Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: EZksYNN13aUIDZmQD/gb5hrSs2Ka0DnkMZwPxcqGMJA=
Subject key identifier: A6:70:98:D7:C9:66:7C:12:69:7F:9C:BC:FC:39:C2:22:A4:D6:5E:BF
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 01A104DBDBB8B4640E6FCC66568069EDE6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 1A85
Signing time: Sun 04 Oct 2026 03:01:19 +0000
Manifest this update: Sun 04 Oct 2026 03:01:19 +0000
Manifest next update: Mon 05 Oct 2026 03:01:19 +0000
Files and hashes: 1: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: ndQkZ33Fxxs0ZYmeHFflWuNzBruCG65iaH3bvZsBXvY=)
2: jq3mq-50R-JOu-sxSGPaEm55e08.roa (hash: taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:db:db:b8:b4:64:0e:6f:cc:66:56:80:69:ed:e6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Oct 4 03:01:19 2026 GMT
Not After : Oct 5 03:01:19 2026 GMT
Subject: CN=a67098d7c9667c12697f9cbcfc39c222a4d65ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:71:13:23:d7:2d:a4:e0:c3:ae:6b:26:92:
1d:5c:53:34:9e:2c:09:5c:6a:46:89:f2:76:e7:b5:
b5:ad:8a:85:4f:99:38:b7:4d:eb:18:71:bb:36:e7:
b6:e7:f1:ee:37:17:69:d3:17:74:7f:15:91:32:ed:
5f:89:25:b7:f9:53:9e:bf:91:12:9c:dd:78:1f:63:
ef:2e:87:31:c7:eb:08:e8:67:69:65:a5:3b:dc:6f:
00:df:32:82:b9:c7:da:f2:d3:0c:2f:41:21:79:83:
77:59:db:65:1f:df:2e:71:c4:8e:f5:27:da:7c:1a:
7f:f0:a3:05:1f:e5:e3:04:49:fa:f4:c9:73:b5:4a:
fa:39:1b:85:b3:cc:60:5a:83:ff:bd:ed:18:98:c0:
af:67:fa:71:cb:1f:2b:4c:a1:99:be:66:4a:1a:f9:
ca:cd:21:37:85:f1:6e:41:42:03:2b:0f:a2:97:83:
c9:57:f7:72:c4:73:e8:b1:4c:4e:7c:a7:bf:40:7f:
25:73:3e:69:43:dc:c4:56:75:10:b3:63:82:4e:6d:
88:db:4f:67:71:9c:f5:03:5f:64:b2:c3:65:22:2d:
a7:5e:9d:3f:91:33:13:4d:68:ac:b4:59:b5:d4:2e:
d9:bd:45:75:1e:96:0c:1a:8c:7f:91:1a:84:a7:59:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:70:98:D7:C9:66:7C:12:69:7F:9C:BC:FC:39:C2:22:A4:D6:5E:BF
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:11:bb:c6:ae:71:d7:c0:3d:e3:f6:68:6e:9b:a9:62:2e:76:
6b:cb:87:57:b6:ae:2e:e6:55:68:41:85:02:51:9b:46:17:e5:
0d:a4:13:0c:90:d0:f4:ca:f1:11:3d:90:d1:58:40:8b:ef:42:
da:82:ce:9c:7d:88:b7:cb:a3:94:51:55:cc:4d:54:de:bd:61:
3c:58:60:bf:9d:9d:9c:bb:2e:cc:2f:19:24:6e:17:86:e0:89:
03:f9:aa:75:2e:e1:e7:9a:79:38:32:63:dc:89:c3:19:0c:65:
1f:42:ac:1f:52:9b:b1:6c:53:63:e9:d8:c4:17:6a:5f:cb:74:
c5:32:f5:ad:3e:35:e7:e8:54:23:48:7d:20:84:2e:75:af:b5:
5a:8f:4b:47:22:99:91:89:63:a8:64:bc:ca:46:8d:bc:18:75:
c3:9f:f3:4c:43:35:e6:aa:1b:19:32:bb:0a:be:77:48:8a:d4:
85:be:20:62:49:eb:64:f4:bb:f2:23:d4:0f:39:e3:bd:cd:4a:
f6:bb:1e:3e:4e:bf:9e:2b:a3:b2:6b:ba:54:e9:cc:a2:46:28:
9e:f3:59:cd:d5:e9:84:9d:0b:2c:bd:31:c4:11:dd:16:d3:c6:
09:e3:31:78:af:ff:e2:1c:36:1a:95:ad:b5:de:33:99:4e:25:
91:61:1b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:09:28 2026 by rpki-client