Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: 4tiOOXR2WyNDgX3pXXsjdmYV9OPupcKIHC9aiEYHqFU=
Subject key identifier: EA:03:76:26:D5:EC:41:33:3B:64:2E:5E:D7:EE:3D:E0:CD:EC:3B:07
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 01A0D493FADFEBEC69494F7A2B7FBB0133E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 18:01:02 +0000
Manifest this update: Thu 24 Sep 2026 18:01:02 +0000
Manifest next update: Fri 25 Sep 2026 18:01:02 +0000
Files and hashes: 1: 0Nhd8HDX6sg6Ga0qO0frLY4tJgo.roa (hash: SiLri2/+BqWzCqbvv2/gkd1DlEwX13aVYQvZZuSlTWA=)
2: ujsDjvc8O_UMPKpybYL3m05dxkQ.roa (hash: l2pAahFC+BLRkn5FZkCd0AQgZA8lDYBz+/BDHXLPl0o=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: aGJiHrEPUt0mttdgXdL4YU2Xjp5k95AEd80xjjRjq7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:93:fa:df:eb:ec:69:49:4f:7a:2b:7f:bb:01:33:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Sep 24 18:01:02 2026 GMT
Not After : Sep 25 18:01:02 2026 GMT
Subject: CN=ea037626d5ec41333b642e5ed7ee3de0cdec3b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a5:03:6a:34:70:87:05:68:2a:51:83:1f:8d:
72:08:e1:c2:0b:ae:a5:aa:18:ae:99:a0:77:87:ed:
79:64:7a:32:e8:5e:2d:36:8f:f7:20:f4:d7:1c:2e:
67:70:e6:ca:d1:3b:5e:6d:8c:94:43:21:1f:51:87:
e5:c4:08:97:16:04:39:20:4d:7e:45:f7:17:83:a1:
e5:1c:12:c9:dd:75:82:9e:2c:f5:42:9c:3a:bc:17:
81:a9:5a:49:cb:62:7e:5b:6b:cd:61:94:41:79:ee:
c3:df:7f:98:9b:0d:d8:c5:97:eb:a3:d0:b9:2c:4f:
7c:e1:6b:7b:35:37:e2:0e:f2:c0:5a:8e:b1:40:2b:
43:a7:87:bd:77:4c:58:fe:77:8f:75:89:2a:88:0c:
8a:07:77:22:13:66:5a:92:0e:1f:27:46:5e:8b:ac:
2a:38:b8:6e:a1:c7:70:1f:16:e8:84:a1:c5:d3:2b:
f7:41:be:0c:de:14:d4:a1:6b:a1:10:e9:44:b2:a1:
2a:60:c6:32:35:c2:2e:4c:e5:cd:93:ac:5a:f1:1a:
a2:85:5c:d1:30:51:19:03:3c:5f:af:3d:0a:03:18:
85:69:21:d5:8e:bc:54:fb:c2:a6:83:23:fe:79:15:
cd:dc:99:c0:a0:4b:f6:31:7c:45:73:0a:fd:da:db:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:03:76:26:D5:EC:41:33:3B:64:2E:5E:D7:EE:3D:E0:CD:EC:3B:07
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ea:37:53:76:03:77:a0:53:c9:09:23:34:fe:8d:5f:c6:f1:
98:a5:3f:8f:08:71:86:b4:77:21:e8:8b:24:95:76:0b:d0:1e:
62:66:73:b1:a9:eb:9a:f4:4c:e9:d5:b4:38:e4:86:32:96:a2:
a5:25:d0:62:bb:e9:53:22:96:4b:e8:7a:16:b4:eb:d5:d3:89:
21:ee:c0:28:aa:c5:ca:35:33:f9:98:13:74:60:38:ff:86:9d:
c3:19:a0:c8:16:e6:1e:51:0a:a8:91:9d:cc:74:e4:1c:b3:9e:
3d:5a:28:df:2a:ef:5c:6f:17:5b:a2:fb:91:8d:5c:97:49:f7:
04:9d:1a:79:86:6b:08:5b:49:e5:57:c2:3c:ab:8e:82:bf:1c:
44:88:23:86:d4:50:40:e1:d4:e5:88:57:a1:cf:ef:58:4a:84:
5f:f2:c3:d5:c9:ff:b8:ca:35:eb:c6:8c:73:3a:71:21:00:a1:
77:b4:d1:9b:50:0b:e3:d4:16:43:90:58:ff:6a:b8:e9:ae:25:
16:6a:aa:24:71:6b:bb:15:3c:ff:4b:5d:ff:45:da:c8:99:28:
a6:56:44:29:2b:51:b2:a4:c7:7b:5a:23:a6:4d:e8:a1:58:19:
5c:35:cd:d8:54:15:f7:d3:48:7a:a0:c3:71:20:56:69:7b:2a:
b8:7d:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:39:40 2026 by rpki-client