Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: mukt/XRUnoyBru46SNCrJkMIEV91K2WeIgGzicoB1iE=
Subject key identifier: D0:C0:F7:51:9B:12:4B:70:A0:7E:44:05:44:D6:0B:36:29:A6:6F:8C
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 01A0D5708216FB1D8C22172F36B8EC7FD087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 1A82
Signing time: Thu 24 Sep 2026 22:01:55 +0000
Manifest this update: Thu 24 Sep 2026 22:01:55 +0000
Manifest next update: Fri 25 Sep 2026 22:01:55 +0000
Files and hashes: 1: F_Dk1EXyZalcSUrQVrmmhufc-3c.roa (hash: Bud8p3xLXlXOrM2nbGi5ghblIRWjV7KfIKq7F8d9FoQ=)
2: P8VBM2Vt78MH0hTsTsDYoN1DCwo.roa (hash: BNrt6BqKbc/fkjdmpvHEP4BZdwanUa88eWbx1Ysrn8g=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: shlaZjbroXOYf2WJDs1zuzWER7RoAX0jpQ3QbN0UpmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:82:16:fb:1d:8c:22:17:2f:36:b8:ec:7f:d0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Sep 24 22:01:55 2026 GMT
Not After : Sep 25 22:01:55 2026 GMT
Subject: CN=d0c0f7519b124b70a07e440544d60b3629a66f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:66:c7:bb:48:b2:68:95:b7:f4:88:7d:82:
2d:6a:95:48:d1:4e:e6:ae:5c:28:dd:60:de:80:ae:
a8:6c:82:fa:22:3e:fe:7f:90:5b:c9:49:47:45:55:
a8:89:90:97:db:bc:89:9b:a5:13:ba:c5:cf:82:a2:
69:03:64:0b:b4:db:99:94:fa:8d:4d:cc:46:25:a8:
93:39:f3:7b:a7:82:92:d1:c4:7c:12:41:4c:6e:c5:
d7:5a:e5:0e:89:65:22:4e:27:44:19:06:5b:5e:31:
7a:fc:89:af:cd:a7:af:29:d8:a0:3e:39:9a:99:80:
d7:b2:f2:02:72:81:6e:02:4d:0b:33:23:1e:b4:45:
49:47:08:43:a0:a9:e9:98:79:11:31:60:c2:69:05:
fb:7a:6e:1b:dc:a1:9c:2b:91:43:5d:2e:a4:ea:a3:
72:41:3c:79:da:c3:87:85:ff:a8:98:2e:50:e2:f2:
cf:e5:92:48:a6:4a:46:32:57:e8:33:3e:bd:96:d7:
77:2b:a2:ad:33:52:76:13:4d:77:8c:02:36:7d:4d:
57:16:ed:d0:0c:d4:cf:b0:3c:bb:fa:ec:29:68:ee:
0d:ce:c8:dd:3a:36:01:a1:1b:4a:be:18:86:62:fd:
88:2c:e1:53:10:b5:2e:f9:13:5f:00:51:5f:22:bd:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C0:F7:51:9B:12:4B:70:A0:7E:44:05:44:D6:0B:36:29:A6:6F:8C
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:27:e7:1d:c0:04:03:a3:9c:bf:5d:75:59:7e:5c:74:86:34:
14:5b:19:b1:52:3b:50:2f:81:1b:10:2b:82:7d:b5:73:53:64:
d4:5d:76:5b:66:d8:c0:fb:a4:bf:ca:ab:cb:14:84:2a:b1:87:
70:1f:ec:4a:26:b7:f8:cd:f3:25:c0:de:df:be:2c:3b:c4:2b:
21:41:12:5c:c7:0e:71:f9:9f:07:4e:cb:7d:58:23:06:ef:84:
a5:78:0c:99:b4:a5:e9:f6:74:49:02:c0:e2:92:f2:5b:bb:c3:
b6:61:ef:8c:e7:e0:0b:9e:47:1a:c7:b2:98:ea:10:52:ad:b4:
08:44:97:e4:42:2f:44:ae:70:21:d9:dc:de:16:ba:f1:1d:70:
a8:b3:92:16:d3:eb:33:d6:13:01:9c:2c:3b:93:93:9f:3e:cd:
51:80:e8:18:5e:da:1f:1a:25:61:ad:56:08:36:a6:64:a3:39:
aa:67:ab:78:6d:e9:5e:57:ad:d6:67:4e:bf:d3:4f:1e:3f:f8:
6a:31:a1:83:12:eb:5a:38:57:b1:c0:b6:a9:75:5e:96:58:ac:
b3:21:17:24:28:a5:96:d6:7e:c3:5e:96:52:f5:d2:4c:95:59:
60:a4:47:18:1e:b9:1c:99:e3:90:58:23:79:d0:c3:1a:b8:c4:
a7:71:e4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:17:03 2026 by rpki-client