Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
File: zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft (raw, json)
Hash identifier: oyGeYocU3wujitdBUByExcISAd4lfpKIk3HO75sgYpw=
Subject key identifier: 65:92:58:8B:E7:3D:93:00:98:C7:08:96:1F:2A:CA:E6:AD:EE:69:90
Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84
Certificate serial: 01A0D9F18D4411692CBAA309F8ACF1E2EBCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
Manifest number: 1A0A
Signing time: Fri 25 Sep 2026 19:01:21 +0000
Manifest this update: Fri 25 Sep 2026 19:01:21 +0000
Manifest next update: Sat 26 Sep 2026 19:01:21 +0000
Files and hashes: 1: nWemIk_PUFibWyxsMCHuSPNqyxE.roa (hash: LfDaK0qO1xTJjSEUv9R58HxO4b8gyazqBrXpwSZbnWE=)
2: zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl (hash: TMd0WgAsGFkOHpx+TOyM1UPcFHPqcQdk0RoWqzXb7mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:8d:44:11:69:2c:ba:a3:09:f8:ac:f1:e2:eb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8df88054060df685bba9739123e8342d479e84
Validity
Not Before: Sep 25 19:01:21 2026 GMT
Not After : Sep 26 19:01:21 2026 GMT
Subject: CN=6592588be73d930098c708961f2acae6adee6990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:a7:55:ca:52:6c:7d:ae:9b:0e:50:a0:bb:
0a:10:7d:2c:87:ac:e6:2b:5d:7b:a8:0d:1e:a6:a9:
7d:c9:bc:e5:34:e3:84:b8:f5:55:c3:eb:0a:f4:21:
e0:c8:45:35:76:77:a2:ee:26:7a:37:89:ac:aa:68:
29:3e:a4:da:60:5a:4f:6c:8b:25:d8:d6:e6:bb:ef:
5c:db:c2:cf:95:c4:c5:76:79:25:d9:14:8d:c7:08:
ec:7d:bf:10:2c:d9:c4:93:32:85:1a:6b:e2:59:91:
c8:c7:db:df:c5:64:c7:b2:cf:a6:89:28:6d:f7:bb:
0e:98:09:07:d9:9d:91:cb:3c:9a:6e:d8:98:0a:af:
67:6c:c0:e8:73:1a:6c:7a:e5:5c:8c:25:b7:6b:92:
ec:61:ce:da:c0:93:9f:a4:e1:f1:16:7e:07:66:32:
bc:36:19:e3:36:82:26:bb:32:9c:7a:db:89:98:d1:
b4:19:a6:8e:5e:01:08:1d:58:c5:fd:bf:04:08:40:
2b:36:b2:e1:04:5f:a2:db:d4:12:6d:63:47:89:62:
a0:6f:14:4c:98:d6:e7:53:e7:fb:5a:36:fa:70:d9:
20:20:4e:cc:a4:40:20:26:0e:72:75:e8:35:f4:d7:
b3:bd:f0:9f:bb:32:78:99:c0:07:8a:86:27:2e:01:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:58:8B:E7:3D:93:00:98:C7:08:96:1F:2A:CA:E6:AD:EE:69:90
X509v3 Authority Key Identifier:
keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ed:26:90:7c:59:a0:c4:f9:05:51:d3:f3:f8:84:63:13:99:
62:dd:69:24:f5:e7:b8:47:e6:bc:76:8c:09:9a:6c:9f:f0:5f:
f1:db:d3:cb:11:20:a4:91:4b:d2:45:19:c6:75:62:b9:9b:bc:
76:f8:ca:89:88:aa:3e:48:0d:9c:ff:f7:b7:01:64:f8:13:a2:
01:bd:03:b8:1f:bb:cf:93:3e:6f:0a:65:d3:91:2c:76:72:59:
04:6a:67:95:1d:bf:eb:ea:d4:88:02:3f:85:de:02:f3:1a:59:
e1:55:c5:5b:99:cc:42:b7:e2:a2:33:eb:4d:9b:85:ff:d6:4e:
28:0e:23:01:8e:50:75:1f:3c:c0:c1:d6:fc:aa:b6:72:20:dc:
e0:b3:d4:ad:31:00:a8:eb:24:07:6b:0a:4b:74:c5:b5:2c:fb:
58:0d:a7:ef:77:2f:4d:e2:b0:19:a6:e5:97:cc:da:9c:f9:44:
f3:ba:e6:95:7b:96:ae:e4:65:ca:df:35:5f:6c:3e:cf:f4:e3:
76:0e:18:e3:3b:da:e0:2b:6d:a6:c1:1e:c7:c2:64:c6:72:ef:
3d:a2:37:0e:81:f5:fc:6a:88:f8:86:06:c4:89:80:52:75:ac:
5c:bb:ee:1a:84:30:53:11:cc:25:3c:2b:f5:3e:f7:42:8c:a6:
b0:d7:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:08:53 2026 by rpki-client