Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
File: _zVCuU4Ii793ruGzOUIxUtrvXg0.mft (raw, json)
Hash identifier: B1pAAyvPP8Vzb+NX7e0E0+rppGSXFKWS99o1nYa/6xs=
Subject key identifier: DF:4F:BE:D5:4A:76:5B:87:47:96:04:25:DA:71:55:C3:F8:51:6D:8F
Authority key identifier: FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
Certificate issuer: /CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Certificate serial: 01A0D1C9135F1417EF6E61B74401C9B3B4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
Manifest number: 0179
Signing time: Thu 24 Sep 2026 05:00:10 +0000
Manifest this update: Thu 24 Sep 2026 05:00:10 +0000
Manifest next update: Fri 25 Sep 2026 05:00:10 +0000
Files and hashes: 1: LXC_nzvi4Cb7lHD4Py9XKzLtC38.roa (hash: M58JQtuK6LdfZlu8eoP3dvPBwwWOzHNzghjNI4pN5m4=)
2: _zVCuU4Ii793ruGzOUIxUtrvXg0.crl (hash: RqMeiG7NbIMlr4/PU+DD/9ISx5IhijBEPD0diG8PCzY=)
3: mGBvIwQwu2rqSEgMM78Outc8oKI.asa (hash: OAcgoQTH6aR8Gafn8lP+RELlUaY4N3e0LLrENbEm6VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:13:5f:14:17:ef:6e:61:b7:44:01:c9:b3:b4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Validity
Not Before: Sep 24 05:00:10 2026 GMT
Not After : Sep 25 05:00:10 2026 GMT
Subject: CN=df4fbed54a765b8747960425da7155c3f8516d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:1f:83:64:60:6b:14:9f:35:8a:e1:ea:92:
ad:d3:77:4e:7c:b0:75:4c:6f:79:9a:cc:fe:c5:70:
7a:cf:88:82:d4:f4:3b:44:d9:c1:45:5f:ce:b0:b8:
75:92:0e:9e:99:8d:ee:9b:eb:ff:ad:e1:56:89:15:
e2:db:0e:80:14:5f:7a:2f:9e:09:5d:e6:d2:04:f6:
70:1e:96:cd:e6:96:8e:99:d5:a1:39:2d:8e:b0:7f:
80:9d:df:3f:c0:b9:dc:1b:12:fe:fd:8c:7c:95:f9:
5c:1c:46:f8:e4:30:50:6f:fd:7a:6a:c8:3d:35:55:
3d:a4:46:12:4c:70:58:27:0a:fa:d0:a1:81:bc:42:
fa:a4:b8:00:4e:18:b6:b8:0c:d1:df:73:8e:a9:4f:
a6:bf:9b:6f:e8:4f:b5:45:d4:f7:c0:f5:19:d4:69:
12:e1:a9:9b:cd:89:fa:f4:14:33:92:3e:44:b1:a2:
46:2f:f9:eb:81:80:63:f1:50:24:0b:29:e4:24:cc:
55:80:b0:48:3a:8e:6e:1f:b3:f6:6b:14:c6:c8:7a:
97:32:1b:60:64:a0:83:71:cd:5a:c4:06:a7:c9:91:
f6:5c:74:cf:54:d4:81:1e:0c:84:74:08:39:8d:ab:
6b:6e:b8:c3:fc:ad:9d:41:f2:19:ea:00:f8:91:b7:
5c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4F:BE:D5:4A:76:5B:87:47:96:04:25:DA:71:55:C3:F8:51:6D:8F
X509v3 Authority Key Identifier:
keyid:FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c0:5c:44:a4:28:a6:c0:e3:9b:83:68:4e:b8:05:ef:52:49:
b8:21:56:20:c4:de:63:b8:08:58:68:c8:9d:db:fb:79:12:fe:
bc:15:9d:39:12:9f:02:0e:04:fd:c5:5b:a5:f4:b2:e7:1d:6f:
58:2d:b9:72:ee:de:1c:fe:fb:7d:15:f8:15:7d:6d:82:c1:2b:
b1:ad:c3:d4:3e:91:18:d6:f3:8c:03:c6:81:22:a0:12:26:fe:
78:fa:84:5b:ee:b6:37:e3:ca:dd:b4:39:bc:73:eb:e4:b6:5a:
32:bc:a7:a3:68:9f:de:03:3c:66:91:1d:f0:ec:84:a1:71:d1:
33:63:d9:0e:d7:32:47:9b:8f:c4:52:8a:bd:11:bf:c2:ab:4d:
99:87:c0:b9:76:4c:8e:16:1e:d1:88:8e:d8:fc:24:40:e6:87:
91:e0:11:fe:7d:22:c6:37:62:1b:bb:3b:75:f3:29:ae:b0:9c:
2d:c7:75:2c:b9:6e:e2:f4:07:c7:30:95:aa:a2:cc:d0:25:4b:
f0:6b:93:94:1f:50:8f:9f:75:80:81:9f:8e:90:a9:4a:0e:61:
f9:52:71:79:f2:5a:81:05:78:a4:3f:5c:d1:4b:04:e1:e5:7c:
45:9c:4e:11:80:65:33:9f:b2:bd:6a:bb:6c:0e:6b:3f:c3:c0:
2c:d4:fb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:55:17 2026 by rpki-client