Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier: fwpmsO0RRV5e0vKoM+ezByQfvBF0RTAavH5p3nwH3dU=
Subject key identifier: 10:A6:69:36:22:B1:C2:E1:4B:02:F8:40:E5:27:64:E4:38:F1:D2:71
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 01A0D83C050EF5CEEDCC808500E9201918C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number: 1772
Signing time: Fri 25 Sep 2026 11:03:27 +0000
Manifest this update: Fri 25 Sep 2026 11:03:27 +0000
Manifest next update: Sat 26 Sep 2026 11:03:27 +0000
Files and hashes: 1: beStaP3U9BouVtR6HKL7Bht809g.roa (hash: 9C0Yz+gtWBKD86eXJ/yNK0jQEWAJqpkTW4DLxbpVN08=)
2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: TcJ/v+8zLmMr8gPLL47Ahg2cdtpLNSaEQYKnUnFvf50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:05:0e:f5:ce:ed:cc:80:85:00:e9:20:19:18:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Sep 25 11:03:27 2026 GMT
Not After : Sep 26 11:03:27 2026 GMT
Subject: CN=10a6693622b1c2e14b02f840e52764e438f1d271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:90:2e:db:79:42:32:bc:0c:cf:18:15:7c:
06:e8:0d:f0:75:54:88:7a:10:28:88:4d:21:cf:e6:
5a:f7:33:21:1d:6e:1e:fb:b4:e1:da:2d:c8:5e:92:
2a:71:80:eb:04:58:a5:54:7c:ae:b7:59:2b:ef:85:
d3:58:f8:60:6e:8f:ae:84:f7:a5:c0:a6:47:96:ed:
e5:e6:09:03:26:8d:8f:34:2d:8a:ad:28:55:6d:20:
92:50:82:da:81:8a:2f:d9:0f:16:df:81:58:f3:53:
04:66:d1:34:c6:bc:05:64:f4:66:26:57:30:a7:75:
3b:fb:98:d5:3a:bd:e8:54:47:b3:c0:8d:ee:0c:87:
25:3e:c1:60:70:e1:24:cd:be:40:16:20:ec:8e:90:
b1:3a:47:e5:21:19:fe:8b:87:0e:50:67:0b:0e:e5:
d8:d2:6d:bb:c2:2e:a5:cf:d6:8a:cb:0e:ef:8c:4c:
89:31:2f:f5:0e:fa:78:cb:c0:3e:b9:60:96:28:2e:
5a:b9:94:a9:2f:2b:4e:97:25:32:cb:21:9f:81:56:
d8:29:47:bd:e0:8f:f1:54:d3:de:b4:f0:01:cb:94:
37:32:9b:5a:d5:4b:ee:96:1e:cc:ca:32:fe:9d:93:
14:59:1b:b7:da:bf:a0:da:cb:7c:4b:6c:85:3c:5b:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A6:69:36:22:B1:C2:E1:4B:02:F8:40:E5:27:64:E4:38:F1:D2:71
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ce:b4:56:22:8b:2b:86:cf:26:94:1f:d6:fa:53:20:f7:35:
2e:23:ce:b3:d4:9f:5d:d2:45:77:9a:c2:dd:a6:1a:fa:b7:70:
4a:a0:31:63:64:a1:31:15:aa:d7:8e:4b:0b:b9:10:9a:28:80:
04:f3:90:b3:49:3b:2a:13:18:39:d4:2b:20:23:89:66:30:10:
13:3d:30:01:ee:40:f6:ae:77:28:1f:16:ad:8b:d0:2d:50:ad:
05:3b:99:c5:05:c5:38:42:88:ab:62:da:28:56:a1:06:7c:c8:
11:62:f0:65:dc:33:03:33:c2:70:a3:9b:3e:be:e4:2d:4b:89:
6d:f3:ae:85:5b:23:77:11:51:f5:87:1a:84:60:0a:82:50:5d:
e1:ba:09:bd:00:fc:0e:1c:49:24:e6:f7:7a:e6:90:0c:84:37:
b3:0b:ef:5d:76:86:68:35:26:0a:d1:12:5d:42:e0:3e:93:2e:
7f:ed:18:eb:d6:4d:2a:0f:08:08:3f:35:b0:e5:99:5c:70:94:
15:fc:14:c9:63:f4:a9:1e:74:1c:48:d6:dd:d3:de:43:ef:cb:
1c:89:91:7c:2f:bf:94:d9:fb:e4:77:57:19:c9:c3:e2:51:d7:
12:f7:92:9d:f2:61:e8:06:b8:63:fb:56:84:2f:3c:be:a5:46:
3f:f0:ba:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:13 2026 by rpki-client