Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: aN3i7zjyPr96nCBqQac0Dd8YP6D8NCQaAr52kaNe8xE=
Subject key identifier: 36:55:08:AD:2F:C7:E7:5D:54:16:D8:5F:55:0D:8A:66:85:EB:02:3E
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 01A13F02D291C2DDDC782ECCB9FB6815D579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 04D3
Signing time: Thu 15 Oct 2026 10:01:51 +0000
Manifest this update: Thu 15 Oct 2026 10:01:51 +0000
Manifest next update: Fri 16 Oct 2026 10:01:51 +0000
Files and hashes: 1: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (hash: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY=)
2: g8Z517-jOmVF6Xu2Nxp8NTAxGx4.roa (hash: OXnUsbk5vh8et8vrHb0/ntkeJcO9A+ORppXS73LPvXg=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: 7D9udqfPUCM5rkE1MjNobDkchyWXZaCMaffQ+s+NDX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:d2:91:c2:dd:dc:78:2e:cc:b9:fb:68:15:d5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Oct 15 10:01:51 2026 GMT
Not After : Oct 16 10:01:51 2026 GMT
Subject: CN=365508ad2fc7e75d5416d85f550d8a6685eb023e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:e1:6a:e8:c5:72:d6:a6:cc:e3:14:6d:24:
30:5e:f0:44:fe:86:68:eb:77:91:b4:e3:05:02:56:
19:7f:6f:87:69:9f:f4:c3:4f:c6:1d:21:66:9f:fc:
b9:0d:c0:16:c8:14:8f:87:f2:4a:88:89:b4:17:f0:
79:07:78:f7:49:7f:f0:c4:09:f9:cc:c7:e5:02:5b:
8b:55:67:54:7f:e9:40:90:f2:ef:ae:eb:3b:b0:9c:
d5:3b:61:70:81:3d:22:51:05:47:a8:e3:20:b1:b2:
90:61:3b:54:f4:02:8c:6b:52:b6:e9:d3:45:1b:f3:
c9:21:7c:d3:b2:77:c4:87:68:af:8e:47:8e:5b:d7:
24:0c:d0:72:27:d3:09:f9:46:60:c4:fe:29:5d:5d:
de:c7:99:7a:33:06:18:72:c3:24:b6:d4:98:12:01:
88:8c:94:81:4d:ba:02:c4:a3:93:82:10:ca:f7:1e:
83:92:b3:8f:f7:87:5a:cb:d7:0f:8f:23:1e:dc:5c:
55:4b:a8:12:8c:dd:f8:b9:d4:19:49:d5:cf:f4:d4:
62:9c:3a:89:d6:aa:32:71:54:ee:0d:c6:70:8f:4d:
a8:ff:7c:15:4b:08:14:21:ae:bc:94:50:07:3e:f6:
9d:92:06:e8:83:97:a2:5f:d7:c6:15:77:23:2c:c0:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:55:08:AD:2F:C7:E7:5D:54:16:D8:5F:55:0D:8A:66:85:EB:02:3E
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:94:23:3f:db:2c:b6:21:3f:63:84:15:c5:63:af:2b:74:27:
60:a8:48:a9:b0:65:e0:cc:49:8c:10:10:13:b5:52:c0:9d:d9:
83:fd:bc:3c:26:dd:0d:58:e4:87:44:93:5b:8a:65:29:23:1c:
0b:1c:ae:70:3e:e3:c4:2a:a3:e3:70:00:12:9e:c7:2a:70:59:
41:92:99:ac:24:fc:64:d2:69:f2:c9:01:ef:61:db:55:01:93:
94:59:a4:d3:e4:c9:f6:5c:e2:a3:a5:4c:81:09:88:b7:ef:ba:
e5:30:8a:bc:2d:e0:db:04:b9:0b:a3:d1:54:74:27:ae:ba:d0:
1c:03:4c:a6:4b:83:b3:0d:8c:a2:4a:7e:5c:5a:3a:07:9d:ee:
ee:b6:dc:b9:18:f1:10:68:f2:e9:21:46:fc:d8:21:87:7f:88:
55:e1:87:ee:0c:40:e7:6f:5f:fd:ba:2b:5e:b1:90:36:6e:85:
e5:fc:2a:1b:5f:66:50:41:10:34:d9:8f:b2:d8:85:af:e5:d3:
0b:a7:b0:76:64:12:43:2a:cd:fd:e5:2e:0e:4a:66:ae:a4:66:
11:b9:63:d0:ac:1f:49:7b:5a:e2:06:5f:28:bc:d4:34:a6:f4:
c7:d0:14:e2:1a:c8:a0:07:14:1e:a5:73:1d:b1:3e:15:89:28:
a1:a7:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:51:03 2026 by rpki-client