Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: kEkwN818AIU0Q3BfCFwiEjp92O8WLRWe3gBedsjjVfI=
Subject key identifier: BD:60:CD:09:0E:1F:EF:2F:EC:DB:63:39:04:8D:F7:68:AF:28:14:E5
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 01A1DEDEB825A80348E9BC25CA7DCF08F891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0B0C
Signing time: Sun 15 Nov 2026 11:01:40 +0000
Manifest this update: Sun 15 Nov 2026 11:01:40 +0000
Manifest next update: Mon 16 Nov 2026 11:01:40 +0000
Files and hashes: 1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: C7d4/ktjLiRu/93Gc1FNCnAYnInr4leFQft0Z998TiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:b8:25:a8:03:48:e9:bc:25:ca:7d:cf:08:f8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Nov 15 11:01:40 2026 GMT
Not After : Nov 16 11:01:40 2026 GMT
Subject: CN=bd60cd090e1fef2fecdb6339048df768af2814e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1f:88:09:0e:36:ef:a8:fc:7c:74:d3:26:34:
f9:88:7c:5d:b0:03:fa:cb:95:d1:6b:65:43:24:1b:
9b:b0:cb:ba:b6:da:89:39:1a:08:66:b6:dc:fe:dd:
df:a7:cf:19:9c:a4:58:0d:d1:bb:fe:67:3a:17:40:
66:ee:93:be:59:7d:b1:e0:3f:49:d5:3d:00:af:d4:
19:cb:3b:2b:35:7c:e2:cd:f4:28:4b:8e:cf:77:cf:
25:2b:54:a3:09:e6:ea:fc:43:d9:46:d3:48:0b:e9:
20:a9:30:f1:ea:5c:cf:85:81:2b:e4:c5:29:16:5c:
ae:3f:c8:ba:7b:5c:fc:c1:7f:1a:0f:0c:44:6b:d7:
f4:5e:b0:b5:ab:a2:a2:9f:63:33:79:d2:7e:19:9f:
41:e1:0a:4b:af:17:a3:93:14:00:b9:36:53:aa:ec:
46:8d:c6:58:1f:a6:24:07:30:ac:05:47:b9:28:dc:
62:f7:ab:53:2f:db:7a:16:34:8d:f7:61:df:dd:f2:
50:a2:7c:4e:73:4f:73:24:dc:c8:cf:31:7c:d8:2c:
74:30:4b:27:98:cd:1c:1b:a5:82:f7:71:1b:fc:4a:
8c:7c:e9:ab:06:f2:f7:56:05:b6:60:55:73:05:6e:
d5:bc:23:14:86:3f:3b:f4:58:5f:67:5e:8d:f9:3c:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:CD:09:0E:1F:EF:2F:EC:DB:63:39:04:8D:F7:68:AF:28:14:E5
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4f:17:61:39:b4:d1:b4:73:46:6a:d8:8d:65:ac:06:cc:4c:
53:e3:00:a4:c6:73:4b:8f:80:e6:8e:f7:9a:85:db:bf:4e:6c:
06:c2:05:8a:fb:86:78:be:71:49:a5:ff:10:e6:8f:17:57:81:
22:02:44:e4:d7:5a:c0:57:15:8c:f2:81:23:24:46:99:72:d4:
73:1b:de:a5:a4:21:12:f3:de:16:37:a3:55:6c:89:17:ef:f8:
2b:7c:a8:3a:a0:41:8f:e2:04:fb:59:62:bd:34:6d:20:ae:6c:
7c:7a:b1:1c:87:6a:c5:aa:6f:72:ad:11:7a:f2:ee:ac:62:9c:
18:e8:7b:b1:cc:1f:36:06:61:ba:28:ba:6c:3f:a0:da:fa:1f:
c6:ba:0a:ab:c4:0b:ba:c8:a8:48:81:c0:b7:d0:ae:31:f7:a8:
6e:3c:58:a4:5a:9a:2c:0b:28:c5:09:97:5b:42:8f:2e:93:6d:
e0:18:d5:27:15:ff:0f:3d:55:03:47:f1:ee:49:e4:b1:3f:61:
a0:d8:8f:7a:e2:98:c8:e6:59:77:a8:79:8b:52:ad:4d:1a:ab:
41:6e:a1:c9:a4:42:e4:51:e0:7e:65:53:13:06:4c:64:54:6c:
7c:8f:d8:61:39:0d:19:8b:2d:a4:94:ec:e8:c0:13:e2:39:ff:
be:77:c3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:11:39 2026 by rpki-client