Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File: Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier: dEfD3S4dA4zt/LP2a3VK4NdmCrbbqrlTvKxQYGwUoy4=
Subject key identifier: 06:1B:67:8E:18:B2:88:5E:E5:D1:ED:36:03:6A:F4:73:5A:11:06:09
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial: 01A124D4B5CAC61C2A70D06922585795226C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number: 0BE4
Signing time: Sat 10 Oct 2026 08:01:22 +0000
Manifest this update: Sat 10 Oct 2026 08:01:22 +0000
Manifest next update: Sun 11 Oct 2026 08:01:22 +0000
Files and hashes: 1: XxbITpOJuSZiY6H9TV5ap_4aUaY.roa (hash: GGGD2/9LfCjCuy4UA1Jhb/88EGXnxXM/rGiFG8eHBow=)
2: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: 2dneo9ODqegkaqWZvg9NfzZvQzsF6HmjToV0tSEWY9k=)
3: p9fks12tbi0sNbMzxjuMVBs4udI.asa (hash: lBgoeuQa1eOsZavDdgNQRXGDenRYK4YojoOZO+trv6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:b5:ca:c6:1c:2a:70:d0:69:22:58:57:95:22:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
Validity
Not Before: Oct 10 08:01:22 2026 GMT
Not After : Oct 11 08:01:22 2026 GMT
Subject: CN=061b678e18b2885ee5d1ed36036af4735a110609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:59:14:59:1c:57:a2:14:e6:a0:64:f2:97:03:
71:86:e1:24:04:cd:28:69:19:ee:d2:fc:65:ab:60:
b5:0b:b9:6d:a2:d0:6f:c8:48:b4:66:1d:f4:fa:2f:
d4:38:e6:60:95:41:fc:64:99:cf:11:79:a3:e1:87:
e0:b0:24:b6:dd:5a:20:57:fb:d2:f5:a4:43:44:40:
ee:87:0d:d6:a3:37:bc:fb:1f:86:a6:31:76:39:5a:
55:2c:8f:be:a6:d4:de:23:c8:bc:a5:88:59:4c:b8:
a6:c1:bc:1f:98:ac:d4:e8:1d:c4:a3:a2:3c:4a:01:
82:f4:ad:bb:0e:0c:06:75:ca:17:62:f8:48:54:1f:
ee:68:86:f4:8e:58:69:50:e3:76:ad:6b:17:56:24:
51:00:0d:fb:e3:aa:81:52:58:98:48:43:82:36:90:
f7:35:8c:93:23:f2:28:eb:c0:11:a3:76:94:72:5f:
f6:95:70:b7:06:39:2f:58:9c:62:47:d9:c5:e7:81:
f0:1d:9f:26:6e:f3:08:9d:0b:36:45:74:de:a6:44:
09:79:07:3f:67:3d:c3:9a:c7:fe:81:6a:c1:d1:4e:
44:0d:98:70:05:e4:fe:13:ee:af:09:24:c6:45:19:
cd:3b:1f:d4:91:55:b3:45:4b:53:cc:d9:45:b8:ca:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1B:67:8E:18:B2:88:5E:E5:D1:ED:36:03:6A:F4:73:5A:11:06:09
X509v3 Authority Key Identifier:
keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:56:ad:12:89:bb:b2:13:66:58:61:d2:b9:81:2a:c9:78:9e:
80:91:23:b3:4b:90:da:d9:d5:62:10:00:06:7a:de:b8:65:9e:
38:5c:00:78:f9:6a:61:7d:10:3b:a8:c4:72:e1:b4:75:83:66:
f2:d5:6c:7a:87:0e:3d:fa:14:54:ac:a6:e4:f0:f1:88:13:bb:
12:b4:78:29:fb:43:3d:33:58:53:16:dc:62:28:e9:bc:30:3e:
a4:da:f2:6f:6d:b6:d4:04:6e:1e:a9:1e:2e:28:cb:dd:a7:ea:
03:f4:2e:0e:47:f0:d7:e6:6e:69:e6:37:01:28:1f:70:e8:3d:
42:88:bd:22:84:54:94:e6:82:e5:12:ed:65:5c:10:d9:ac:3f:
0d:b1:b3:6f:02:d9:2c:8f:8f:f4:0f:63:7d:69:cf:1d:fc:bc:
fc:d7:c3:dc:5e:f0:f2:4d:11:c4:23:39:df:08:d0:9d:f2:a1:
e5:84:93:a1:2c:25:8a:65:ca:0b:12:f3:9e:63:29:dc:d1:df:
26:82:90:3a:7f:08:85:6c:fd:a1:f4:05:98:d3:ca:cb:8f:dc:
1f:43:a7:3b:9b:25:c2:7e:c4:66:6f:58:dd:14:fe:9d:95:b6:
58:38:61:ac:32:3b:81:8f:87:cb:2b:fe:ce:0c:43:3f:25:a8:
1b:bd:a2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:33:43 2026 by rpki-client