Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
File: zl1FYESPeKTc3LeRoH2tIWOgjN8.mft (raw, json)
Hash identifier: 9fvEyeyH8Hjuyh45CkhKqAl8/V7byM6lik1NRMKmzAA=
Subject key identifier: C9:9B:42:6F:AD:D8:4C:84:EB:1C:5D:B0:A3:10:F7:C1:87:71:49:70
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial: 01A134EC8FFA654215F21A469A95715B6B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
Manifest number: 1A33
Signing time: Tue 13 Oct 2026 11:01:20 +0000
Manifest this update: Tue 13 Oct 2026 11:01:20 +0000
Manifest next update: Wed 14 Oct 2026 11:01:20 +0000
Files and hashes: 1: kJTuRCvouXJMaVDF0pdJUxYymkE.roa (hash: u4BkMutspCjtHl2p10ecFJYI7igX5XDffjXXKmzdde8=)
2: zl1FYESPeKTc3LeRoH2tIWOgjN8.crl (hash: A87L/XvkoLuwjxDFIuWZhT+8RICPdf/qR/aELXYqViA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:8f:fa:65:42:15:f2:1a:46:9a:95:71:5b:6b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Validity
Not Before: Oct 13 11:01:20 2026 GMT
Not After : Oct 14 11:01:20 2026 GMT
Subject: CN=c99b426fadd84c84eb1c5db0a310f7c187714970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:ac:98:e1:48:1e:5a:8d:33:55:48:2a:d6:
9d:84:ed:f5:87:44:39:5f:c2:31:c5:b3:12:71:fe:
e8:04:10:cb:33:d3:a9:c4:f5:eb:99:5d:e8:c7:36:
fb:cf:a9:b9:77:66:67:0e:e2:b7:09:9c:95:ee:d0:
01:71:c3:d2:df:df:8c:22:5b:34:8a:2e:3c:f2:4a:
99:0d:bd:2e:23:77:b0:5a:27:71:00:ed:6c:0f:7d:
44:cf:6b:1d:48:7f:5f:0d:91:4c:95:7d:72:f5:d1:
c2:36:d3:8a:ee:a8:0d:72:43:75:3d:92:d3:ae:e7:
8f:b2:8a:6d:59:1e:5f:3e:67:54:43:00:0e:fe:81:
f5:af:d8:68:d5:b2:fc:37:f4:50:ae:dc:ef:c6:38:
80:c4:7b:91:16:f0:79:75:be:7f:a8:29:7c:41:7e:
fd:db:51:5a:97:65:0c:c1:20:c3:f8:cb:be:fa:fd:
13:02:91:91:10:7d:89:79:33:bb:6d:0f:11:06:f9:
e3:25:22:ae:5d:36:08:12:01:82:dc:7a:40:3c:6a:
38:00:15:32:f3:98:54:04:41:19:a7:06:f1:e4:16:
22:74:08:94:68:e9:df:0c:96:e3:85:5d:ce:76:e6:
d9:5a:4d:a0:ec:a3:30:09:ee:f6:9f:98:ec:5f:62:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9B:42:6F:AD:D8:4C:84:EB:1C:5D:B0:A3:10:F7:C1:87:71:49:70
X509v3 Authority Key Identifier:
keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:64:90:b4:23:04:0a:a3:d5:fe:61:c6:eb:b6:bd:4b:a6:d6:
b7:b3:e8:a1:78:26:5a:99:9f:71:16:64:e5:6e:3c:55:97:e3:
39:de:ad:e4:41:aa:00:4d:07:17:43:66:0e:73:de:4a:49:49:
89:ac:8c:29:1b:78:4f:ae:0e:f5:90:e1:9a:d9:5c:62:f0:f6:
d0:79:0f:c6:d3:f0:39:09:2e:96:04:d6:3a:50:75:8b:3d:ce:
b5:fb:6f:0e:76:0a:2e:fd:59:39:19:e0:e5:07:d9:e9:95:f4:
e4:d2:e5:86:79:e7:54:a2:75:63:4d:71:ba:b8:93:bc:6e:d3:
ab:1c:cf:b2:61:53:0e:b0:19:5e:18:ea:49:b3:3e:cb:18:86:
31:85:50:85:48:d5:8e:5a:e4:43:c2:38:24:8e:69:fc:c2:81:
a7:f4:e4:dd:88:d1:bf:e7:bb:2e:cc:5d:2d:cf:d6:9a:75:19:
9f:14:1b:0a:05:13:b6:9e:35:74:20:c7:4f:bc:f1:ca:85:ce:
49:e2:de:4e:aa:0b:d4:6d:89:f4:15:d3:92:a0:e3:ec:dd:3d:
6a:e7:77:b9:e6:4f:57:a6:ff:57:c0:40:24:d0:25:20:e1:9f:
ab:00:a3:2b:a3:70:53:bf:eb:5e:1e:6d:f8:98:2d:65:c8:0d:
9c:78:ed:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:11:45 2026 by rpki-client