Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: n0nO9StN0nhqO7aObFdEb4PtTKxjzAJl/sYba0vPFmU=
Subject key identifier: 86:3F:D4:99:48:4E:13:39:B2:DD:A3:B4:FF:4A:A9:4F:44:58:9F:3D
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 01A0D3EF4D98D40AA6F0FA63FCDB116C11B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1A7D
Signing time: Thu 24 Sep 2026 15:01:10 +0000
Manifest this update: Thu 24 Sep 2026 15:01:10 +0000
Manifest next update: Fri 25 Sep 2026 15:01:10 +0000
Files and hashes: 1: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (hash: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU=)
2: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: BYWqzA9a05yFibe5Qu0E/umoWV+3jrtz4ms/2pa5WUM=)
3: f56SXyzVaFxPipkSbWjQspBnG6k.asa (hash: kTkK/KuPdlPU1v4Iqn9nm0PLfpF6FLDnJnaGt4nEmLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:4d:98:d4:0a:a6:f0:fa:63:fc:db:11:6c:11:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Sep 24 15:01:10 2026 GMT
Not After : Sep 25 15:01:10 2026 GMT
Subject: CN=863fd499484e1339b2dda3b4ff4aa94f44589f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:b1:26:9a:35:c1:b6:b4:32:5c:84:32:0e:
53:a4:dc:7f:bf:27:30:73:b0:0f:b2:e1:29:9c:e6:
62:fc:15:8b:6a:da:e9:5d:55:f5:a9:c8:7f:ce:a2:
d2:d0:5a:7f:72:db:a7:41:c7:d2:50:44:7e:70:fe:
1b:e0:b1:69:0f:df:aa:f7:37:5e:c1:ae:51:47:aa:
04:50:1b:c7:7e:ad:45:96:dd:d3:39:7e:99:19:5c:
e1:6b:72:b1:96:f3:29:b0:73:49:54:ae:93:99:35:
3d:07:3a:2a:b4:80:53:88:71:4b:e2:44:4c:05:af:
9d:88:3e:5a:e1:e2:12:5c:92:ce:e1:fd:c1:9d:46:
e3:57:40:fd:54:15:58:7a:f1:89:c2:7e:5a:ff:8e:
b3:b0:c0:90:5f:4e:e0:97:5f:44:66:b9:65:17:5e:
67:f8:2e:7a:c7:5d:b8:c2:7d:25:91:84:2d:df:9a:
e8:3b:d4:d2:1a:0e:90:45:f3:72:35:99:22:3c:fa:
7f:bb:62:30:f0:36:a8:e3:68:f6:f2:cc:10:0f:02:
73:47:dd:81:f7:c1:92:fa:fc:f9:34:0c:1c:5a:d1:
30:06:f4:26:b1:b7:d5:d9:06:7a:6d:2e:f9:85:44:
6d:59:72:54:34:ce:df:5c:ee:53:9d:47:60:43:1f:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3F:D4:99:48:4E:13:39:B2:DD:A3:B4:FF:4A:A9:4F:44:58:9F:3D
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:98:6b:13:e7:6a:cd:0a:a4:e3:39:be:3a:4a:33:85:67:eb:
38:ef:14:18:14:9f:ae:9e:74:0b:64:f3:23:ae:75:39:fa:9b:
4e:c2:79:d1:f0:0f:73:da:8a:ce:19:21:25:5f:cb:30:88:73:
61:38:ca:43:b1:91:74:70:0e:32:0e:65:12:c5:7a:1f:4b:55:
27:a7:2c:ef:d9:a9:03:8b:e7:56:97:ed:ad:3a:ea:bf:1b:18:
d5:b0:ec:2b:59:6b:59:34:69:12:a6:73:aa:26:67:81:7c:3e:
e6:b0:b1:24:6c:71:35:45:92:2f:f9:27:b3:58:39:71:44:ff:
32:fe:f3:dc:ac:50:d7:db:33:dd:1f:5b:e6:42:5c:81:05:2a:
85:37:85:89:06:22:d0:4a:2d:47:6f:0d:0c:96:d3:ab:a6:b5:
13:86:8e:73:54:45:f0:83:86:89:4e:ad:ff:46:45:b5:68:7d:
ce:56:7c:80:8b:d8:32:85:a6:9e:6d:c8:ee:7a:f8:f3:78:a0:
ea:6f:2a:f2:ae:c3:e1:c1:9b:c4:ff:81:d2:ec:49:e1:46:c7:
1b:25:69:ac:aa:a4:31:bb:47:e5:32:4a:fd:19:34:12:2f:96:
83:72:c7:22:09:66:06:ea:39:d6:7f:af:0c:3d:f7:a6:8d:b4:
5a:71:02:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:05:21 2026 by rpki-client