Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: g3jPgrIHpXrT/pxEi62Zat8LLvFvq/+hXwMVqDHqIxY=
Subject key identifier: E7:F9:2A:9D:F1:5B:76:DD:38:34:72:A6:8C:95:04:C8:EF:BE:74:4C
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 01A0D45DA5624AD9D09C9B9DC0CA3D4716AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 02C1
Signing time: Thu 24 Sep 2026 17:01:42 +0000
Manifest this update: Thu 24 Sep 2026 17:01:42 +0000
Manifest next update: Fri 25 Sep 2026 17:01:42 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: m3t/Cvx6NPpAB8X5EAIzK8L6CWo2dibkeAILACaRAQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:a5:62:4a:d9:d0:9c:9b:9d:c0:ca:3d:47:16:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Sep 24 17:01:42 2026 GMT
Not After : Sep 25 17:01:42 2026 GMT
Subject: CN=e7f92a9df15b76dd383472a68c9504c8efbe744c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:b2:1e:9f:cb:cb:89:9f:e5:f1:bd:30:ae:
93:8c:fa:14:61:49:3c:f7:62:84:47:e3:22:ba:21:
e1:83:b1:36:53:ef:ef:73:42:65:4b:17:12:4e:97:
d8:ee:6d:cf:e8:a4:48:94:6a:cf:74:4b:99:88:be:
0b:93:93:df:24:93:52:37:f3:8e:63:40:a9:34:c4:
40:1f:2d:3d:28:4a:63:cc:4b:3c:2f:cb:56:33:81:
a2:b4:f6:19:c8:28:2c:d7:b9:2e:08:19:23:c7:1b:
44:56:a5:6c:ac:b8:c7:5f:00:3c:30:14:29:29:bb:
ad:ea:4a:2e:5b:70:ff:c4:f4:9c:a1:9b:f7:9b:ec:
6b:65:ad:98:4f:71:d1:0b:de:f1:52:1d:eb:fa:c7:
56:78:49:b1:68:39:c9:e1:ce:31:6c:00:21:ec:6f:
4c:91:ef:b4:b7:f8:37:b8:02:a4:d8:5a:16:e2:e5:
ca:a6:36:3c:4c:76:93:b1:dd:8c:49:52:bb:72:ca:
9f:ad:07:c4:2f:1f:42:23:72:cd:3c:2a:a6:07:fd:
5c:dd:8f:07:e0:75:a5:cf:69:88:4e:9f:24:f1:24:
b6:85:13:46:ae:b7:34:99:ab:51:3f:65:74:86:67:
c4:34:ab:5d:53:8e:d2:21:34:15:d1:f0:31:c2:84:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F9:2A:9D:F1:5B:76:DD:38:34:72:A6:8C:95:04:C8:EF:BE:74:4C
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0a:cd:f5:8d:1f:0d:c2:78:c0:f0:c2:05:51:bc:57:f4:15:
4f:0a:d6:2c:e9:3c:89:bc:23:42:95:00:0d:b2:05:3e:1d:ea:
3b:f6:67:bf:4d:e6:b1:87:b5:24:a5:c9:be:1a:b2:2f:bd:a9:
c4:b6:ce:e0:fe:85:da:c3:7e:71:95:f9:1d:bb:7c:a0:3e:f0:
d9:98:b9:a0:f6:3a:a8:fc:84:32:9e:34:24:48:df:69:dd:af:
1c:13:54:fa:7c:65:89:7f:ac:07:db:0a:44:ef:50:8b:6c:1e:
9c:c3:37:fe:88:97:f3:52:3d:8f:f6:3f:b2:2d:5d:0f:60:77:
7e:21:b4:13:c2:40:da:b7:0d:a6:07:79:08:24:be:15:30:1c:
0a:04:fd:6e:56:dc:45:72:7a:62:ff:cb:e1:3a:55:91:81:86:
b8:9a:00:6e:12:8c:9a:a4:e8:3b:ee:cc:72:26:bb:65:8f:e8:
55:35:5f:21:fd:36:1e:c3:e9:33:f8:87:d2:91:f0:67:91:12:
88:ad:21:36:9b:01:3a:52:3d:11:55:a0:44:57:9e:1c:44:71:
3d:10:87:90:6a:10:d2:2f:1a:bc:e2:a6:db:b3:86:9f:c9:f4:
ba:b9:ef:84:a2:91:53:2a:2b:db:60:4c:61:95:9d:06:f8:4a:
ee:5e:b9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:11:01 2026 by rpki-client