Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: 40GZfqlq7HDnSxJhOhqJtYnZabpV2iiwS/rXpdUzsRk=
Subject key identifier: E4:95:1B:32:9B:75:7B:3A:CF:EE:20:D9:90:9A:9D:27:5C:AA:6B:B7
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 01A0D502B30C69DF29895A8C5234DB36F8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 0574
Signing time: Thu 24 Sep 2026 20:01:58 +0000
Manifest this update: Thu 24 Sep 2026 20:01:58 +0000
Manifest next update: Fri 25 Sep 2026 20:01:58 +0000
Files and hashes: 1: DV_1PU5sghttOAyD5Fk0auja6M4.roa (hash: vyYX2XFHKs4PfXvL2MDa+XaKNUQzIY/+9Y9TmVp9CiU=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: QIz/IyNwonu72iWKHbHhD0Wg4D7EmYDwSR5kQ21CX8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:b3:0c:69:df:29:89:5a:8c:52:34:db:36:f8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Sep 24 20:01:58 2026 GMT
Not After : Sep 25 20:01:58 2026 GMT
Subject: CN=e4951b329b757b3acfee20d9909a9d275caa6bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:2e:4a:02:b8:b9:d2:ab:97:44:a7:04:09:
3c:eb:9a:08:ae:83:f5:00:ce:2d:1e:6f:82:51:8a:
e7:56:a0:bd:ca:87:5d:01:0d:4e:77:3f:0a:34:78:
68:da:77:25:ec:56:12:1f:87:86:60:f7:60:3f:47:
f3:55:2d:67:d1:cb:50:0f:ce:f9:2d:1d:9a:05:f7:
3b:3e:5f:d7:e6:16:ab:6e:92:71:96:7d:86:99:d5:
d5:09:d1:34:85:0d:5b:ce:32:19:28:36:6b:d3:3a:
f2:2e:6f:0a:ae:cd:2c:16:1d:f6:8c:7b:99:a7:1b:
e2:59:57:50:da:04:d2:e8:f4:e0:67:d2:6c:3b:4c:
9d:0d:68:2f:1e:72:37:59:0c:c2:d6:19:0c:36:59:
86:54:75:5b:01:29:11:c6:92:3e:51:ef:a2:ee:70:
5b:1d:26:6e:d9:0b:be:47:11:97:d1:31:7d:f3:39:
36:cf:95:b3:2f:3b:97:7d:9d:32:2b:0e:9b:40:0e:
d5:d8:98:9a:5f:03:73:a9:e7:cb:0b:1c:5c:a2:2b:
5b:8d:ee:79:1e:56:2e:35:26:a3:8a:c8:48:1f:f7:
5d:73:a4:b6:2f:5a:87:1e:74:da:11:07:e5:79:43:
9c:21:c8:82:2f:c9:ec:74:2f:9c:19:81:a8:52:ef:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:95:1B:32:9B:75:7B:3A:CF:EE:20:D9:90:9A:9D:27:5C:AA:6B:B7
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:67:9f:2b:0e:8a:b5:6f:33:e6:fe:81:53:b5:9d:7d:16:22:
8f:ec:e1:f7:01:af:20:6b:51:76:60:16:86:08:20:ac:f6:b3:
19:2b:3c:fc:3e:62:90:7f:f4:57:5c:38:63:9e:26:e8:d9:d9:
67:55:d6:55:6f:cd:7d:d1:68:b2:f8:74:c2:0c:37:26:af:13:
fc:62:2f:62:7f:ac:38:62:fe:78:61:ee:1d:03:3b:f4:f4:2a:
e9:31:fe:40:c6:4f:02:c5:de:0e:f0:38:0c:18:bd:85:0c:7a:
9a:a4:57:50:04:18:59:7a:7c:cb:95:71:e9:5f:3e:ea:e6:df:
c4:4b:1d:6b:5d:32:7d:74:ac:b8:27:a0:88:86:06:22:a2:ed:
21:67:34:4b:ed:71:75:e0:8c:29:b8:e3:24:22:7e:2f:9a:48:
29:6c:db:44:f6:ee:8b:65:30:b0:63:e5:1b:d0:69:13:9b:62:
69:e0:ef:ce:f0:30:b8:d6:9a:52:c4:eb:83:ea:8f:db:be:0a:
73:5c:87:94:00:1d:42:94:ab:b4:f3:73:e2:88:50:29:b1:1a:
e3:1c:9d:c2:ad:b5:04:b7:1a:7d:e3:ab:98:d3:a6:ff:67:c0:
46:de:e3:54:fc:ae:1d:f9:86:03:f1:be:13:d3:61:56:ff:aa:
e3:4e:8b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:35:39 2026 by rpki-client