Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: uQTZ7aA1ShfpXjecibTwYQnC6VMjSJMN7NhGEKUzshg=
Subject key identifier: 3C:54:1E:A8:20:D8:24:07:B4:70:DC:0B:63:B3:1E:5C:1B:1F:07:B7
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 01A0CF36009489114709E4FA035A893CBBE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0E7F
Signing time: Wed 23 Sep 2026 17:00:17 +0000
Manifest this update: Wed 23 Sep 2026 17:00:17 +0000
Manifest next update: Thu 24 Sep 2026 17:00:17 +0000
Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: QvtFAySU+kDK2urSdeoOF5nf/3C5X+Fj+NAYO9gfvd8=)
2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=)
3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:00:94:89:11:47:09:e4:fa:03:5a:89:3c:bb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Sep 23 17:00:17 2026 GMT
Not After : Sep 24 17:00:17 2026 GMT
Subject: CN=3c541ea820d82407b470dc0b63b31e5c1b1f07b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:31:6c:29:c5:14:66:fd:d8:d2:8e:2c:d5:c1:
24:9c:4a:31:bd:47:7d:dd:75:6a:40:d9:46:c9:37:
00:fc:6f:e9:e7:18:16:35:f7:09:22:7d:70:35:3a:
21:c2:59:ca:19:13:a4:f5:64:6e:ad:4b:24:e9:ac:
49:39:44:9b:c3:bf:ba:b5:17:3c:d5:8a:ef:5a:84:
47:06:f1:0e:0f:37:59:d3:03:35:46:20:32:2d:de:
2f:71:47:9a:b0:9b:e8:d3:11:f8:df:d5:99:23:a3:
ac:7f:3a:bc:92:40:f1:79:77:1a:bf:a2:2b:4b:02:
c4:ff:aa:4a:47:1e:14:05:4b:6e:05:21:a5:45:85:
d4:79:be:6e:a3:99:61:9c:34:31:df:10:dd:b6:f7:
08:16:21:e0:06:3b:b9:05:1f:10:cd:dc:55:7f:c2:
d8:a7:aa:f6:d0:9e:fe:86:26:f7:13:c4:c7:17:7d:
f9:9d:9d:42:a8:87:92:46:98:e3:2c:fa:96:dd:75:
b2:7a:f4:1b:8b:06:12:39:f9:fd:22:c2:7b:26:8d:
88:ab:ee:58:fc:58:6f:8f:3d:f0:10:c6:86:2b:5b:
aa:71:52:e0:5c:86:02:55:19:5a:04:9b:27:8f:16:
ff:dc:c5:24:11:21:3c:f8:84:11:dd:53:d7:8b:73:
b1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:54:1E:A8:20:D8:24:07:B4:70:DC:0B:63:B3:1E:5C:1B:1F:07:B7
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:73:47:94:47:30:4c:2d:8b:e6:d7:fc:28:80:c8:4c:c0:e1:
b1:dd:69:39:28:8c:c3:f1:e4:48:5f:b1:6c:12:cd:ae:5e:69:
21:75:46:cf:9b:be:7a:d6:2e:50:fc:e8:ca:66:e3:94:fb:c3:
05:3d:0f:58:01:d5:2c:74:5f:82:d5:04:cb:f5:38:7d:cc:95:
66:40:ce:f3:1d:f8:b3:a4:57:30:85:48:fd:48:2c:c0:e6:ec:
56:b9:c3:ca:ee:68:d3:c4:a1:d4:c7:9d:fb:70:91:59:95:b8:
36:71:9f:15:02:8d:c5:f2:1c:77:67:e4:c4:b9:b2:71:ee:e0:
2e:a6:82:ff:e6:c8:74:db:1b:cd:45:3a:ee:4d:a3:d2:69:b6:
a5:ac:62:65:ba:d9:cf:04:8a:7a:d0:5e:cc:9b:f1:70:cb:29:
1e:75:32:18:ac:fc:b7:c3:54:46:6d:ed:3c:ae:22:4c:98:62:
1e:3f:d1:ee:2d:90:b4:ae:6c:21:2e:f1:d5:6b:fb:a7:27:5c:
31:fa:ac:2a:88:ee:4d:80:77:5e:e0:62:b8:d5:eb:74:a9:b2:
c9:13:53:8a:f7:05:e3:bd:b1:f9:04:db:64:5f:aa:f1:1a:37:
5b:6c:bd:3b:82:4e:d7:ba:85:ff:8b:6c:aa:58:1e:22:0a:34:
ed:c2:6c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:49:31 2026 by rpki-client