Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: 8W87e6iNxFwE/bWAOnGM0Dj88EfkmKmRIOvwIbF8isg=
Subject key identifier: FC:1F:13:B7:B3:BE:A2:D8:45:80:6D:06:A9:8B:D3:31:D0:A2:3A:04
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 01A10C27095E0EA48333E162F9AC8D2FF764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 0A0D
Signing time: Mon 05 Oct 2026 13:00:47 +0000
Manifest this update: Mon 05 Oct 2026 13:00:47 +0000
Manifest next update: Tue 06 Oct 2026 13:00:47 +0000
Files and hashes: 1: Utc_slWR8yHDk290AryGYchTlYA.roa (hash: NUCfh9s0WjqwyOFskJUWEakWr/HjDtF3kDLbwsne7Ro=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: IMeXw9h6kNbaAjIJseWMFuwtfmOVGIibboihjFiHDAc=)
3: zynEh3pPdQY3KJQVgvhOsaYxciw.roa (hash: rOMrg3wVXzNicfVb9K/t1LGxhcGrIWejZTOsjk80vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:27:09:5e:0e:a4:83:33:e1:62:f9:ac:8d:2f:f7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Oct 5 13:00:47 2026 GMT
Not After : Oct 6 13:00:47 2026 GMT
Subject: CN=fc1f13b7b3bea2d845806d06a98bd331d0a23a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4c:0f:3c:62:7b:59:06:2a:81:bf:ee:56:c4:
ea:97:a5:37:7c:8b:fa:c7:f4:a1:18:77:81:78:65:
70:c2:0d:13:43:43:7e:ef:ad:58:58:58:c3:f2:9d:
52:46:69:e1:8c:a9:a2:fc:08:d9:1a:52:ce:cc:9a:
e7:bf:34:eb:2f:ca:e9:f0:56:0c:87:ac:72:28:cf:
ad:99:e3:f2:37:44:55:15:ef:61:f9:7f:c5:8e:cf:
9c:1c:4d:be:5f:69:3a:0a:1e:e9:24:f7:b0:e3:7c:
3e:42:d6:2f:ef:2e:37:15:d3:94:11:b8:db:82:5e:
32:7c:47:03:82:1e:4a:bd:49:91:4b:28:d8:fd:be:
bb:ad:5f:9e:b4:bf:91:7b:ee:dc:62:78:ae:da:ab:
db:a8:55:bd:d2:9c:24:2c:32:a5:db:34:41:43:50:
9d:ce:75:4c:b3:cc:35:39:23:ef:4a:c3:58:35:2b:
4a:58:57:11:8a:5b:4a:22:87:30:5c:21:37:41:16:
f0:37:c9:d0:4e:eb:c2:7e:ee:0b:7b:b2:a7:d1:fb:
21:52:01:5c:04:b4:81:7b:16:4a:fe:99:9d:fd:74:
8d:39:72:3d:69:67:13:fe:25:fe:ff:b2:9e:c8:94:
55:41:4a:4e:f8:e8:b6:62:cc:8b:b6:88:bd:84:67:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1F:13:B7:B3:BE:A2:D8:45:80:6D:06:A9:8B:D3:31:D0:A2:3A:04
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:76:61:23:69:f7:f1:1f:5e:8e:65:d0:8e:ea:67:c8:f2:0b:
df:c5:06:1e:a6:f3:b8:ae:11:3c:da:f2:1a:1b:78:af:35:b8:
fc:f3:fd:2f:fa:69:dd:b3:2f:19:5c:59:37:ba:06:ef:ba:73:
8e:29:0a:2e:88:03:2b:db:f8:02:92:4a:3b:a6:78:43:47:e9:
9c:70:5b:d7:f2:b2:da:66:d1:d8:9b:cc:41:36:f5:f5:17:be:
5d:fd:a7:36:05:ef:8c:b5:12:5a:bd:d2:3a:09:04:01:27:09:
b4:c7:72:d2:e4:00:f0:3d:10:b5:cd:77:7d:aa:be:d0:29:cb:
37:0e:db:44:35:a9:79:ad:30:b5:7f:ae:8b:ec:f6:9f:f1:7c:
aa:a3:7b:f9:a8:2e:bf:5b:5b:dd:60:1b:c9:36:78:4a:d1:b8:
8a:0e:be:68:33:51:95:3f:52:c0:fd:fc:2f:04:d4:9d:e3:9c:
a7:3c:5c:3f:1b:a8:08:0e:6a:91:06:4c:81:3f:f4:1e:c0:37:
3d:3a:2b:26:84:07:c8:cc:c2:9b:9c:e5:19:61:ce:b7:64:6a:
da:5f:97:c1:f8:51:c2:ec:e2:e2:0b:82:8c:65:4b:0d:06:0a:
1c:3f:d2:74:2c:45:57:42:ac:6c:2b:e3:c3:d1:90:42:e2:97:
5b:4e:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 23:31:14 2026 by rpki-client