
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
File: zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json)
Hash identifier: LVa9zAva4gRhr7khcqn2q37lgsdfcKND+zPf9d+UCTk=
Subject key identifier: 46:D8:07:AA:3C:24:E5:53:46:1E:AB:38:A4:BB:8D:65:D8:49:2E:E4
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Certificate issuer: /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial: 01A1DD5DC9512C3D5D72664D62ABEE749905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 04:01:13 +0000
Manifest this update: Sun 15 Nov 2026 04:01:13 +0000
Manifest next update: Mon 16 Nov 2026 04:01:13 +0000
Files and hashes: 1: 8irMhN6XI4UTd6CziWQze6aQaRU.roa (hash: 4USQ1+WIpW+ALL4UR8+ywA+eZ3L7W74DTtNUv/veQUw=)
2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: nE0Per6uvA6vBG0w5SSLZW8z9HDnna5UJRspvZWaxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:c9:51:2c:3d:5d:72:66:4d:62:ab:ee:74:99:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Validity
Not Before: Nov 15 04:01:13 2026 GMT
Not After : Nov 16 04:01:13 2026 GMT
Subject: CN=46d807aa3c24e553461eab38a4bb8d65d8492ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:12:a9:6d:b9:ed:a0:6a:4e:ea:84:6e:c3:
4f:07:36:13:b5:8d:95:42:6b:88:d6:28:70:40:48:
9d:3d:ea:03:ec:94:be:b9:53:11:2d:21:f0:0d:ee:
ee:4f:af:93:8c:cf:5d:8a:91:f2:65:30:07:50:4c:
a5:c6:f0:79:54:db:f0:33:ca:97:2c:b6:26:66:dd:
55:36:c7:bf:ad:ca:45:34:e3:4c:6b:a8:63:fb:50:
ff:87:67:8b:76:b3:df:a2:cb:84:67:4a:32:7b:63:
41:64:4c:a8:65:f1:20:9a:1e:2f:63:a8:c3:d2:ef:
9e:8b:94:af:68:29:a6:50:42:36:65:90:63:89:9a:
07:f0:50:30:78:26:86:ad:54:78:db:5d:84:14:b4:
b2:74:78:d0:19:c4:d9:26:90:87:a3:81:6d:52:61:
d7:4e:4f:66:f2:32:e0:0b:f9:ca:01:fc:d2:4c:28:
36:74:c2:63:e3:de:46:7b:58:d5:e5:44:fa:ed:ac:
75:a8:6a:49:5d:2d:f1:ff:57:d1:a0:7b:ad:b3:72:
1d:0a:23:23:ab:42:34:3e:f0:92:3a:1b:3c:e4:bb:
1f:d2:e0:89:c7:2b:d5:75:49:43:7f:e7:e5:19:39:
41:c5:7c:62:7a:23:a0:a1:94:21:f1:37:22:eb:9e:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D8:07:AA:3C:24:E5:53:46:1E:AB:38:A4:BB:8D:65:D8:49:2E:E4
X509v3 Authority Key Identifier:
keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:35:a8:1f:1d:f3:7e:a1:3f:aa:7f:da:2d:76:66:2e:44:f1:
8b:07:fd:46:e2:d8:b4:10:b0:3c:ea:0e:44:66:1e:d4:8c:8b:
ff:d2:11:93:46:f6:36:73:89:5a:08:a7:de:6c:75:03:2c:0c:
ae:82:17:c6:3c:70:24:9e:22:d6:17:c5:2e:04:43:4d:de:c3:
a3:eb:43:78:18:30:4d:08:50:52:7e:8b:85:92:d7:f6:19:bf:
2a:a1:f4:78:87:c4:bb:2c:8d:69:43:d7:ff:70:b4:3e:17:ef:
96:15:ea:d2:5b:2e:10:fd:ab:d5:05:6d:3e:3c:98:a9:71:c2:
5d:c0:77:e3:9c:df:0b:a8:bd:b8:0b:62:5f:88:40:16:f1:ab:
7c:1f:6f:aa:ee:3a:d5:09:aa:00:81:8a:ef:cd:2a:4d:db:00:
78:a3:3e:79:e6:8e:33:4f:1e:a9:c7:72:c6:2f:73:17:d4:7f:
38:aa:d8:07:5f:d3:4b:ef:d2:d3:7d:87:94:e3:97:9c:7e:14:
12:91:a3:23:28:e6:89:01:a7:be:34:f3:60:62:d4:3c:06:84:
03:97:8b:aa:78:1b:08:a6:f9:af:6c:e7:1d:b4:ec:d2:ce:34:
69:45:fb:5b:75:c6:3d:01:b3:71:44:b5:1c:59:40:8a:ed:21:
02:a2:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:45:36 2026 by rpki-client