Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: bET2tF104zPc2f/dFNaAbTSvdONq9gJytyzFNl1pRfQ=
Subject key identifier: 9A:E7:5D:C3:B7:0D:F3:81:98:00:50:03:A5:02:3D:9D:C5:1B:47:8E
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 01A1494F5659A3E464A3A9C00FD0CDC9E858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 0DCE
Signing time: Sat 17 Oct 2026 10:01:38 +0000
Manifest this update: Sat 17 Oct 2026 10:01:38 +0000
Manifest next update: Sun 18 Oct 2026 10:01:38 +0000
Files and hashes: 1: BzcIlfSqWBkxCx6sQahLAYgQl9U.roa (hash: iEU6LtcxUGPF+befnk/JbzTRId/51aZ7BTsMTWVBJf8=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: EC3i9Z9Jf4DAj06fHBjYH3NpAUbQhzykA6VvJLJpZa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:4f:56:59:a3:e4:64:a3:a9:c0:0f:d0:cd:c9:e8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Oct 17 10:01:38 2026 GMT
Not After : Oct 18 10:01:38 2026 GMT
Subject: CN=9ae75dc3b70df38198005003a5023d9dc51b478e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:9b:60:cb:1f:98:39:f0:54:ec:87:67:e4:
05:3b:c6:90:09:e3:9f:fd:57:5c:bc:93:d8:97:15:
51:f8:2f:a0:89:18:b3:bc:28:f9:da:17:91:df:57:
3e:b4:c9:ef:b8:fb:38:19:3f:52:e3:ae:4a:50:ab:
92:2e:77:cf:ae:63:03:4d:e3:38:87:b2:ee:91:f9:
02:64:52:11:77:b9:36:ae:ed:3b:39:41:ee:b2:ef:
c9:73:65:28:80:cd:f4:50:4e:51:2b:fa:da:ab:dc:
4c:c9:dc:6e:86:0b:5d:1e:dc:22:0c:9b:02:ad:27:
23:30:09:b0:62:b3:3a:77:cd:11:f7:f2:02:be:8f:
fb:64:ad:b4:c1:61:20:53:49:67:a0:25:d1:d6:88:
ae:a1:e3:5d:38:3d:02:b9:ff:95:29:17:9f:35:fc:
d4:93:01:19:48:bc:da:ed:3e:74:aa:d2:41:8b:ff:
64:25:c0:fe:c5:ea:eb:00:18:6d:3f:96:18:26:9e:
02:67:2e:58:4f:47:0f:c6:9b:2b:6d:6f:a3:ad:f6:
7e:e8:3a:ae:17:0d:db:56:62:3c:d1:ec:78:93:6f:
bd:f3:52:4d:20:12:6a:e8:0c:0f:ab:76:09:f5:7a:
9f:7c:95:67:b2:ba:c2:fe:7e:e6:e0:02:bf:91:31:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E7:5D:C3:B7:0D:F3:81:98:00:50:03:A5:02:3D:9D:C5:1B:47:8E
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9e:92:fc:08:44:f9:88:14:0e:21:eb:64:48:ff:ea:fd:38:
23:4f:de:28:d3:8a:e4:39:da:cd:ee:c3:a9:35:3f:88:44:6b:
f5:0b:f7:45:32:92:2e:fa:c1:f7:3c:7f:48:74:c1:f2:73:25:
03:29:84:05:9d:02:87:cf:30:32:78:69:01:12:cb:9d:48:e1:
7c:4b:2b:b0:5b:ba:c1:f3:44:e3:26:83:5e:06:30:7b:2e:31:
48:11:69:88:a9:49:ee:05:f9:a4:26:0e:ff:94:ae:e6:77:9c:
e7:4c:ad:da:14:5f:06:0e:15:c0:b6:4e:29:fc:49:a8:79:1c:
51:22:bb:e7:b7:fc:c7:ce:c8:ea:15:e0:d0:73:81:c9:a1:9a:
04:ca:02:37:05:73:e8:a6:64:a2:a9:2a:0b:55:d7:dc:da:6a:
cf:38:0f:30:de:c3:af:1a:3c:32:60:3c:cd:c2:72:13:42:90:
1a:98:a7:2c:37:16:42:56:d1:ed:ed:1d:f0:89:f6:4b:7a:10:
46:95:1a:f4:47:dd:4a:b3:e5:f7:b1:e0:f1:37:f1:f4:48:93:
ab:da:5f:5d:76:5a:c1:cf:96:f8:8d:cf:46:20:bf:05:7c:fe:
34:be:be:c0:f9:2f:14:ef:7c:f5:9d:48:e7:a7:64:26:fd:66:
4f:c4:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 20:33:34 2026 by rpki-client