Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
File: ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json)
Hash identifier: DtO3XF49MGX60X3rNxxbikJNGtk1TOcOMaRZXpMwi68=
Subject key identifier: 0C:22:C0:D1:42:D2:25:78:F4:CF:1E:40:56:44:4D:D8:48:77:EB:B0
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 01A0D6B9B4542230300D86AEF290E830A5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 04:01:29 +0000
Manifest this update: Fri 25 Sep 2026 04:01:29 +0000
Manifest next update: Sat 26 Sep 2026 04:01:29 +0000
Files and hashes: 1: 3s8sY8JfXcq5h0JX5tklV5kK-kI.roa (hash: tUMXR+PdDpzmT4OFEkUcYoWlIAGQobO28dDLQShQPJw=)
2: ATgciNvIucjKCFQUFyNe0yS56Xs.roa (hash: ODwExdkuk2O0WB+oRGE/a1ipu8Cu3cgAGkwUAaoVX9Y=)
3: OQzv-VnaVoUaemq98kXrP_sXKa8.roa (hash: 0UtFVm4divpIKSWLm6cbL2r77Cn14CFuHmjdZonPbwc=)
4: RS2ZY1uc0JYuhYWkx4aN_m6o7qE.roa (hash: ustjYTj3tB8+/KIrC0a07UkmqBeIt1gvoyIyFDQVlds=)
5: Wg4SVphoReQnCpUyJ5-oZULRakI.roa (hash: Q8EhoBGzMhLpl/1N6VdUdhxyINS1Dda6nBjz3JP3ehw=)
6: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: u7n9qp13lW0JPJLvgh3rTTJ4VCYnV4PeCiGhVWyW0f0=)
7: brDP8rCtmy1_6zegBiE3p8TvEes.roa (hash: Z9tvowz9KVQdbieVlExnm4rsZGGsOyESicqYmRLZjd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:b4:54:22:30:30:0d:86:ae:f2:90:e8:30:a5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Sep 25 04:01:29 2026 GMT
Not After : Sep 26 04:01:29 2026 GMT
Subject: CN=0c22c0d142d22578f4cf1e4056444dd84877ebb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ec:9c:00:c4:32:22:b0:83:4f:e2:1b:00:b3:
71:48:58:ad:65:73:1a:2e:02:eb:43:0f:90:57:56:
f2:16:f1:4c:5a:40:fc:0e:5e:8a:1d:1e:98:3e:da:
a4:9a:61:4d:9f:3f:e1:5d:fe:66:13:3e:10:0f:b2:
fb:0c:60:e3:cb:1c:30:69:32:b1:40:67:b0:36:ee:
1f:9d:50:fb:4a:d3:92:0c:99:dc:d6:c1:8c:80:48:
8d:3d:17:e0:a3:92:33:01:3a:30:9d:bd:b0:31:f5:
02:71:17:1b:fb:80:28:6e:6d:9e:f7:43:b4:a1:d3:
cf:63:72:b2:b2:ce:72:ea:16:77:aa:fb:4a:f2:22:
cd:e7:77:de:bc:6b:1a:47:3c:8d:24:e5:bd:3b:f6:
3d:dc:f9:4d:fa:67:55:5a:8a:60:31:3e:1a:f0:bc:
95:ba:f6:07:0b:ee:4d:e3:72:bb:2a:8f:a2:b4:23:
9c:61:05:fc:3e:ca:92:2f:98:db:e1:c2:f6:ba:e6:
85:4c:d2:cb:68:8b:ab:e6:76:66:53:50:53:5f:27:
41:28:47:b3:09:13:32:ad:09:bd:22:ab:64:77:4d:
9e:60:85:b1:ab:5b:49:37:21:05:a5:93:95:fd:ca:
02:c0:e5:19:6c:77:c3:4f:60:27:b3:aa:68:64:26:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:C0:D1:42:D2:25:78:F4:CF:1E:40:56:44:4D:D8:48:77:EB:B0
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:f9:3a:71:f7:d9:ea:90:c2:1a:91:bf:d2:94:14:27:ec:24:
2a:c3:57:1f:d5:d7:cf:25:7e:06:45:36:04:e3:4e:76:50:c9:
39:27:a6:6f:2e:21:c3:1a:35:ed:2c:c1:90:3d:85:19:fc:98:
b6:02:bd:3c:5a:f4:a5:b9:b2:b2:d2:86:d3:18:cb:2c:e5:b9:
d8:29:f0:59:b9:37:72:de:6b:89:b3:a5:4b:55:82:0c:45:25:
83:39:97:43:4f:82:85:d2:06:48:6b:e4:b6:9c:43:02:80:51:
d4:bf:1f:d1:3e:a6:64:6c:5e:2d:3b:23:1a:49:4b:54:d4:bc:
83:d7:65:a6:60:63:f1:2d:89:fd:a3:09:11:a9:9a:86:df:1d:
bf:8d:b3:6e:52:3d:21:3d:b6:5f:50:9d:6e:bf:03:c1:8c:9b:
73:eb:0f:c2:32:53:28:6a:20:0e:18:23:79:3e:7f:ed:e8:07:
9a:5c:6a:4e:95:25:2e:8d:0f:9c:28:14:cb:c0:01:c1:bc:8b:
b7:0e:26:15:1d:2d:9a:ed:ac:8e:63:ec:57:f8:9b:a6:88:ca:
96:98:ef:9d:bd:93:6d:f4:6f:39:19:4e:36:76:82:25:3a:58:
cf:05:ae:ba:14:1a:c7:87:13:82:f4:96:3e:ce:ac:af:cf:9f:
4c:fb:86:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:56:08 2026 by rpki-client