Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json)
Hash identifier: Imn6CdJ+juGElbAhiUy7rcEkMTr1pL3ZY+eUg220dxM=
Subject key identifier: 14:BD:3A:13:25:29:AC:E3:D1:6C:CF:F5:60:55:C2:2F:11:99:60:E1
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial: 01A10C26AB4DA169D6E31938BF9A8222554A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
Manifest number: 1A8A
Signing time: Mon 05 Oct 2026 13:00:23 +0000
Manifest this update: Mon 05 Oct 2026 13:00:23 +0000
Manifest next update: Tue 06 Oct 2026 13:00:23 +0000
Files and hashes: 1: D4Ig0boR8l83Ddi1KhhZUDj3BIM.roa (hash: h7w8EdAomdlx4AIn+vosPrC32sePfUw5l3+p/ucsXto=)
2: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: /1w9qY7un0jhxJ5bZf1Qaz1NtBf/5SA0nIpyGcdk6YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:26:ab:4d:a1:69:d6:e3:19:38:bf:9a:82:22:55:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Validity
Not Before: Oct 5 13:00:23 2026 GMT
Not After : Oct 6 13:00:23 2026 GMT
Subject: CN=14bd3a132529ace3d16ccff56055c22f119960e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:92:a3:ae:5a:9e:a7:28:70:c1:d3:b4:75:
bf:1f:67:eb:42:1a:34:f2:71:ea:85:c3:22:ad:31:
33:87:26:8f:a1:61:23:76:42:cb:8e:45:ec:df:96:
12:71:01:1f:cb:73:c4:64:71:64:70:d8:1a:8d:47:
6f:bf:f2:2c:41:ae:4e:bd:89:9a:b5:d9:e8:e3:7f:
22:dc:c9:20:a7:e1:90:d3:66:92:76:9b:2d:87:71:
f6:0a:57:a9:4f:ab:09:07:dc:e7:eb:38:39:10:10:
86:53:ed:b1:8f:08:8a:56:cf:4f:89:9a:0e:54:9d:
9f:24:26:63:e9:88:53:db:1e:ef:6f:ec:8b:55:f9:
95:90:94:47:c0:91:af:81:f0:d3:3a:48:aa:8f:a8:
45:c3:c5:4c:81:cf:99:33:dc:c3:d7:ce:2b:7d:71:
7a:6e:25:61:fd:ce:6d:3f:f2:a6:c7:f0:8c:c7:5c:
0e:de:aa:4d:6c:6e:dd:3d:12:d8:52:01:f7:31:f2:
4d:36:ed:bb:1c:1c:5c:f6:99:eb:b9:56:68:ff:72:
50:5f:35:b1:b5:3c:aa:4c:62:f0:9e:7a:2f:73:46:
99:df:cc:72:72:37:5b:75:5b:b8:ef:6d:b3:10:20:
1b:3e:45:4a:f4:0d:42:3a:75:b9:5c:f0:70:1f:54:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BD:3A:13:25:29:AC:E3:D1:6C:CF:F5:60:55:C2:2F:11:99:60:E1
X509v3 Authority Key Identifier:
keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d5:4d:07:33:a6:3c:1e:c3:75:72:e6:f4:9a:2a:20:9c:33:
78:c8:e8:f8:84:35:47:a1:53:2b:cb:b9:09:56:31:df:df:9a:
f6:16:f2:14:c9:fc:ec:a3:7a:c8:00:91:53:0f:c0:87:42:0f:
25:f6:cc:40:23:8f:37:e3:12:11:70:12:c6:03:24:1a:5a:06:
46:0b:75:ea:64:44:b3:d5:ea:3e:12:39:1e:fb:db:3f:34:ed:
8a:97:49:9a:1c:75:a6:6b:f7:09:d3:89:0c:9c:81:a7:8e:11:
f0:8b:5c:04:b8:a0:62:95:17:dd:61:fc:9b:48:c1:e3:6c:95:
56:c4:ed:3d:34:c7:07:04:ad:16:d0:46:5c:49:8b:8d:cc:61:
a9:32:1e:cd:02:53:b3:e1:fd:46:be:94:c8:fc:b7:32:94:df:
43:19:b4:8e:37:13:4a:88:d3:18:d9:76:f5:84:2c:56:bf:e1:
7f:e1:57:3a:a7:e3:a7:96:74:2f:f7:78:d1:02:b3:b4:78:d0:
3a:d3:a2:3f:6b:2c:75:1b:1e:3e:42:f8:ab:66:1c:66:46:33:
74:d1:ac:e2:c2:68:59:27:01:c1:9f:0a:5e:21:26:2a:c8:6b:
29:5d:19:1a:b3:a9:6f:7b:a7:15:f4:a6:10:08:b7:7b:b3:bd:
ff:17:6c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 23:31:44 2026 by rpki-client