Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: yDCnO3ipFZygApQJ6ApTcLJUxGFG4EbKE8rGt3Wmr9U=
Subject key identifier: 70:ED:5F:25:39:E6:C7:B4:A2:AA:2E:9D:A6:71:0A:49:26:1A:4E:2E
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 01A17ADF98602CBA70F53C805FF8ECED25D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 1AC9
Signing time: Tue 27 Oct 2026 01:00:36 +0000
Manifest this update: Tue 27 Oct 2026 01:00:36 +0000
Manifest next update: Wed 28 Oct 2026 01:00:36 +0000
Files and hashes: 1: 8ZLVcQSbNPNVDWuXCmGCr0G7x1M.roa (hash: R8MpU4UMaGBrjPkl0XC57+1S995gBZY7N8nvDLObasM=)
2: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: yx6BWKoOidQnLBZWOF7SMor3PozMCxHiNZ4epk7KzgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:98:60:2c:ba:70:f5:3c:80:5f:f8:ec:ed:25:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Oct 27 01:00:36 2026 GMT
Not After : Oct 28 01:00:36 2026 GMT
Subject: CN=70ed5f2539e6c7b4a2aa2e9da6710a49261a4e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:d1:f7:5d:26:c1:30:5a:f8:b4:07:55:67:
a4:73:4f:56:e9:7c:a0:a7:00:e3:11:dd:9a:f1:c8:
ee:94:fc:f8:d1:a9:88:c6:a5:59:57:41:39:a8:64:
b2:95:26:d4:58:46:af:2c:65:a0:4f:78:4b:f7:9e:
23:bb:86:59:5a:49:39:98:7f:53:78:9f:38:a3:da:
10:ad:7f:ab:bf:6e:b1:99:50:ae:8f:ef:7e:8b:52:
a6:c4:e8:b9:cb:55:03:83:2f:15:21:a6:e0:f0:55:
2d:d0:88:1c:5e:17:5b:84:4a:01:c4:0f:bd:d2:dd:
2b:a6:91:34:0e:22:b2:57:6c:a2:e8:e4:92:16:3b:
3e:3b:9a:04:a7:cd:d6:6b:9b:c5:d6:7e:7f:b2:51:
0b:c3:45:e6:4e:19:3f:41:01:5b:16:f6:27:6a:39:
4f:50:cf:05:05:05:34:11:97:f7:ca:85:35:da:5c:
c6:9d:80:7a:d2:4b:0b:1a:78:f4:2d:47:a2:ec:09:
7f:51:7e:2e:a5:51:15:b8:4d:be:8b:8b:c2:1b:58:
bd:77:52:01:ed:6e:41:eb:a8:cf:49:20:d8:77:81:
aa:c9:6e:ca:9e:de:35:ce:48:54:7e:9b:ad:f8:fe:
bd:4a:55:42:87:48:00:85:c3:71:ba:c4:0a:5a:29:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:ED:5F:25:39:E6:C7:B4:A2:AA:2E:9D:A6:71:0A:49:26:1A:4E:2E
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:76:15:62:c8:88:68:e2:61:0b:8c:f9:1f:39:84:f6:60:17:
b1:2f:2f:84:31:8d:6d:1c:ef:ea:cb:dd:8e:97:1b:d6:f7:f3:
89:c5:b2:ec:68:8b:0e:23:16:81:f6:d2:52:1d:30:30:4b:bc:
bd:3c:fa:c5:f7:62:ca:67:b8:e0:ee:48:50:34:c1:06:ed:fb:
5a:96:5d:ed:4c:ee:8b:5f:19:26:4d:1c:54:79:15:ab:a9:32:
f1:71:d3:e3:bf:ea:68:57:cb:5c:62:7d:a7:3e:c8:e8:9c:d8:
ac:99:89:a1:66:47:90:b6:b9:1f:69:65:09:27:e9:19:ff:90:
bf:de:a2:ed:c5:e8:a9:39:0b:1a:52:24:78:0e:b4:d5:7e:95:
48:01:18:25:d5:ff:cd:9f:2b:a6:ee:34:a8:51:66:68:fb:0b:
ef:91:9f:5e:99:0b:76:07:85:8d:75:ec:da:1a:70:b8:ea:ba:
5f:5f:6b:38:73:f6:ec:f4:dd:6e:67:2b:a9:03:7a:28:3c:a6:
1e:d6:b8:90:99:83:62:cf:4f:cd:2c:d6:65:7b:95:17:3b:59:
02:6c:6f:e5:c3:8d:c5:56:39:11:e0:9b:a8:20:06:5d:b1:d8:
1b:9b:10:b1:c0:02:33:78:e8:97:43:8e:1f:6d:19:54:d0:3f:
7e:a7:ec:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:03:26 2026 by rpki-client