Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: pAiC0HpByCtkNm2u0U8MjS43d4T9VJWRPdhmPZlg8Os=
Subject key identifier: 50:4D:35:12:18:8E:FE:48:84:E9:80:49:93:E1:2E:56:BB:34:0B:5B
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 01A0DC4D7DA0859D5CF2EDF7DF21D5B083EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 1A04
Signing time: Sat 26 Sep 2026 06:01:00 +0000
Manifest this update: Sat 26 Sep 2026 06:01:00 +0000
Manifest next update: Sun 27 Sep 2026 06:01:00 +0000
Files and hashes: 1: _JnhSJS19JlHl9jJTexqDWYqi9A.roa (hash: SSBeQuTX3gSz2r22CXEew81x4g/DT16JBva2SQJoq3g=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: OKCukzeKJ/X4aQTTok+q/8iZTxQcgfJZns5EKw0HFGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:7d:a0:85:9d:5c:f2:ed:f7:df:21:d5:b0:83:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Sep 26 06:01:00 2026 GMT
Not After : Sep 27 06:01:00 2026 GMT
Subject: CN=504d3512188efe4884e9804993e12e56bb340b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:8b:3e:c8:35:82:45:b5:0e:1f:85:29:a8:
24:a1:81:ad:2d:1b:c3:76:ea:80:f4:4e:87:b6:a1:
47:bd:2c:22:15:6f:3a:ed:1d:1c:74:be:a1:72:d6:
5a:38:ff:27:b9:ec:5a:4a:05:77:1f:e0:49:b3:d7:
a7:f0:76:c5:73:7e:0d:da:a1:93:8e:48:c8:75:61:
cf:c8:41:02:55:cc:8d:e9:84:05:15:df:05:43:cd:
de:3c:bd:c1:3c:c2:0a:a3:4e:8b:cf:35:a6:75:47:
64:04:4c:c6:f5:09:cb:f9:c2:df:f1:f3:95:0c:d7:
58:ca:50:6b:31:e1:45:4d:75:e6:97:6e:eb:ea:c7:
46:2d:11:15:08:31:95:e1:4c:fc:2b:c2:92:f8:cc:
67:b3:d1:f3:e8:e9:7e:6c:7a:40:38:3b:25:47:97:
7f:c8:7f:3a:e0:53:77:dd:e7:a4:89:df:d0:dc:87:
1d:9b:68:f7:e6:e3:46:52:46:a7:2d:0b:d8:ac:29:
35:dd:3f:e2:bf:f5:da:ab:ba:d0:c6:7f:81:c2:30:
9c:af:3d:1b:f0:d7:8e:3d:24:e2:c6:b2:4f:a5:df:
4e:5f:c6:77:38:2a:08:9b:42:94:72:c3:5f:af:e8:
30:85:5a:b0:47:41:41:a0:16:d2:69:3f:33:15:f3:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4D:35:12:18:8E:FE:48:84:E9:80:49:93:E1:2E:56:BB:34:0B:5B
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f7:47:50:40:63:e9:79:f0:bc:11:ca:20:44:d2:e4:66:e8:
c9:6c:d0:06:d8:4c:ec:7d:fc:42:be:53:7f:63:c1:f4:0e:cc:
82:5e:f8:73:27:c0:74:18:a5:a4:42:07:69:4c:a5:bd:2e:02:
a7:6d:16:80:a6:91:3f:ba:03:b2:41:52:cc:a1:6a:27:4c:15:
7a:65:61:58:fb:90:32:b3:bf:ca:43:0e:98:46:82:4c:0d:17:
c3:2e:c5:36:2d:7e:8f:11:06:7d:ba:50:2c:78:f2:94:59:69:
e9:96:0c:c8:90:7d:1d:de:01:25:3e:fe:aa:52:51:7f:7f:0d:
44:fc:7c:e0:2b:54:56:a6:18:09:f5:be:91:6c:62:46:21:37:
90:96:d6:e2:51:24:87:d8:80:03:bd:fd:d0:72:22:23:86:f5:
24:26:eb:b4:fe:4a:52:16:2b:26:ce:3d:c3:89:c6:68:f9:0c:
f6:cc:30:b3:22:c8:7a:2a:e8:d1:ad:da:0a:8b:6a:55:27:4a:
ef:53:7d:9e:f1:6c:5c:e6:d8:ec:c9:cc:bf:52:ad:8c:13:6f:
2d:e1:25:d4:40:62:46:eb:54:0b:ba:4f:4c:94:93:9a:63:b1:
c0:12:aa:88:86:96:c3:01:00:fc:e0:e9:11:4c:b0:e8:df:9b:
3d:27:b8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:49:52 2026 by rpki-client