Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
File: zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft (raw, json)
Hash identifier: L97wLatPiHPUGgVxG3n+z5/KcE++rhJtAti6x814x8o=
Subject key identifier: 3E:72:AB:C1:E8:3A:F8:D7:27:80:47:C3:F8:38:E2:D4:C0:09:B9:95
Authority key identifier: CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
Certificate issuer: /CN=cddce12ae50e80a4534d80f786a824497b26fadb
Certificate serial: 01A10C94C6D8CC787DB44F1A32123E2334C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
Manifest number: 018B
Signing time: Mon 05 Oct 2026 15:00:39 +0000
Manifest this update: Mon 05 Oct 2026 15:00:39 +0000
Manifest next update: Tue 06 Oct 2026 15:00:39 +0000
Files and hashes: 1: pYYR9UI_sLtKcyNmvvaeAyGho10.roa (hash: Visrk6MwePbwviSVCYu3l4j6eSQ3jEUFOOu9154zYk0=)
2: zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl (hash: rOEHUV5B19IwgBwHvBScqsUW+GmlRkVl+NQW1hQJG+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:94:c6:d8:cc:78:7d:b4:4f:1a:32:12:3e:23:34:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddce12ae50e80a4534d80f786a824497b26fadb
Validity
Not Before: Oct 5 15:00:39 2026 GMT
Not After : Oct 6 15:00:39 2026 GMT
Subject: CN=3e72abc1e83af8d7278047c3f838e2d4c009b995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5c:7d:8c:5b:ec:21:ca:de:87:10:7b:47:14:
0b:ec:39:c0:37:42:b3:e3:39:83:b7:9c:93:76:42:
86:1b:49:53:d1:86:d4:57:46:2e:e3:02:ae:bf:0c:
3d:b2:05:99:9a:d5:66:c8:d1:60:84:6e:2a:d7:00:
ff:76:20:c8:af:fa:ad:39:dc:0b:3c:b2:c7:d1:5b:
eb:64:ce:c4:c8:09:2a:27:eb:8e:e0:54:44:2f:12:
64:4a:e4:57:a0:72:cf:a1:9c:cc:6d:2a:8f:fb:90:
05:9a:53:a7:7a:c0:bd:2f:88:fa:4f:d7:8c:1a:16:
bf:af:76:5b:1b:6d:48:9a:9c:19:52:c9:f0:4f:ba:
22:5a:5d:d4:f6:f3:cd:75:9e:34:cb:67:83:8e:c5:
e8:a7:32:e0:b6:2f:c0:59:9d:be:1f:16:a1:f9:48:
ee:b9:01:bf:b6:9d:09:fa:b3:f8:d3:bd:2f:de:7f:
db:6b:c6:45:f8:b7:bd:5f:53:13:38:41:76:c9:69:
42:0a:36:85:40:bb:cb:70:8f:22:76:1a:d4:19:bc:
d2:b1:d4:4c:5f:e1:4e:c1:46:d4:23:a7:ab:31:fc:
68:88:65:43:6c:38:5a:f4:e7:b9:d4:49:56:75:f5:
49:8d:b7:75:6d:87:8d:c3:37:5f:43:ad:d0:d6:77:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:72:AB:C1:E8:3A:F8:D7:27:80:47:C3:F8:38:E2:D4:C0:09:B9:95
X509v3 Authority Key Identifier:
keyid:CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:04:1c:5d:83:fd:fc:15:6f:ad:b5:3d:33:38:2d:96:7f:92:
c9:ac:4b:f3:a3:9c:7e:72:c0:fd:8f:91:6e:36:b4:c0:d0:79:
07:c4:18:5f:32:f2:f2:8c:ae:7c:7b:e1:97:2c:89:0a:94:75:
82:ba:bf:17:4f:4a:ca:a0:e7:98:13:88:e6:01:b5:ad:61:f7:
fa:d7:89:4e:3b:7a:7c:d5:28:a6:b3:5b:63:19:e0:77:99:30:
09:bc:6f:45:1b:cd:95:1d:8f:91:7e:b5:9a:18:b3:b0:3f:68:
fb:72:0e:d0:5b:4f:57:20:cd:68:87:20:4a:ca:94:7b:3f:e1:
ae:2e:ec:43:e5:4f:2a:31:c8:fd:f7:47:22:94:68:2b:74:44:
92:bc:6e:65:43:96:2b:20:d3:7e:c2:21:0e:4e:17:96:c3:45:
e2:62:99:1e:66:a4:d3:52:8f:13:61:7b:a2:eb:e3:4a:4c:13:
bb:4f:7e:bb:a9:1e:34:05:39:4c:d8:1b:6d:61:ea:b4:1a:50:
98:2d:18:68:53:c0:d5:c6:2d:72:5a:5b:bd:c4:0a:53:d9:c0:
f6:d1:fc:7a:71:e9:4f:c1:bb:ff:d5:5e:dd:26:f1:79:47:1a:
83:7c:1e:9b:f0:9c:5b:4c:3b:77:84:7c:24:d2:34:12:e6:cb:
8c:2a:69:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:06:58 2026 by rpki-client