Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: yXdOlPW7YldoeY6Xs+l1uBS7ZGF5as6CyOBljzQdJZU=
Subject key identifier: FD:D0:52:BD:0E:37:DA:7B:BF:F1:9C:E0:1A:BB:0C:73:F4:5C:C3:4F
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 01A0CA469FCA0B1BFA30A0715CE9C41ED717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1A78
Signing time: Tue 22 Sep 2026 18:00:21 +0000
Manifest this update: Tue 22 Sep 2026 18:00:21 +0000
Manifest next update: Wed 23 Sep 2026 18:00:21 +0000
Files and hashes: 1: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (hash: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU=)
2: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: ZYF6iRozuk67VlmCosz41LVJqVuy5C5GC55LiKtMhfY=)
3: f56SXyzVaFxPipkSbWjQspBnG6k.asa (hash: kTkK/KuPdlPU1v4Iqn9nm0PLfpF6FLDnJnaGt4nEmLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:9f:ca:0b:1b:fa:30:a0:71:5c:e9:c4:1e:d7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Sep 22 18:00:21 2026 GMT
Not After : Sep 23 18:00:21 2026 GMT
Subject: CN=fdd052bd0e37da7bbff19ce01abb0c73f45cc34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:85:48:f2:da:fa:b7:b0:98:69:b9:4c:c4:
32:5b:e2:bd:a2:cf:b9:65:a8:d2:b8:05:fd:3a:74:
0f:e4:4c:07:e0:4d:23:e6:d5:59:a1:c4:bc:e5:b8:
c6:8c:f2:2e:9f:84:8a:a7:12:8c:37:b4:c7:ff:90:
4b:31:7e:c2:ef:e5:83:1e:62:b8:c1:d2:fc:47:20:
e4:10:72:dc:6e:e2:91:16:27:0a:0a:47:6f:e3:3b:
5e:e9:1c:9a:6e:46:0e:7d:7e:12:cf:b0:0c:30:5b:
c8:2e:72:87:3f:c5:77:5c:95:d6:77:8a:49:31:0b:
c2:42:4e:89:99:7b:40:95:50:63:e9:63:37:a1:6b:
b8:8e:9a:2a:a1:b0:2d:02:f5:92:b1:14:cd:d9:c9:
82:96:07:6a:08:47:84:4b:12:b9:2d:be:98:27:ae:
ab:34:55:26:2a:d3:7e:6c:e8:93:9a:2c:a7:a1:6f:
a6:75:6b:93:b4:50:76:ca:a6:31:ec:86:28:b1:79:
a7:94:59:cd:f8:da:10:b3:ba:66:4f:a6:c5:ca:95:
fa:f9:0a:e3:cb:5a:cd:f5:c0:84:29:cc:66:73:4d:
1b:dd:c0:28:6b:48:93:1c:26:da:06:bf:b6:ce:a2:
f0:e2:7e:eb:f7:70:09:f0:65:68:33:6d:2d:d7:f2:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D0:52:BD:0E:37:DA:7B:BF:F1:9C:E0:1A:BB:0C:73:F4:5C:C3:4F
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7c:66:63:63:01:43:21:e8:43:f2:be:96:b1:c3:79:d8:b6:
54:4f:8b:11:e0:f1:18:37:b4:34:1b:f9:30:b2:6b:de:b1:fd:
ff:2c:8e:d4:84:dc:45:e5:ca:94:59:bb:4e:21:e1:1b:f4:20:
fa:5e:ae:c5:74:b9:bc:a6:ea:29:a4:19:2f:ec:ca:94:6b:d5:
6c:c6:f9:0d:b9:55:ec:c7:8b:b0:9e:2f:04:7b:e9:fd:1e:9a:
3f:e2:7f:99:72:19:91:bf:16:8d:a5:40:3a:2a:3d:7c:8f:2a:
1f:0d:4c:9a:c2:ed:7f:d3:da:85:c1:14:c6:5c:42:d0:0e:07:
56:00:62:61:91:93:28:66:46:a8:dc:88:0f:da:fa:1b:34:d6:
a1:39:01:95:30:62:e5:b0:5f:51:0e:73:5f:99:03:68:8f:74:
f4:cf:1a:47:74:71:15:28:91:80:2c:04:95:2a:66:19:1c:54:
98:f2:b0:22:2b:63:a5:63:43:6a:68:c1:44:11:42:78:bb:66:
12:7a:26:ff:59:46:d9:39:08:dd:98:3c:9a:e7:25:aa:83:34:
8c:01:a6:f9:52:9c:d5:a0:d6:ff:d7:d2:69:ad:7c:6c:99:89:
49:1e:a4:0f:e0:78:d5:d1:ae:e5:2b:72:b1:d4:cb:1b:b0:ea:
5b:2d:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:10:58 2026 by rpki-client