Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier: AxuYZKuUAN/uDC9T9x/uMlsNEOUW+rYEx8IbOSr6HxU=
Subject key identifier: 7B:83:1F:7C:70:A7:74:64:A0:61:C2:E1:A3:EB:89:CC:BD:2C:45:1E
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 01A1084B0847A01A7C458F28EB51029B1508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number: 08C7
Signing time: Sun 04 Oct 2026 19:01:37 +0000
Manifest this update: Sun 04 Oct 2026 19:01:37 +0000
Manifest next update: Mon 05 Oct 2026 19:01:37 +0000
Files and hashes: 1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: fg6Q+rjjRIaGTytRMpfCxSFMrkve4doC7KQd5zaPOZM=)
2: ucSPBgYBUYo8QSuoI_Y0Icy9e18.roa (hash: HWPghkFxbvF44RC0pt0Q9i6IdWhnoDgfcFXVwwuNG8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4b:08:47:a0:1a:7c:45:8f:28:eb:51:02:9b:15:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: Oct 4 19:01:37 2026 GMT
Not After : Oct 5 19:01:37 2026 GMT
Subject: CN=7b831f7c70a77464a061c2e1a3eb89ccbd2c451e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:c4:5a:68:22:25:91:f7:9b:06:0c:c4:51:
7e:5d:75:45:d5:8a:15:b8:2d:b8:e2:81:05:f9:26:
61:89:af:f9:77:d6:8b:3e:70:e8:37:27:6c:a0:ec:
b7:0c:e1:82:fc:5b:f9:5f:67:7d:eb:97:a4:d0:9f:
61:43:e2:7f:01:3b:b0:62:0f:8d:bf:5e:ea:ef:4c:
88:99:36:46:eb:a3:2a:d3:29:20:d4:e7:87:58:1a:
c9:d3:dd:e2:99:8a:cf:4a:53:d2:fd:86:34:c3:bc:
2e:a8:b8:b4:15:05:02:45:26:4a:d0:37:14:42:00:
be:7c:cc:96:49:42:11:cf:21:d3:e2:a9:9a:53:79:
27:6a:7e:ed:f9:57:0b:57:9f:8e:92:08:60:aa:3b:
0e:8e:36:35:bc:95:9f:64:4d:e0:c0:93:e7:13:21:
4d:a5:54:13:12:c1:2e:19:05:f0:fc:cc:6d:2e:3a:
2a:26:5a:e6:6d:71:62:fa:7c:fd:02:b8:89:c9:fb:
84:8a:83:0e:3b:3d:70:76:55:1d:ef:68:b8:c2:4a:
94:e9:49:c1:07:ec:bc:ca:69:5f:41:70:d0:5b:58:
68:58:93:f7:5b:97:c8:18:f5:7c:c9:e9:67:41:c6:
46:f7:d9:98:9e:00:e2:90:f1:d0:5c:c7:00:e7:88:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:83:1F:7C:70:A7:74:64:A0:61:C2:E1:A3:EB:89:CC:BD:2C:45:1E
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:13:f4:97:31:b8:1b:e7:79:88:f7:9b:b9:e0:82:71:d0:ec:
e2:6d:87:ca:90:75:ee:44:be:93:c5:a4:bd:86:2c:bd:32:be:
84:54:3a:80:1f:68:69:f5:e5:fc:a3:12:9a:18:78:3e:ec:c2:
5a:b2:ea:d3:3c:a5:50:f1:2d:b1:14:a8:b2:25:1e:d3:c7:72:
76:70:63:ec:d3:96:ea:9b:74:8b:70:30:25:96:6f:17:30:03:
60:aa:26:6c:6b:31:13:8d:03:bd:17:50:08:9c:3a:f1:35:8d:
86:3d:ff:35:6d:36:5f:64:3e:1b:54:0f:f7:b7:bb:e7:d0:80:
de:dd:20:ee:62:41:79:69:aa:0c:f1:93:10:a1:14:90:09:80:
a9:ea:88:c0:04:ae:79:12:8a:64:8c:e3:60:0b:f5:68:c3:8d:
55:96:46:e9:0f:de:37:4f:e0:c1:3e:88:c4:34:40:92:e4:e3:
94:ab:1c:02:f6:99:07:64:a4:50:07:6f:fd:85:41:c6:ba:b3:
a8:63:72:a4:31:4d:1d:c4:09:74:27:e1:01:fa:db:e1:4a:c2:
70:f1:55:6f:15:9d:1e:52:5f:61:22:68:52:25:29:57:a5:ac:
31:28:9f:9f:f0:dd:d3:04:80:8b:15:26:ce:14:98:75:01:61:
05:b3:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:19:55 2026 by rpki-client