Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: bBsguESJglV2WCEUz1f+NTpP0EOYdy6a/HSgobzDl4A=
Subject key identifier: E0:CC:1D:C1:8F:49:DC:EE:5A:31:9C:3D:82:65:05:F8:CE:25:2E:B7
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 01A0D2003A96C671084FB24B5FEBF2871ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 0389
Signing time: Thu 24 Sep 2026 06:00:25 +0000
Manifest this update: Thu 24 Sep 2026 06:00:25 +0000
Manifest next update: Fri 25 Sep 2026 06:00:25 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: 2u/JlMp1M824xjcNrdIgh8HimJ1cgEFpl2piO5073Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:3a:96:c6:71:08:4f:b2:4b:5f:eb:f2:87:1a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Sep 24 06:00:25 2026 GMT
Not After : Sep 25 06:00:25 2026 GMT
Subject: CN=e0cc1dc18f49dcee5a319c3d826505f8ce252eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:4c:fc:2a:34:80:cc:99:29:ee:ec:ae:33:
07:c6:bb:5c:8e:b2:aa:6a:bd:77:e8:e0:82:d1:40:
79:76:f3:7d:97:86:23:7d:92:86:6a:98:8e:11:e1:
b1:e7:0b:23:c8:d7:21:cb:9e:16:70:fe:5e:d1:8e:
bb:a9:d9:d4:0a:44:a3:a8:18:df:6a:31:eb:b6:ba:
4a:94:4a:8e:b5:4a:26:10:98:73:f6:79:63:ca:5e:
21:10:f1:06:6d:37:eb:ff:e2:6f:1f:8d:35:7e:e8:
b8:a3:34:2e:d0:71:36:ae:93:46:2c:a1:e1:e8:27:
9f:fa:61:19:69:5a:92:9c:c5:cb:05:f4:21:91:fc:
ef:41:fa:cc:aa:62:89:a1:12:bc:c8:08:5c:93:d9:
f8:c1:4e:11:73:26:2c:49:ba:8c:cc:b8:16:ee:d9:
17:2d:0d:37:14:fc:e3:9f:b9:44:01:5e:d6:19:db:
a6:a1:b8:f2:2d:63:2d:8c:d9:45:c3:90:1c:86:61:
bd:84:61:2a:21:8a:d1:4d:7e:18:20:6a:fd:37:a7:
46:54:10:73:be:c6:87:bd:b7:c3:66:5e:d9:3e:d2:
f0:46:0a:66:fb:aa:4e:c3:89:ce:51:69:43:bd:09:
39:6d:d5:e6:1f:0c:63:71:0c:da:76:10:84:9b:11:
54:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CC:1D:C1:8F:49:DC:EE:5A:31:9C:3D:82:65:05:F8:CE:25:2E:B7
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b2:d5:47:2a:4d:d0:00:ea:d9:9e:1d:21:ff:b1:20:f6:ab:
2b:24:02:bd:c5:56:28:c0:00:39:dd:92:c5:6f:b7:d0:91:0a:
04:55:72:6c:b8:59:60:d5:db:8e:fb:1f:5e:69:cd:bb:9a:16:
4b:5c:df:a0:ce:d6:c4:4a:04:96:52:1b:1a:32:c2:5c:e2:b2:
f7:f6:be:6f:d5:39:87:c2:6c:e0:e5:97:dc:69:f9:92:f0:5d:
a2:3e:0f:a9:2e:4a:c5:3d:fd:c4:24:ab:09:b9:a8:d3:25:d4:
5b:a2:42:5a:c5:ce:05:a9:5f:22:e0:71:59:62:72:a9:ca:a9:
9e:3d:17:45:f0:c5:18:26:ba:d2:70:ad:3e:aa:f2:23:83:fa:
01:b8:03:a4:f0:59:6f:04:06:2c:17:85:3a:32:0c:4f:05:8f:
4e:ec:aa:1b:e4:86:7e:53:7c:76:ae:60:63:a8:9c:eb:3f:c6:
47:00:0e:b1:fc:cb:84:b7:46:f1:c6:8d:7d:88:1d:a1:13:22:
1a:74:b4:61:80:33:78:dd:d0:03:3d:9e:28:58:d2:ee:bf:33:
01:ba:6e:5c:b5:4d:e3:dd:4a:3d:28:a3:0d:eb:1a:35:f6:9a:
31:c5:f0:26:83:8b:40:b7:5d:19:34:b0:1f:35:75:13:9d:d3:
0b:a2:b8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:54:07 2026 by rpki-client