Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File: zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier: BF8ozGSPwJ2pPh2/PQg+9N7XAO2CNQHMnLh1tMZHgI4=
Subject key identifier: B8:FE:76:40:AC:DB:2F:7C:2E:CF:DA:B0:64:C8:3A:BF:28:2C:0D:E3
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer: /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial: 01A120C0D2D960058D2A8B415264DF749A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number: 0640
Signing time: Fri 09 Oct 2026 13:01:09 +0000
Manifest this update: Fri 09 Oct 2026 13:01:09 +0000
Manifest next update: Sat 10 Oct 2026 13:01:09 +0000
Files and hashes: 1: CVwCEsbzumpXgEnKDDCCAaIDrYM.roa (hash: lxu8mh9bo97HPFI+56oJ6vzMl5ukNpSkTrJqrOGog30=)
2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: k0H4fxZwEeQsq1E7jchNQxlquZInB8fxUc7Hp0ZiFMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c0:d2:d9:60:05:8d:2a:8b:41:52:64:df:74:9a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Validity
Not Before: Oct 9 13:01:09 2026 GMT
Not After : Oct 10 13:01:09 2026 GMT
Subject: CN=b8fe7640acdb2f7c2ecfdab064c83abf282c0de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d0:4b:90:b4:dc:64:d7:f0:99:53:ac:4e:ce:
bc:24:b5:1d:15:04:d3:e9:01:a5:4d:4c:e7:e0:3e:
e1:f8:e0:18:00:29:b8:f9:e0:3a:55:8b:3f:0c:9f:
b0:76:19:79:0a:b7:22:94:1f:fb:b0:fb:52:32:b2:
2f:b3:ca:89:ee:1c:f4:c8:11:91:99:f9:ec:f1:a2:
b5:b6:c4:ec:c2:70:15:18:70:fe:5e:91:9d:b5:22:
8e:61:fd:a1:19:7c:01:cf:15:fe:a7:52:c7:a6:df:
db:17:9c:9c:07:9a:19:03:4b:d0:24:b1:7f:ba:9d:
11:b8:75:5f:56:83:76:55:8b:3e:9d:97:ac:bd:1e:
71:9a:10:77:5b:cb:86:cf:40:39:0e:d9:80:30:0b:
a5:68:0e:72:bd:e7:a2:a3:72:ed:7f:32:52:b5:c5:
67:da:ad:f7:53:2d:c3:30:d8:15:6e:01:14:2a:94:
e9:92:70:28:8d:51:52:55:2a:41:76:a0:23:da:d5:
c1:79:29:43:c5:a8:ed:6e:fa:ea:88:f3:a3:85:a0:
24:81:76:9c:4b:2f:0a:d9:96:62:21:d6:36:05:17:
99:6b:55:cd:e8:bd:ab:eb:64:66:eb:48:28:bd:dc:
47:b9:9a:2e:75:bd:8d:58:da:e8:bf:29:ce:e0:80:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FE:76:40:AC:DB:2F:7C:2E:CF:DA:B0:64:C8:3A:BF:28:2C:0D:E3
X509v3 Authority Key Identifier:
keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0d:03:99:10:65:a1:e1:1a:d2:52:d2:66:05:0c:54:e7:4f:
91:14:c1:7b:82:28:ac:f5:7c:5b:b0:a9:87:58:4f:5f:05:de:
bc:f4:d9:38:a0:09:4f:b1:87:c7:7c:8e:94:0c:41:fe:bc:6b:
64:32:d6:93:3d:cd:53:4a:03:06:6d:e0:78:4c:56:6d:16:aa:
e9:5d:58:8e:b3:24:93:e4:65:3d:00:38:5f:20:4e:e1:69:0e:
c1:ea:35:ce:c6:96:da:ae:39:65:c8:9f:a4:b7:f3:98:84:2d:
07:f6:0c:6f:0f:f4:20:64:e3:e1:e8:50:89:7c:28:c4:d2:8d:
cf:de:d3:05:01:f0:3a:56:72:5e:b7:dd:0d:21:46:14:cd:b4:
2f:b3:f8:9a:a5:60:47:30:e9:e5:4d:62:ca:88:99:dd:1a:9c:
f6:b7:20:96:bd:d4:7e:11:b7:64:cd:b8:46:f4:ee:dd:b0:32:
13:c0:4b:fc:0e:90:6b:eb:2d:fa:47:90:e3:2f:1f:d6:50:5f:
ad:fa:0d:bb:63:5e:19:bc:dd:a7:ba:79:0c:a9:fd:33:37:c9:
9d:8d:f5:6d:bb:3b:ee:06:b3:27:8a:4f:58:d4:90:f0:a2:79:
be:f9:53:1b:cf:88:b6:3b:8c:7e:0b:76:17:20:6f:23:1b:26:
a8:4f:64:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:08:35 2026 by rpki-client