Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier: iQvc6qMs9ucKlfH/jwuJtsJb7tyi+HzsySXAD8LWoBU=
Subject key identifier: 72:C9:DF:55:C1:55:27:49:F3:EC:AD:FB:98:99:B4:0A:A2:DA:83:7A
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial: 01A0FFB5F016C7E3FA850D6858CF9881693B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 03:01:48 +0000
Manifest this update: Sat 03 Oct 2026 03:01:48 +0000
Manifest next update: Sun 04 Oct 2026 03:01:48 +0000
Files and hashes: 1: 1-bvTtCyxjhCFLcxNhXPNFp9zd4.roa (hash: UqrazJGk86AULwhwwPwABEyPtaaQCEyqIBdZnP4+jJA=)
2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: kQl6lV5kVHihhHQ2PpncdSf+pwQA6TdrvUqvWAspsnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:b5:f0:16:c7:e3:fa:85:0d:68:58:cf:98:81:69:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
Validity
Not Before: Oct 3 03:01:48 2026 GMT
Not After : Oct 4 03:01:48 2026 GMT
Subject: CN=72c9df55c1552749f3ecadfb9899b40aa2da837a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:56:07:2a:19:a1:d7:62:fd:61:ac:57:97:
71:27:87:9f:a3:10:94:b3:99:64:f1:40:73:70:b3:
ad:3c:28:52:ea:95:fd:01:5f:be:fd:2d:f5:d5:72:
3e:ca:fe:56:03:19:58:a4:2f:65:06:e0:7d:6b:eb:
11:a2:94:0b:a7:91:ec:33:da:a8:9d:bf:4e:31:c4:
0b:22:ef:e5:47:1f:c5:24:03:9f:1b:c0:4f:ce:2d:
68:ca:06:a8:08:fe:48:ba:21:a0:29:b5:72:21:d1:
3b:46:4a:32:1b:16:4a:d3:d5:cb:7c:33:56:47:8e:
ab:7a:c4:b5:99:75:37:bf:72:c3:48:87:d2:8d:2d:
d3:81:3b:52:f2:e0:47:76:37:fa:09:19:16:71:55:
74:74:fc:db:f5:50:24:4c:51:be:e0:e4:3e:c5:46:
2c:47:65:fe:f1:04:2c:47:c3:3b:32:79:ff:dc:46:
e6:da:fc:f1:f1:08:e2:00:b9:be:3b:a6:0a:da:50:
f0:c4:95:61:41:f7:94:58:d8:b1:52:a6:d3:93:b4:
da:eb:dd:b0:31:03:8a:ed:32:a7:4c:79:e4:08:9d:
f7:7c:24:a4:9f:97:af:39:b4:c9:ad:46:17:91:75:
c5:ba:bd:4d:5d:27:f7:26:1e:5a:f6:6d:7b:93:75:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C9:DF:55:C1:55:27:49:F3:EC:AD:FB:98:99:B4:0A:A2:DA:83:7A
X509v3 Authority Key Identifier:
keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:58:66:45:a8:44:f5:aa:41:67:62:17:46:3e:8d:d7:07:73:
8b:56:3e:f0:3a:11:d8:15:1e:f7:7d:8b:93:7d:30:c2:22:94:
6a:ef:df:27:6f:c2:f3:29:4f:11:64:24:e1:fc:9e:bf:ba:79:
b9:e9:f3:6d:40:cb:5c:ce:48:06:e4:b8:4f:4f:4c:45:63:c1:
f2:4d:66:b4:29:3f:94:50:a9:d8:46:7c:01:80:22:2c:dc:1e:
ad:3e:48:3c:c2:a7:24:e3:c0:fc:54:6c:23:8d:84:8c:87:8a:
e2:17:e9:35:af:30:46:af:9a:39:67:90:a8:a4:c1:5f:e2:77:
c2:31:3d:94:f5:ea:82:4d:f5:be:12:98:14:5b:8a:24:3a:fc:
00:ca:95:fa:ad:fe:02:c8:39:1f:1f:1a:1f:66:e2:64:a8:82:
7a:9e:d3:4d:c0:10:74:0c:35:34:74:0d:c5:76:77:0e:cf:46:
f3:c6:f4:45:a6:83:c3:1a:95:5c:2c:61:ac:0c:c0:1d:82:a6:
94:93:29:67:2a:43:50:5c:2a:5b:b9:b2:c4:49:19:f0:77:fa:
82:f8:60:04:9b:f3:c1:06:b6:5d:d9:77:74:75:02:64:0a:41:
aa:3c:3d:b6:ef:f5:b4:dd:ae:7f:7f:b6:28:a7:50:3f:43:00:
d0:af:c5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:33:18 2026 by rpki-client