Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: PT1F+mcKCqB+TVORIVlNkmCzRNLa/WLWhhqZyJYm2Uc=
Subject key identifier: EF:32:FF:50:DD:5F:75:B6:FB:C2:A8:8F:81:BD:78:68:82:F4:0B:40
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 01A148A9D15B69CA8F04DC9B9ADC08DB308D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 04D8
Signing time: Sat 17 Oct 2026 07:00:50 +0000
Manifest this update: Sat 17 Oct 2026 07:00:50 +0000
Manifest next update: Sun 18 Oct 2026 07:00:50 +0000
Files and hashes: 1: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (hash: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY=)
2: g8Z517-jOmVF6Xu2Nxp8NTAxGx4.roa (hash: OXnUsbk5vh8et8vrHb0/ntkeJcO9A+ORppXS73LPvXg=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: Bke9HDeA6HUgEYTweQRS/rvhb2gJ7n0/dG3VY7Nlen8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:a9:d1:5b:69:ca:8f:04:dc:9b:9a:dc:08:db:30:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Oct 17 07:00:50 2026 GMT
Not After : Oct 18 07:00:50 2026 GMT
Subject: CN=ef32ff50dd5f75b6fbc2a88f81bd786882f40b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:99:9a:df:61:a1:7b:0c:09:60:1f:4a:30:
b7:4c:f1:9a:5b:16:2b:9d:d6:08:1b:bb:a7:04:2e:
6c:c9:f0:b9:6d:ce:de:d2:d0:04:34:83:86:eb:6b:
35:e1:c2:0c:37:61:f2:f1:54:e0:e9:a0:4e:c3:5a:
2a:27:9b:25:64:af:51:9f:07:f4:df:52:df:c5:21:
dd:de:9e:f8:87:70:17:1b:d2:23:d8:a8:7d:d5:91:
df:55:6b:e1:0f:84:8b:a4:4b:c4:84:95:04:a7:38:
2d:be:9d:67:60:5e:b6:ae:fe:93:5a:f4:aa:f3:db:
cc:51:22:24:db:6f:de:06:29:eb:e1:fb:98:69:c7:
2d:00:13:9b:c9:7b:68:5f:9d:af:5e:41:27:2f:1e:
b1:e6:97:f3:8f:48:bf:66:a3:1f:26:bb:2d:7d:7f:
aa:66:62:ba:79:33:9f:8b:a4:74:79:27:f1:9f:6c:
1b:55:14:b0:40:77:12:9a:79:b2:cd:9c:c2:3a:85:
f1:a9:71:53:eb:14:5a:b4:c7:e4:bb:e7:02:e0:98:
19:24:0f:62:05:b1:8b:f3:be:5e:2e:97:90:4c:fa:
b2:ff:4c:45:5f:f5:34:da:74:f5:64:80:84:ce:9f:
7c:50:25:dc:44:45:d7:e0:74:e3:9f:6e:63:5e:e8:
da:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:32:FF:50:DD:5F:75:B6:FB:C2:A8:8F:81:BD:78:68:82:F4:0B:40
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ac:03:37:30:c8:4b:98:30:55:80:1a:25:97:5b:53:e9:d1:
54:b7:dd:41:31:d2:c8:ef:b4:37:85:90:05:06:28:ca:a5:5c:
3d:a1:99:27:68:c8:bf:bf:6f:b2:f1:16:bd:38:43:58:fe:66:
0d:44:07:d2:58:81:82:6f:7d:44:56:40:2b:6c:bf:ee:1b:6a:
b0:45:3c:cf:30:22:08:10:af:8b:6f:e5:e2:00:5b:bd:86:d2:
69:60:8b:9d:1c:8e:0d:9e:21:a5:c4:c0:62:a6:ca:c8:6a:10:
a2:c8:5a:b3:f9:52:6f:93:40:bb:77:fb:ae:28:2b:b7:ba:48:
e6:0b:85:85:be:5f:b0:76:42:fc:a4:fb:23:3e:43:60:e3:43:
d9:cc:15:c2:ae:b0:14:26:7e:2b:88:fb:2f:8c:df:6d:90:ca:
59:bd:ec:fd:c6:a4:1e:5e:e3:20:85:73:12:9c:b7:4d:48:8c:
05:81:85:be:f4:11:bf:0a:9e:88:71:85:04:88:42:a3:cf:f6:
ca:6a:d8:7a:4f:ce:cc:36:45:15:c4:0d:21:c7:bf:41:7f:58:
8a:60:76:4c:2c:de:30:df:36:cf:e0:bb:c1:24:6b:ec:42:43:
62:eb:b9:fb:d2:40:7d:36:6f:53:4a:80:9a:83:f1:76:fa:c0:
22:eb:6f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:07:48 2026 by rpki-client