct 2026 21:01:35 +0000
Manifest next update: Mon 12 Oct 2026 21:01:35 +0000
Files and hashes: 1: dZjxO1t1y7iTrJ-KRqPRE_p1jMA.roa (hash: B1GSi5keg2Ocppx2D4kG/XL7mz409lb5KLKl79R0HCE=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: RhFwhlTiQHBdsaBW2UZnrxLITC9fj26rtwi3iBS7EFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c5:63:9b:a1:a0:18:de:1b:19:2e:f5:88:17:ee:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Oct 11 21:01:35 2026 GMT
Not After : Oct 12 21:01:35 2026 GMT
Subject: CN=2c6afb80dfaf93826208a2fa0b35ea47ee4fd36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:58:e3:b5:e0:8d:86:61:f8:5f:c7:ee:3b:
85:dc:ae:64:94:a8:3b:7d:7a:de:11:9c:ae:51:db:
fe:a7:eb:cf:6a:96:7a:39:64:cb:f3:88:bb:a5:4a:
eb:10:8e:f7:2d:8e:8d:c6:e3:23:64:5d:aa:2d:14:
30:0d:40:6e:25:35:f6:f9:55:6c:10:9a:18:fb:53:
13:55:a8:a1:05:6a:af:07:48:2d:d2:fc:05:4e:87:
d5:01:dd:d4:2f:f7:b9:38:7c:38:9a:4f:76:2f:c3:
e6:52:63:bf:87:79:ff:ca:cb:fd:dc:59:95:88:a5:
62:8a:37:92:ea:01:be:86:58:84:f8:63:f1:16:c2:
e4:05:1a:fa:ae:2b:7e:58:69:28:33:e9:75:3a:6f:
44:15:2f:45:8f:f5:dc:31:55:bf:84:62:cb:1a:67:
c3:e3:cb:04:12:a6:c3:af:5e:d3:de:4d:58:08:57:
27:ab:e3:b2:9f:0d:68:5c:54:8e:9a:95:03:30:ef:
9f:9d:32:48:bd:51:b1:17:e4:43:ce:df:86:44:13:
3e:db:76:2c:a7:69:9c:e1:04:4f:43:a4:65:6e:a2:
dc:b3:3c:af:25:41:52:3f:71:61:2e:3e:f3:eb:fc:
23:d2:92:b8:df:7f:d7:31:6d:30:2f:90:4e:5d:1b:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6A:FB:80:DF:AF:93:82:62:08:A2:FA:0B:35:EA:47:EE:4F:D3:6A
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:82:6f:19:7b:72:e6:bd:b3:e8:0c:de:bb:60:d9:ef:fe:04:
38:52:a1:1a:a1:de:bb:e1:1c:e3:44:63:ce:de:42:65:14:95:
3c:58:ee:3a:d4:fe:c8:a4:a6:cf:71:08:ce:e1:74:3d:c2:50:
9d:5a:01:d8:c3:63:3b:d7:f0:86:ac:0f:37:8f:a5:44:cf:e8:
7f:7c:b4:03:4d:51:cc:6c:c0:e3:2f:21:d0:59:79:17:12:90:
ab:51:6a:26:1e:7e:a2:5d:e0:0b:ef:69:64:e4:ae:ff:00:2c:
d2:e4:c7:a3:4d:87:2d:1c:da:01:34:56:07:8c:b5:09:b8:8d:
99:f3:70:47:bb:76:b5:ef:69:a8:33:71:5a:e2:7d:97:64:fe:
ec:b7:b2:b9:ed:42:d8:20:95:50:d6:1e:b4:00:e3:bd:8a:5f:
76:f2:49:e2:31:94:d6:69:45:a3:63:c9:1d:79:35:b6:7a:60:
36:4e:23:cb:68:67:e8:78:fe:79:6b:0f:8c:a3:81:fa:32:b3:
b7:00:83:82:0a:6b:73:89:b9:33:4e:31:d6:87:dd:64:64:8d:
de:90:eb:6a:4c:3d:aa:92:f1:b9:29:56:d7:3f:ab:3a:b4:5e:
e7:e6:ee:b0:4c:c4:30:6d:17:ef:d9:99:e4:6d:d7:d6:64:a3:
38:f4:f1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:03:35 2026 by rpki-client