Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
File: ZxzQcdyWC9yCmwvn40trYc-LCx4.mft (raw, json)
Hash identifier: kl6xjgQuRmkdO5/E39RzqeLuq92d6ENKBt+uRobJU3w=
Subject key identifier: CF:40:2F:D0:33:A9:D2:F3:89:5E:C3:21:52:DB:73:37:3B:12:45:3E
Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Certificate serial: 01A0E4E335FDC76A6524EF544A4207739EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
Manifest number: 0451
Signing time: Sun 27 Sep 2026 22:01:30 +0000
Manifest this update: Sun 27 Sep 2026 22:01:30 +0000
Manifest next update: Mon 28 Sep 2026 22:01:30 +0000
Files and hashes: 1: B0kj7SdwSZWmEU9GKPX-vqJAVao.roa (hash: UN4l73RmEx8CBEkdPrS/+GtzsuSkIQeGfMIfQBPpbKI=)
2: Mdx0wPKImju2r6Wn-sTkPv2XXCk.roa (hash: KkcVte1gTb6znaz/vnrVSs9UtNLYEStRQ8bGw7/kCho=)
3: ZxzQcdyWC9yCmwvn40trYc-LCx4.crl (hash: EkEmWGwP0cuwC6i70GTwKy5nfu4Mxq2YUB6ads46jo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:e3:35:fd:c7:6a:65:24:ef:54:4a:42:07:73:9e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Validity
Not Before: Sep 27 22:01:30 2026 GMT
Not After : Sep 28 22:01:30 2026 GMT
Subject: CN=cf402fd033a9d2f3895ec32152db73373b12453e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:e8:bb:71:18:59:4a:4d:8b:4c:1c:95:31:
aa:e4:e0:2d:f5:5c:fb:9e:20:90:96:e2:9a:16:e0:
78:df:c6:86:c5:3d:35:8a:d4:b5:bd:b7:f3:17:f2:
11:7a:c5:28:5e:e7:70:a4:6f:b2:22:77:37:1d:2e:
43:9f:5e:fc:25:f0:51:ed:d2:bf:25:ff:11:06:2d:
c8:6f:a8:c1:08:64:1b:f7:df:5e:29:40:e6:ca:c7:
08:9b:15:ee:7f:40:50:2e:0e:3a:ce:8c:16:92:53:
ce:14:b8:6a:fd:d5:23:9f:f5:68:2b:b4:59:3d:06:
18:9f:58:35:a3:2a:33:de:88:1c:7f:ce:bf:c0:75:
10:34:9c:e5:52:8e:a7:f7:60:29:9d:0e:2c:34:50:
7e:2b:29:37:12:24:80:c5:9d:15:32:d6:f5:1f:8e:
e1:3d:ce:67:a0:eb:9b:19:9c:ac:32:36:0d:c6:f2:
d6:c3:c1:22:28:2b:9c:64:d4:26:99:e8:43:aa:97:
2e:aa:56:09:c0:4f:6f:40:87:4c:7f:6b:f3:88:61:
2a:99:f0:9e:8d:d3:24:e5:d8:91:6e:5c:0c:fc:53:
a7:3b:78:d5:ab:4d:9f:fb:58:17:66:74:d2:3c:b6:
06:25:20:c8:bb:b7:4f:90:53:ad:84:24:17:7f:98:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:2F:D0:33:A9:D2:F3:89:5E:C3:21:52:DB:73:37:3B:12:45:3E
X509v3 Authority Key Identifier:
keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:91:69:0c:fc:6f:65:8b:31:9a:7c:5e:cb:b8:17:97:5c:3d:
0f:64:e1:0e:6b:2b:d9:8f:80:53:4a:92:f3:93:4e:40:3e:d6:
68:43:61:8a:f5:38:03:0b:22:02:0d:ac:86:2b:a3:06:6d:c8:
e8:94:cf:62:c8:e7:68:1e:a4:3b:ef:85:15:ce:b7:d0:43:b5:
ed:96:2d:12:5a:4a:d3:cc:d4:e3:38:18:c0:37:08:4a:c5:be:
bb:4e:be:b9:50:0f:c2:66:2d:17:9e:e3:25:a7:a5:3c:fa:10:
53:2e:02:df:f9:f4:09:e8:a6:a2:52:7b:74:a4:c9:14:97:a1:
b5:6c:36:de:4e:61:20:c1:2f:09:a2:ba:4f:b2:5b:80:65:c2:
4b:b6:0f:11:82:73:8a:39:80:48:d0:94:cf:3c:43:59:fa:8d:
4f:dd:7a:fa:7f:e7:a6:4d:de:f1:d1:08:88:50:64:f7:e5:78:
e5:70:60:9d:73:07:d4:44:49:85:6b:76:32:3e:2a:7c:72:36:
fc:71:f5:e5:e0:d3:c1:8c:c6:fb:9a:32:b4:85:8c:38:68:03:
3f:a4:fe:9b:41:59:45:13:fc:50:16:f0:52:c3:ae:c6:f6:76:
40:34:62:c9:7a:8f:ba:11:bf:bb:7a:04:cf:a9:37:e7:24:cf:
95:cf:95:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 02:23:11 2026 by rpki-client