Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: DMIh+11AwKcMxxg34TJuwTsZXDwatesr3NU4z7TQakc=
Subject key identifier: 8D:6D:FD:7B:6F:75:9C:62:DF:F9:26:89:B4:D4:17:26:D6:36:1B:8E
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 01A1328FE66F7857606C7687E83EFA96090F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: 0350
Signing time: Tue 13 Oct 2026 00:00:53 +0000
Manifest this update: Tue 13 Oct 2026 00:00:53 +0000
Manifest next update: Wed 14 Oct 2026 00:00:53 +0000
Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=)
2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: 23ID/OLs60CRldDtjD9LH5hj8jQjp/UKzhcahwBSLu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:8f:e6:6f:78:57:60:6c:76:87:e8:3e:fa:96:09:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: Oct 13 00:00:53 2026 GMT
Not After : Oct 14 00:00:53 2026 GMT
Subject: CN=8d6dfd7b6f759c62dff92689b4d41726d6361b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:61:bf:50:8d:19:da:1d:74:33:9b:04:cd:
7b:ae:a4:bc:72:bd:ca:03:67:2c:1c:b9:47:70:4b:
a1:54:32:95:f9:0f:88:9d:b6:fb:17:45:58:94:74:
11:9b:a9:57:4a:b9:e6:56:ac:99:c3:ef:51:cf:34:
5c:85:da:50:1f:22:a1:75:60:4e:ac:1a:a2:61:cb:
54:48:ac:15:72:36:da:be:99:2e:32:5a:70:5c:61:
43:b7:a7:38:06:25:27:83:1a:33:71:21:36:65:f8:
a2:0c:7c:fa:6f:2b:3c:52:f6:f4:c1:1a:6c:4a:9e:
db:20:93:35:12:90:60:ed:4b:15:89:6a:5e:fc:d8:
63:b2:3c:3c:fd:80:df:aa:ec:b6:3b:f5:c2:37:0d:
51:fa:e3:82:da:92:c9:b9:2b:52:3f:e9:f1:e4:0e:
1b:62:58:b0:09:8f:4b:8f:c9:8e:a6:eb:32:f4:3e:
5e:b5:3a:ca:cb:94:d1:be:79:22:44:68:f5:4d:8c:
0b:8c:6e:e6:5d:8e:d0:05:4c:cf:e1:e1:37:91:ae:
c7:7e:92:07:a7:fc:6a:00:88:80:63:c5:40:eb:74:
93:f4:bb:a6:37:76:6c:ad:b4:91:4a:e4:5f:c2:05:
69:bf:c9:b7:db:18:fc:ea:b2:6b:db:bb:03:81:7c:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6D:FD:7B:6F:75:9C:62:DF:F9:26:89:B4:D4:17:26:D6:36:1B:8E
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cd:95:f9:83:d5:7e:38:89:be:0a:68:ee:70:64:03:2e:74:
72:c7:74:8d:28:df:88:81:7e:ea:00:05:22:92:59:1b:31:f8:
86:80:83:e7:a8:e2:d6:1b:6e:e0:39:bf:d0:61:ec:18:ab:6d:
7f:89:84:47:44:99:e0:5a:fa:c5:b6:38:4b:93:9c:ce:19:db:
37:be:0c:a5:d5:6d:3b:bc:33:ba:54:e1:52:4c:2e:da:b8:48:
6f:43:a3:1a:8b:c6:45:f8:96:2e:d9:63:9b:b0:bf:e2:0b:c1:
03:87:40:39:90:a3:ca:61:16:87:1f:6b:dd:4d:ca:bc:f2:c4:
c2:f8:67:05:24:c6:a9:69:18:3c:ba:56:39:50:ad:6a:c6:aa:
2a:11:74:d8:27:f5:c5:d1:f0:4b:f1:b2:d3:89:6f:38:4e:bd:
c3:fa:e4:72:f4:3b:a1:ac:55:4c:da:dd:0f:ec:02:81:fe:38:
67:91:82:0f:12:ff:a3:9b:e3:67:25:97:e5:3e:d0:b1:24:b1:
99:6d:43:ea:37:34:84:9a:e7:a2:20:9f:45:67:f3:43:92:6e:
c3:3e:dd:79:c0:2a:46:7b:01:69:46:a6:3b:7e:95:1c:c4:b8:
f9:4c:5a:7f:9e:7d:59:b3:02:ff:6d:38:a0:ea:34:54:63:6e:
a1:ba:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:42:59 2026 by rpki-client