Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: 6YHecLJyqINuZeRL/LWKMzOj9eiDrpRNQ9bHzVkldN8=
Subject key identifier: 08:27:41:A6:F0:60:22:1D:ED:FA:E6:19:F5:21:8D:B8:C1:5F:39:B4
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 01A105B7FDB2FFCF5D25F3905CC424084C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 1124
Signing time: Sun 04 Oct 2026 07:01:46 +0000
Manifest this update: Sun 04 Oct 2026 07:01:46 +0000
Manifest next update: Mon 05 Oct 2026 07:01:46 +0000
Files and hashes: 1: BcIjFBUMP6CBeWgUBi0kiP8mMD4.roa (hash: AnrLYQrWg/R3TPt/tXnLy7bKSyCDh8qfOknLsoHKVr0=)
2: tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa (hash: LFx80Ot89ti4/nAcgN280XkSiewCdAO+iihbkS/s85Y=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: nKmWCJO/U+VHLml5hKy2xaAybxxDORK7nesniY8feBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b7:fd:b2:ff:cf:5d:25:f3:90:5c:c4:24:08:4c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Oct 4 07:01:46 2026 GMT
Not After : Oct 5 07:01:46 2026 GMT
Subject: CN=082741a6f060221dedfae619f5218db8c15f39b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ec:91:ef:78:9f:9e:ea:5b:ad:e9:ee:4b:68:
06:1c:ff:84:cf:57:83:01:c2:3b:ce:4c:60:18:32:
d1:c8:d6:90:f2:0e:e2:f0:9a:17:58:32:91:cf:21:
d9:e3:a9:44:cf:07:91:1e:13:c7:10:a4:dd:00:66:
44:68:e8:11:02:4b:49:95:82:69:5c:7c:9e:43:aa:
33:06:46:5b:a9:2e:fb:29:10:c7:ba:77:e4:61:13:
62:8b:9d:e2:98:4e:8d:02:71:42:fd:6f:a6:a1:de:
c2:b2:42:e6:84:ab:51:5c:93:d7:1c:40:a5:7b:f7:
4f:5d:b0:30:90:0f:7f:c1:6a:1e:df:4d:9c:b5:3b:
d7:7b:b2:23:a1:a5:7e:b5:fa:6b:d5:7f:2d:6b:03:
05:21:7a:f3:6c:db:e4:5b:18:59:7d:db:17:9b:ae:
45:09:52:71:cf:b2:63:2c:54:cc:fe:ae:6f:5a:11:
cd:54:67:6b:ea:3d:a2:a7:15:17:b4:dc:33:8c:56:
d1:2e:b3:57:75:e7:c3:a4:17:67:8e:a0:89:78:6d:
b7:e8:92:fe:62:c9:9a:4a:41:79:e8:26:9d:a8:9d:
14:36:ef:76:e3:42:8e:22:73:ca:c0:31:d5:6b:a0:
db:ec:a4:30:ef:2e:c6:09:29:15:85:c0:8e:c7:5c:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:27:41:A6:F0:60:22:1D:ED:FA:E6:19:F5:21:8D:B8:C1:5F:39:B4
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8e:73:41:a0:9a:3b:3a:de:38:56:d0:98:12:22:5d:bf:69:
b2:aa:57:d3:4d:31:ee:31:bc:08:c4:d6:ae:12:2b:bb:74:68:
20:e3:0c:d2:66:15:05:a9:9d:3a:97:f9:24:a5:73:e0:11:76:
cb:9a:34:53:2b:eb:76:cc:c3:d4:ce:a8:ae:be:51:06:e2:53:
d0:60:33:f2:08:12:6e:01:61:f9:b2:96:81:ad:34:70:56:bf:
a8:f0:eb:74:c9:87:77:48:fe:e3:07:ad:7d:55:a8:40:d8:be:
cb:65:16:9b:6a:e3:e9:c9:4c:0e:ea:90:93:fb:b4:5c:4f:7b:
b9:42:5f:37:05:f8:83:3f:ad:65:66:3b:8a:6d:d4:61:a1:02:
e9:4f:84:6a:f5:8c:96:f9:9e:30:81:42:92:6f:25:b9:29:de:
18:c9:ce:64:98:36:83:b6:4e:e7:ee:b1:c6:92:b1:29:80:9d:
2c:af:17:af:21:3e:67:0d:d4:3f:a7:24:b4:db:98:4f:28:db:
f6:d2:fa:21:dc:23:0e:e6:96:06:20:24:58:79:76:4a:5b:70:
1b:a4:de:af:12:ec:3a:02:a2:9e:9c:6b:eb:67:31:c9:f3:20:
da:54:dc:3a:8a:44:d5:e4:63:86:42:36:58:8b:77:e9:e0:23:
af:19:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:21:58 2026 by rpki-client