Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
File: z3gtKHK556EKkaJ_MHAg2pSESCc.mft (raw, json)
Hash identifier: cylA7KN0MsXQ2fhmVxjIHqKb8KQp4XTTJUhbssnE8pM=
Subject key identifier: 9A:FB:D0:76:6D:E6:20:A9:72:A6:19:55:47:7F:EC:FA:29:7A:E8:AC
Authority key identifier: CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
Certificate issuer: /CN=cf782d2872b9e7a10a91a27f307020da94844827
Certificate serial: 01A0DE3C604147262D2AE79300F3D7C8ACD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
Manifest number: CB
Signing time: Sat 26 Sep 2026 15:01:33 +0000
Manifest this update: Sat 26 Sep 2026 15:01:33 +0000
Manifest next update: Sun 27 Sep 2026 15:01:33 +0000
Files and hashes: 1: e1IhMKeMisuXEHcAjWQVgSjjfD0.roa (hash: oQ/Qfz2KLZdeJN7zojygq7vM4Um6kObVX4+hO49cwrc=)
2: z3gtKHK556EKkaJ_MHAg2pSESCc.crl (hash: sExKvuG8BON5DtP8rUhrK6XlHhLNT/lzSE7l9pRhQQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3c:60:41:47:26:2d:2a:e7:93:00:f3:d7:c8:ac:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf782d2872b9e7a10a91a27f307020da94844827
Validity
Not Before: Sep 26 15:01:33 2026 GMT
Not After : Sep 27 15:01:33 2026 GMT
Subject: CN=9afbd0766de620a972a61955477fecfa297ae8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:4e:8e:46:ea:e7:61:ac:55:c4:9a:03:d2:
d8:25:53:3c:05:48:f9:ad:8a:6e:56:53:83:c1:99:
79:fe:cf:8a:43:c7:ce:f6:2d:c7:04:7d:c5:da:dc:
af:ff:fe:4e:dc:12:a1:22:b1:c1:42:20:4d:d0:3c:
55:51:57:5f:70:78:e5:c0:73:7e:51:60:97:c4:a2:
b9:52:8a:5b:33:6f:c4:f7:a7:a5:5f:58:d8:1d:2f:
55:be:ad:1b:c5:23:13:82:87:62:a0:2c:cf:27:3a:
c8:85:fa:cd:f9:45:60:67:b8:b6:e7:c8:1b:71:3e:
3f:55:a0:6c:5d:43:32:f9:34:8f:ca:23:eb:b0:82:
c5:11:f7:8f:2c:ba:14:ea:18:fc:2d:b5:92:27:35:
c2:d9:7f:59:8c:63:8c:ef:25:64:03:3d:3e:6f:df:
44:85:d4:10:e7:ac:71:e7:b3:bc:89:a3:93:7e:a3:
f8:b3:13:51:f5:aa:6d:3a:06:7b:6b:ba:54:cc:8a:
61:e9:c5:9b:b5:93:d6:ae:66:24:7c:65:00:f7:4f:
2f:f8:e5:75:13:55:a7:23:30:b8:f2:2d:1e:35:ed:
23:52:11:54:a9:2f:a7:e8:31:9d:6b:b4:36:8e:a2:
dd:e1:82:0a:a3:9e:b4:98:a8:ad:84:27:a8:95:ca:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:D0:76:6D:E6:20:A9:72:A6:19:55:47:7F:EC:FA:29:7A:E8:AC
X509v3 Authority Key Identifier:
keyid:CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a0:b2:6c:a7:22:ce:46:3d:00:50:cc:94:3a:92:0e:9b:1d:
f6:4d:d4:b9:3e:0c:a8:0c:e2:78:94:d9:7e:86:12:9f:24:bf:
95:f9:16:82:a0:ef:a8:65:68:a8:1d:b5:6e:c0:64:55:c0:8d:
a2:82:ca:2f:0e:22:2d:ad:a0:53:c6:e3:44:e5:4a:9a:d7:81:
4e:f7:6f:53:48:a1:f7:5b:34:a1:df:2d:c5:c7:99:ad:60:c3:
22:52:a2:38:c4:7b:57:c6:70:0c:f7:1b:fc:1f:c1:ca:66:25:
c3:75:41:4c:54:af:5e:d7:c7:4b:3e:b0:1d:8c:53:98:28:a1:
a8:91:34:b7:b8:dd:a3:f6:6a:39:36:86:7f:39:40:d9:60:f0:
b2:bd:3b:84:88:55:16:09:56:67:50:44:14:6b:62:ca:0a:e5:
2d:fa:05:60:0a:cd:a9:4b:4d:30:78:20:fd:70:08:3a:dc:d2:
af:02:e4:87:67:13:13:ca:cc:db:83:13:c4:92:3b:8b:63:65:
ed:da:1d:23:d3:54:0d:b2:a9:d0:36:0c:22:ed:b0:55:eb:e4:
41:ec:d7:59:f3:35:60:91:a9:95:0c:ea:69:fb:d7:4c:e8:58:
75:b4:59:d6:e4:62:98:01:b7:0a:5e:13:42:aa:f2:23:e5:74:
40:f9:9b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:44:55 2026 by rpki-client