Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: Udw2lC7FzGwhDuoWfnjVMgA8zdOUHD32B1fro5uVBVQ=
Subject key identifier: 40:8C:F7:95:AB:56:68:A4:7A:85:2F:7A:E4:8C:23:6C:19:10:0E:21
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 01A0DCBBA9E624B14581C435A83F335D1201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 1A07
Signing time: Sat 26 Sep 2026 08:01:21 +0000
Manifest this update: Sat 26 Sep 2026 08:01:21 +0000
Manifest next update: Sun 27 Sep 2026 08:01:21 +0000
Files and hashes: 1: mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa (hash: kpDbhBfOi3H13L7NCoXgIwXVigbDMdLQLlKaVJyFWOo=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: jwsCx/LRGqHVXdSA5GpbPiSj4hMKVf5SWG5RL4wVlFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:a9:e6:24:b1:45:81:c4:35:a8:3f:33:5d:12:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Sep 26 08:01:21 2026 GMT
Not After : Sep 27 08:01:21 2026 GMT
Subject: CN=408cf795ab5668a47a852f7ae48c236c19100e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:0d:0a:e5:bb:5d:01:2d:0a:2f:26:28:5d:
6a:fa:aa:ec:39:9e:7b:77:a9:63:db:c5:0c:bd:d6:
b1:85:bd:6f:e4:c0:32:6b:6f:4c:d1:8f:cc:df:c9:
80:01:d4:98:bc:11:db:43:3b:98:15:47:9a:c5:b4:
5c:2c:de:79:e0:d9:75:8b:22:a1:fb:9c:63:26:58:
2d:79:25:cc:ff:91:c4:b9:ec:ec:a9:c3:ee:92:b1:
ba:e3:c4:80:25:b0:17:06:b1:a3:45:37:ad:52:bd:
62:dd:b3:91:fc:55:09:e9:77:8e:13:03:86:fc:28:
0c:6b:29:8d:1f:f0:6e:cf:8c:bc:89:cf:bc:aa:70:
59:fa:3e:32:fc:81:70:8c:45:d8:f6:27:c6:96:55:
fb:eb:13:52:9d:5d:80:88:f9:75:36:b6:7d:3e:4a:
c1:fd:28:43:d7:33:c4:d5:28:ed:42:e9:b5:69:00:
ac:9f:c7:9d:75:78:d6:5a:ad:29:66:61:4f:e6:1b:
d5:d8:eb:53:76:32:27:47:bf:0b:14:2a:67:e9:7c:
73:e8:46:1c:05:a6:b5:41:8d:49:f6:bd:d6:e7:a4:
db:31:47:73:de:44:21:76:bc:ef:7a:75:91:c7:2d:
36:d8:c7:0e:d4:ae:5c:dc:d1:b9:f4:15:4c:d7:e8:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8C:F7:95:AB:56:68:A4:7A:85:2F:7A:E4:8C:23:6C:19:10:0E:21
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c2:b5:64:bb:54:2c:16:32:29:47:5b:ab:15:2b:b9:b7:dd:
a2:30:4f:9c:70:96:cc:aa:7a:c2:74:d1:c6:2a:8c:43:bf:07:
69:16:32:33:2f:c8:f8:c7:b2:99:97:6c:0c:c5:3c:af:93:13:
e3:2c:ae:bd:2b:1d:e7:ef:71:f6:f7:35:e3:fb:28:54:ce:3e:
7c:e0:78:a3:54:4e:cf:75:d9:09:fb:82:16:95:d7:88:ae:4a:
f2:06:4b:83:dd:75:5e:fb:c4:a8:3c:14:33:77:bb:75:12:a7:
f4:9e:45:f7:91:c3:e9:04:6f:d6:13:3e:2a:a8:e2:8c:2a:d4:
5c:be:68:f9:6a:7f:be:dd:26:0f:50:85:19:de:8a:27:eb:b5:
43:fa:7c:56:bd:ea:4a:c8:d2:60:f2:28:3d:f6:b6:3e:8a:f3:
92:17:91:5d:af:c2:08:ad:d0:ac:4e:e9:4a:1b:95:30:d6:81:
e1:d7:0e:e0:b1:20:88:f3:14:d5:ec:1d:9a:44:12:0e:29:19:
c4:46:2d:32:1a:f7:04:51:7a:46:d8:03:ae:d2:b1:86:16:22:
1d:6d:ab:5f:69:d8:b8:da:1d:b9:fd:d0:0d:64:7c:1d:96:31:
36:3a:f9:e3:77:b1:d8:54:3d:32:f3:45:82:ae:20:db:c5:70:
8f:72:f5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:14:29 2026 by rpki-client