
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: 6j5JpmfahCC6s1gdX6n6ubx+tmdda//qPx6LUNY+8Zg=
Subject key identifier: AB:05:9C:DA:50:7B:2D:FE:40:F3:93:92:62:76:C1:93:38:74:0A:68
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 01A100231EA5198C4B9BF1128D17E2A4C474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 1A86
Signing time: Sat 03 Oct 2026 05:01:03 +0000
Manifest this update: Sat 03 Oct 2026 05:01:03 +0000
Manifest next update: Sun 04 Oct 2026 05:01:03 +0000
Files and hashes: 1: 8r944bJqG_LM17rTDE1uGAYMcO4.roa (hash: US/6Z/+ktv9Mac1FJpsH2XS8YNAZ76aWDA9Ebr1o3lU=)
2: BcVatgINhehxpYUrBXABJ41nAt0.roa (hash: GcuNKsGTXhiIzKjZT1cDQ3vbaLRIxIZoGDWXVty3fns=)
3: YPjYJdppvJ-xVHyJ3v-XHJpuM2M.roa (hash: zURKZ3NvzQl2kZFa7NPOhYYc5nLxhkqpMkhOysGx3l0=)
4: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: wBBuPDonZAf/PAWfTkIsMs3EOIMb7N6jpdI6ybIoJrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:23:1e:a5:19:8c:4b:9b:f1:12:8d:17:e2:a4:c4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Oct 3 05:01:03 2026 GMT
Not After : Oct 4 05:01:03 2026 GMT
Subject: CN=ab059cda507b2dfe40f393926276c19338740a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:26:df:29:92:ad:4a:7b:2e:be:b2:7a:1c:
64:97:3f:a3:b4:ae:58:ba:f4:ef:f0:7c:17:36:bc:
43:b1:68:ed:46:aa:2a:ec:c2:79:d7:f2:fd:1d:28:
69:1e:9b:fb:10:ee:9d:46:2d:a5:f3:06:d1:01:f2:
f7:2b:9a:42:43:be:50:07:44:69:96:06:2a:ce:60:
47:f3:b3:28:15:94:ff:c5:47:a2:4b:cb:1c:c9:3c:
46:9e:d1:aa:b0:53:0f:b7:b0:76:94:25:28:2a:58:
04:ba:7b:0c:cf:2c:41:ac:6b:0b:b5:0d:e3:69:a6:
1e:86:1b:28:ef:6f:e8:7b:d6:52:a9:e6:f1:c1:27:
8b:56:31:34:39:23:99:61:61:13:41:4e:55:d1:12:
c9:d7:67:cb:c1:e4:cc:67:44:aa:06:b4:16:a2:66:
a9:2d:61:15:f6:de:83:f4:4e:19:6b:34:f6:33:0f:
25:85:bc:94:23:6e:ab:fe:f3:ed:31:1e:f9:db:a7:
3f:29:27:58:b2:b5:ac:b3:2f:84:d3:2f:43:a0:8e:
a3:b5:74:b1:cd:f8:a3:f9:5c:8d:7e:9a:8c:98:d7:
13:b5:a9:ab:f5:ae:fb:14:af:98:38:ec:37:33:cd:
dd:71:4f:bc:af:24:1e:b2:71:8c:dc:53:8a:03:2e:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:05:9C:DA:50:7B:2D:FE:40:F3:93:92:62:76:C1:93:38:74:0A:68
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:64:46:04:0f:fc:3a:c5:59:8a:c9:bc:2f:47:81:d3:fa:c5:
35:21:86:7c:d7:e3:15:1a:bb:37:82:38:f3:d2:dd:ac:f3:13:
5e:6b:df:3a:23:07:61:d7:0f:33:ca:e2:9f:44:04:ee:60:2f:
0a:a1:5b:1f:e1:2f:ba:34:61:3d:e4:7d:25:3a:3f:71:1a:80:
9c:0c:38:c7:69:d8:83:d0:7b:2d:42:18:70:83:99:0e:e2:1c:
a7:8c:5d:ce:5a:3f:5a:b9:c9:17:99:93:74:26:c4:d4:94:59:
7a:f9:e7:c8:8d:ee:6e:b5:4b:3e:94:f8:54:d0:00:c8:45:11:
de:64:ac:61:c9:cd:82:49:11:d2:04:ba:4b:88:67:75:f6:82:
76:62:17:d8:80:0a:2f:15:d6:64:d5:02:66:27:43:ac:54:97:
1f:de:8a:46:83:06:23:ef:45:e8:d1:63:17:34:d6:6c:7f:fd:
e7:8b:c1:f3:89:16:f4:64:92:63:e9:8e:82:b6:fe:4b:61:62:
bd:7c:d0:86:c9:05:7f:89:ab:8e:7a:17:5a:15:4d:50:5c:a5:
92:3c:be:74:f8:2e:6a:30:ac:b6:75:8a:ac:c3:7f:c0:04:d9:
95:e3:04:df:58:25:92:fc:bd:c5:c7:32:2f:76:b0:b9:61:9c:
57:45:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:40:02 2026 by rpki-client