Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
File: zxMebPBAsKlffsLJPjJqYQh9jG8.mft (raw, json)
Hash identifier: Q/IAcYRNaC0OFpK3ORhzGQjfCGit6Up62fjxEDXLENU=
Subject key identifier: 9D:72:F0:89:78:F6:CD:BE:69:BB:B3:E0:14:FD:F1:B7:65:3A:7C:D5
Authority key identifier: CF:13:1E:6C:F0:40:B0:A9:5F:7E:C2:C9:3E:32:6A:61:08:7D:8C:6F
Certificate issuer: /CN=cf131e6cf040b0a95f7ec2c93e326a61087d8c6f
Certificate serial: 01A12CC524B5CC30B4A73573562FC0EFDDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
Manifest number: 0115
Signing time: Sun 11 Oct 2026 21:01:19 +0000
Manifest this update: Sun 11 Oct 2026 21:01:19 +0000
Manifest next update: Mon 12 Oct 2026 21:01:19 +0000
Files and hashes: 1: vuq6nmS2o2IaE2-cQCXY0v0dkjM.roa (hash: /QlR6UrnyGXIfWBFiHE7gFFLbMr1qU25LazaUkwU8DA=)
2: zxMebPBAsKlffsLJPjJqYQh9jG8.crl (hash: CQvZkVS73cwBjY7SLXMVV7IIH5MUSuy2YGq2rMTRe64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c5:24:b5:cc:30:b4:a7:35:73:56:2f:c0:ef:dd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf131e6cf040b0a95f7ec2c93e326a61087d8c6f
Validity
Not Before: Oct 11 21:01:19 2026 GMT
Not After : Oct 12 21:01:19 2026 GMT
Subject: CN=9d72f08978f6cdbe69bbb3e014fdf1b7653a7cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:74:ff:a7:cf:8c:30:d4:87:57:53:ce:40:
c0:9e:ac:d1:f6:8e:71:d6:c0:51:77:de:2e:0b:3f:
6d:34:b6:2b:e0:fa:28:96:09:42:5c:fa:15:bf:85:
e6:59:33:ce:71:08:a4:f8:19:b2:90:13:77:0c:e2:
4a:82:44:d6:40:66:7b:6f:f8:6f:ee:c1:cd:f6:be:
e7:18:49:db:50:b8:96:86:b5:31:aa:e1:38:80:45:
5c:4a:4b:d2:19:f4:47:da:97:63:53:87:ff:0d:fe:
41:cc:35:5b:e3:80:40:ea:8c:e6:51:21:af:8c:ee:
94:ef:fe:d0:8d:04:74:b8:21:70:92:23:d2:71:e7:
9f:1f:7b:a4:36:d2:af:ce:31:40:e7:b7:11:4d:f8:
8b:9a:86:3f:c4:b8:d3:93:f5:1c:a0:35:1c:43:ae:
31:6a:5e:33:30:df:b1:78:8e:f7:7f:80:c5:96:92:
70:ea:b8:a7:72:07:77:ca:24:d5:aa:bb:29:88:b6:
99:5c:b7:4f:fa:d1:81:06:df:0d:9e:b3:aa:c0:f0:
93:7c:44:10:6d:8f:38:e4:4b:7d:92:ee:f0:8e:76:
2c:63:98:e9:dd:77:31:3b:93:11:cb:c1:02:97:db:
4b:75:29:71:a5:33:bd:a4:54:cc:bd:4d:7c:51:b0:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:72:F0:89:78:F6:CD:BE:69:BB:B3:E0:14:FD:F1:B7:65:3A:7C:D5
X509v3 Authority Key Identifier:
keyid:CF:13:1E:6C:F0:40:B0:A9:5F:7E:C2:C9:3E:32:6A:61:08:7D:8C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:37:51:b9:83:be:99:2c:90:ee:3d:70:3c:2b:3a:cd:01:37:
fe:0e:bc:ab:8e:3a:85:74:85:a1:0e:fb:03:b5:d3:fc:36:d9:
33:fb:e6:47:69:aa:d3:bc:10:a5:4e:34:da:81:12:2d:17:9e:
4d:02:59:fb:16:2c:31:d0:4b:84:d6:a8:56:ce:6c:cf:45:f1:
d0:09:63:30:76:c5:f4:30:e5:c7:ce:c5:f4:3a:e7:0d:ac:5b:
ab:e2:bb:3c:3a:d2:64:6f:3f:9e:9d:09:43:33:4e:9e:4e:d5:
6c:8a:c0:14:6d:82:f9:f1:e0:8c:b5:43:bf:91:87:a6:23:63:
a4:2b:f0:ed:02:4b:f0:cf:bc:76:00:d3:6c:80:bd:f1:05:75:
b3:7a:94:33:a8:b2:cf:23:39:b9:6b:26:61:83:be:59:79:bb:
43:1d:4d:4b:70:6f:b9:21:fc:fe:e3:5d:e9:74:dc:38:41:e3:
3b:e6:a8:86:82:33:9a:3d:52:61:94:3d:93:7a:1b:75:34:b9:
24:9c:e1:a9:b7:b7:67:fd:3d:40:c6:75:a6:de:10:de:22:e0:
18:35:77:f7:42:30:51:c5:02:dc:82:22:40:a7:0b:b2:d9:6c:
9d:cf:e2:8f:98:ee:f1:f1:4c:74:60:62:f2:8d:b6:92:1e:8f:
bc:c3:b8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:56:20 2026 by rpki-client