Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
File: zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json)
Hash identifier: 8k17zccCE4tKEjiUlNt45kpDSYzY7h8zH/G0NsgEPI8=
Subject key identifier: 77:27:03:2A:E8:04:72:F1:F4:73:BD:46:6A:94:1D:AD:DE:F1:D4:4A
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Certificate issuer: /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial: 01A1095D3213BF6A4C930BB69B1B0853FA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
Manifest number: 0957
Signing time: Mon 05 Oct 2026 00:01:04 +0000
Manifest this update: Mon 05 Oct 2026 00:01:04 +0000
Manifest next update: Tue 06 Oct 2026 00:01:04 +0000
Files and hashes: 1: C-10eoHVV_ERuNuHp1M0fCx__Ag.roa (hash: kJJFsA3C5xKnlbqZn0ozkgC1qO7Vwfq9ha16s0RBd0k=)
2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: Fwy58wl5ExJYaA0bAZVRLxmc2cWrsSDvhX6y077X/uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:5d:32:13:bf:6a:4c:93:0b:b6:9b:1b:08:53:fa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Validity
Not Before: Oct 5 00:01:04 2026 GMT
Not After : Oct 6 00:01:04 2026 GMT
Subject: CN=7727032ae80472f1f473bd466a941daddef1d44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4e:78:a2:6a:80:aa:e8:e1:c0:5e:ec:8a:c6:
21:e9:0a:00:8c:22:aa:34:e7:5a:89:46:a3:93:7c:
8e:86:47:ce:42:cd:d5:cb:58:46:eb:83:19:2e:54:
09:54:b4:c0:2a:46:98:71:b7:01:d9:3f:e8:fd:90:
a9:b4:36:05:e7:3b:d3:d1:e8:e9:24:d9:a2:75:b1:
38:df:30:5a:14:af:91:2b:01:d6:e7:96:2f:32:55:
9f:5d:30:9d:98:97:f8:d8:4b:e8:fb:5c:00:36:ad:
dd:f0:d5:64:00:dd:e3:da:f2:ec:82:f5:8f:a2:fe:
bc:f9:ba:30:7a:26:d4:f4:57:17:03:d6:28:3e:56:
90:0c:d9:fe:5d:2c:43:91:c4:83:82:00:1b:9f:50:
35:4f:87:56:71:33:3a:9a:2a:a6:9e:15:ff:89:d7:
64:38:b4:4f:2c:f2:e0:98:de:6e:38:46:b4:c2:70:
30:71:b0:b2:7d:ff:44:60:28:8b:bf:0b:bf:93:7e:
0f:9f:7d:d4:d1:6e:df:3d:6c:ce:21:a2:53:27:9a:
a4:90:4a:07:dc:88:ea:e9:a6:54:1c:12:68:a6:dc:
34:76:d0:2c:88:f6:f4:7e:09:f6:6b:a3:c6:42:6c:
96:aa:70:e6:72:b3:9d:29:d1:2c:1d:4c:ee:78:f7:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:27:03:2A:E8:04:72:F1:F4:73:BD:46:6A:94:1D:AD:DE:F1:D4:4A
X509v3 Authority Key Identifier:
keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b1:7f:4e:5b:a5:03:a7:6d:b3:2e:a4:62:9d:3f:71:30:cf:
41:3f:f0:7e:f3:d3:80:ee:a4:34:d6:81:4a:8e:ec:67:74:0e:
31:31:c0:00:ea:f8:2e:37:f9:b4:83:31:41:dd:28:9a:2e:09:
0e:35:b0:46:cf:27:f9:fa:12:87:35:28:66:39:57:4b:b4:e7:
89:a3:27:df:65:00:99:23:cd:16:75:08:ff:59:77:b6:df:5a:
70:a6:63:33:dc:23:4b:6c:28:c0:81:6b:e4:bb:54:9c:be:b5:
12:a0:74:5c:c0:8d:c7:bc:b9:ee:a8:be:fb:4b:43:56:4c:62:
03:a8:e8:4d:f7:73:6a:ed:f7:a7:df:36:ea:38:8c:c6:96:ea:
c2:38:8b:0b:ab:44:08:74:53:2d:0a:59:0c:5e:f5:de:f3:79:
3a:94:b5:6d:1a:75:2d:78:7a:6b:e7:fb:29:f2:6b:3e:28:da:
d5:e8:07:60:73:03:06:f0:90:f5:4e:ba:36:1b:50:12:90:fb:
5c:40:8a:96:a7:ad:d0:b4:48:3f:af:24:97:e5:9e:40:1a:6a:
e5:be:96:01:0a:aa:be:24:d2:49:61:81:22:ec:aa:79:e2:1d:
c5:6a:c9:41:53:96:09:d1:92:98:a5:ce:b8:a8:1f:c0:e0:84:
be:8c:dc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:39:56 2026 by rpki-client