Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: nLJFkiRtGoS3eL+BLr7KmA5M7K8BzRVbO5d4flArNjg=
Subject key identifier: C9:42:0D:2A:C7:9F:23:D6:DA:DE:4D:DA:6E:5C:65:B9:BE:A0:5F:BF
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 01A0E10722EE4D635B3E7F3C5A8F96CDCD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 1111
Signing time: Sun 27 Sep 2026 04:02:16 +0000
Manifest this update: Sun 27 Sep 2026 04:02:16 +0000
Manifest next update: Mon 28 Sep 2026 04:02:16 +0000
Files and hashes: 1: BcIjFBUMP6CBeWgUBi0kiP8mMD4.roa (hash: AnrLYQrWg/R3TPt/tXnLy7bKSyCDh8qfOknLsoHKVr0=)
2: tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa (hash: LFx80Ot89ti4/nAcgN280XkSiewCdAO+iihbkS/s85Y=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: gjJ9oEemlFvvjmq6tn8LG54tA2l6TpTnXykCLk6Rlqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:22:ee:4d:63:5b:3e:7f:3c:5a:8f:96:cd:cd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Sep 27 04:02:16 2026 GMT
Not After : Sep 28 04:02:16 2026 GMT
Subject: CN=c9420d2ac79f23d6dade4dda6e5c65b9bea05fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:f5:b2:c5:74:6f:d5:3c:f7:81:e3:26:2a:
a8:4e:54:7d:cb:27:9b:95:39:81:40:71:c5:20:0a:
c3:c3:45:01:e7:7f:0d:ba:b0:ec:35:6a:81:f3:3f:
ed:ed:7d:76:b7:6b:e1:f8:c9:78:c2:43:a8:bc:10:
68:f4:34:8f:e8:52:19:5f:c9:f3:2e:7e:2e:76:89:
ac:41:fa:92:60:38:20:15:a3:3f:35:90:c2:dd:90:
cf:e6:09:5a:ba:ed:2b:97:1b:ad:a2:fd:86:8d:55:
32:ff:eb:dc:b4:83:bd:4e:e9:12:7e:c3:f7:a9:10:
36:d4:34:42:b5:d7:b2:ae:16:df:bb:08:cf:ae:15:
3d:ad:94:5b:97:65:37:b4:50:4a:36:cf:47:55:0c:
e1:dd:c3:68:4d:02:8d:c1:ba:f4:ba:4c:57:60:3d:
6f:46:c7:46:15:9f:aa:c5:03:3f:81:1f:c3:29:60:
60:6b:32:4a:0f:ea:85:13:e3:c5:87:71:2f:a0:45:
24:97:c0:47:25:95:bf:e7:7a:3c:4b:3f:60:d7:3b:
c8:8b:57:84:cb:4e:44:f1:de:42:90:55:78:79:5e:
ad:07:cc:9e:be:a8:f8:2a:d9:03:ee:77:24:37:7c:
76:3a:40:43:b7:cb:00:95:29:53:c6:97:87:ea:a9:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:42:0D:2A:C7:9F:23:D6:DA:DE:4D:DA:6E:5C:65:B9:BE:A0:5F:BF
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:17:46:0b:d5:7b:dd:3f:9f:1a:be:75:6a:0d:95:4e:0f:12:
f0:d5:88:50:8b:99:a2:b7:7c:9f:03:90:5c:22:a4:eb:a2:7e:
65:ad:48:24:43:c0:dd:6d:5e:5c:ad:7c:df:0f:f8:d2:94:5b:
c7:ef:e1:2e:2e:bf:ab:e2:47:09:62:ae:7d:76:e8:eb:b9:51:
91:55:e7:1c:66:70:33:e3:56:07:e8:d1:13:b3:b9:8d:fa:19:
17:51:44:34:11:41:89:03:c3:e4:7f:7e:c6:44:a5:bb:2b:be:
eb:47:83:8e:09:49:02:f3:d9:21:06:5c:f6:05:c5:0f:3e:22:
ac:72:c9:17:74:44:de:de:43:c6:15:f0:17:59:30:dc:73:6e:
00:f2:40:c8:3b:75:44:f9:9e:fb:50:15:f3:f0:8b:51:78:c3:
8d:81:82:1c:72:ad:f6:60:e8:8c:c0:a0:99:26:ee:c9:77:e0:
19:f6:8d:b1:b3:9d:d0:ea:a9:50:06:8c:c6:24:fa:4b:e7:ea:
12:2b:d3:17:e5:4f:b6:6c:2a:59:53:1d:3d:ff:78:27:61:20:
cb:7c:35:e8:65:90:11:fa:e4:3a:38:b9:31:71:42:f6:0a:e7:
96:85:8f:84:18:9c:e7:b4:ad:ea:f3:7f:4e:dc:47:bc:3c:87:
0a:6b:e4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:44:47 2026 by rpki-client