Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier: 7UJT3NHLrA2SZ5zvxCkqXxaDd+nZOBiGbzAphUQwCno=
Subject key identifier: C9:08:69:F5:56:2E:E3:79:43:03:88:E3:F5:A6:86:74:9B:D2:CC:9B
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 01A13AEDA2CF9DCEB70EC7A9D64585E1D81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number: 1AA9
Signing time: Wed 14 Oct 2026 15:00:14 +0000
Manifest this update: Wed 14 Oct 2026 15:00:14 +0000
Manifest next update: Thu 15 Oct 2026 15:00:14 +0000
Files and hashes: 1: CTL_XkMdcDz_-dbE2LKujOq_cPw.roa (hash: 0tP2+X0H7fwYa4FCqGt0jobEPqhB1skE7FCeOf0xvAQ=)
2: H65TgkcKS-a8hILxMZ_8VIGp_Q0.asa (hash: EHncor9xUQtHcVvs7d4fpQlv6e3PfXGs5zWe6/zrxDQ=)
3: Tgw2-QPBfHwWF5Mt4iaEfKWQTtM.roa (hash: EzrszZm8Tel+/kV3Hb11JBz6gi/eN1N+IU5w2IVFc9w=)
4: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: tdDKEsOfS7IHVoccXGQ3Q9t7tmLUaW+OCaXZxk7QnRY=)
5: nfa8lcMTUWIbtIpuf80s2YziubY.roa (hash: hUm8YjaYLbHJUISE3EmfzpSWnBzmCV6l9EAAD3oXKsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:ed:a2:cf:9d:ce:b7:0e:c7:a9:d6:45:85:e1:d8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Oct 14 15:00:14 2026 GMT
Not After : Oct 15 15:00:14 2026 GMT
Subject: CN=c90869f5562ee379430388e3f5a686749bd2cc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:a2:a9:27:99:10:e0:d4:5d:dd:47:4c:d6:
90:37:bc:d8:6a:2e:95:0a:4e:8f:dd:e6:f6:ab:92:
0a:00:7a:dd:b5:40:ec:9d:af:0c:7f:aa:33:2d:d2:
e3:2b:0a:87:b3:75:5b:e5:f2:d5:98:46:f3:4b:74:
e0:c4:57:18:c5:b3:bf:4f:df:63:a5:2c:72:08:00:
34:8c:d2:0b:d0:a4:0f:c3:1b:fc:1f:db:88:ca:0c:
19:24:e0:ee:4b:19:e5:4a:ee:e9:a3:8d:aa:4c:ef:
1b:3b:fa:9a:de:54:84:52:6d:e9:2f:2e:56:d9:ac:
b0:26:1c:92:ed:33:c1:75:62:54:92:fe:b2:54:ac:
6b:12:60:39:b7:73:e6:16:cc:e9:01:e9:02:49:a4:
5e:3a:08:45:44:c5:94:5a:25:46:bc:40:37:9c:9a:
12:0e:51:e5:ca:bd:cb:b1:39:a7:8f:b5:3f:14:8a:
24:98:dd:8c:67:c6:83:1b:f2:a2:70:ce:4e:28:6b:
17:80:68:96:f4:df:1b:0a:2c:ef:a9:cd:a4:bc:4c:
86:9f:3b:6c:39:f8:79:8b:07:a7:57:e0:7f:22:60:
04:24:f1:31:4b:1e:e9:a6:45:76:96:dd:5d:11:7c:
33:2f:cb:e9:d2:4c:89:c6:04:8c:6a:a1:d6:e0:e1:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:08:69:F5:56:2E:E3:79:43:03:88:E3:F5:A6:86:74:9B:D2:CC:9B
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:47:ae:2c:36:d7:18:ca:88:99:aa:a4:a7:3d:9f:cb:44:00:
6e:ea:ba:b0:60:1d:bd:9a:1a:29:01:ef:19:f2:88:dd:cb:be:
ae:1d:4c:a8:0d:34:50:02:22:d5:57:8d:16:59:8d:8f:2b:89:
33:07:36:b4:d2:72:7b:34:03:42:d6:15:91:8b:06:8c:b4:99:
d3:10:6f:f0:05:ce:e3:56:8c:d3:20:49:4c:0f:52:86:a5:1d:
7f:b5:be:9e:e4:54:8f:32:e5:c9:58:96:d0:74:13:48:e2:5a:
7d:0e:53:99:c0:34:c0:74:30:49:7a:8b:a9:10:05:6f:f2:c2:
8d:0b:e0:bc:3b:00:73:13:2a:e0:d3:f4:d9:15:cf:ac:b4:c3:
50:37:c5:7a:73:06:38:67:36:e1:9e:4c:ca:8f:24:c7:d3:6b:
82:23:8a:40:7d:b2:08:61:b9:46:9b:be:07:ee:7b:02:06:28:
a2:ac:48:02:0d:b9:13:62:1b:b3:ef:22:f9:2b:e2:c7:4f:9f:
16:67:5d:78:21:f0:2a:8b:ae:ee:0e:40:81:fb:10:83:47:e2:
e5:33:65:93:26:d7:b8:ae:e5:de:d5:54:22:7a:c1:45:2a:06:
53:85:13:a9:cd:86:00:2d:99:7c:ba:bf:a5:3f:5b:5b:c0:f4:
d4:a5:36:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:09:33 2026 by rpki-client