Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: iyAryJwDWnFeSA/c3xAG6FDXu0qsHk9L3ovthzpQh80=
Subject key identifier: AD:54:37:87:04:FD:80:92:27:3C:DB:4B:E7:FE:39:16:1E:B5:F6:4F
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 01A0D1C99B93B71E857CD43F7D262D696695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 1475
Signing time: Thu 24 Sep 2026 05:00:45 +0000
Manifest this update: Thu 24 Sep 2026 05:00:45 +0000
Manifest next update: Fri 25 Sep 2026 05:00:45 +0000
Files and hashes: 1: 1GCrqpDvgJMXy052qbu_oSLPnFU.roa (hash: 1pHDFgiia3UUtdVh9h/Je9C2yB4ej7ArK739R/zzwOg=)
2: 3XuA-YVzPEgJjeMJ8s1Vm2HEV7M.roa (hash: L2BlNBBMkivGXWvUezO7Aw0uWHpwLq/KSkHq0trlQZE=)
3: 9_TVXot_dyIkEe9KiLsuyW2oktk.roa (hash: AY0ZbEX8AuKpfJf3mMe1LHPcHhetoh8C291fNwOvGkw=)
4: M2b0AyIxBEZE26l78yx_U6jH-HM.roa (hash: qI3z2lgsBJDNei5CDronPrCJiOhj9yjVA1Waw1BZhZw=)
5: l42LyB_1C2P-LllZFiZxTraA8VY.roa (hash: DBvrQLij/XijOP3rNHrPmHSYFZ7FdPcqe5/jQy1zmiA=)
6: s13GH00hV2jIxjzw03ezHAtEnrE.roa (hash: wwzOhbN/GMGtfE1ca6NvpkVgz3P26P0FotyIBvRPTpA=)
7: wsv3RhVPC0LRVw4Iv-_qJ-xb_MA.roa (hash: htIN8qHXgg74PxltVLjdHQI1GM5oys81YrYBTFBjHyw=)
8: zVdth24X5nqjsfHBDas52yk14is.crl (hash: cKJVZvsbQNkGaeFEA8F4lrIVIK5V9lICIQgm21AddHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:9b:93:b7:1e:85:7c:d4:3f:7d:26:2d:69:66:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Sep 24 05:00:45 2026 GMT
Not After : Sep 25 05:00:45 2026 GMT
Subject: CN=ad54378704fd8092273cdb4be7fe39161eb5f64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:aa:dc:96:22:d9:8a:77:63:af:56:e7:81:
f3:ef:8c:f7:c9:d7:39:e9:ee:c3:32:21:0e:81:d9:
79:d6:e1:8e:72:07:07:d5:85:4b:73:de:c1:21:4b:
d0:3e:45:68:c6:79:e5:d8:28:3c:0f:a4:f8:6b:2d:
c4:c5:9c:3a:db:97:8d:fd:ae:ce:90:d6:40:8e:b9:
c6:2f:4a:f7:e5:c4:eb:8a:e9:22:7a:6a:bc:b6:86:
de:2c:e2:9c:80:c0:f2:5c:8d:9a:2e:45:98:e3:0f:
43:72:09:e9:99:2c:b1:41:e9:31:47:2e:95:c3:c5:
7f:00:74:d8:2c:b0:99:7b:53:2b:31:da:c2:b4:bd:
1c:c0:08:a6:9c:13:27:7f:f8:32:68:e4:df:3f:f2:
18:13:7d:8d:29:bf:82:95:da:7e:f5:28:c0:d4:60:
c0:84:a7:52:d8:27:41:40:d5:4c:f0:07:11:24:48:
f6:5f:aa:42:b2:a0:a2:d7:64:4c:4f:36:2d:e8:a6:
8f:38:72:da:aa:7d:ee:da:59:17:34:5b:73:e5:8d:
98:da:33:e6:e1:3b:6e:d1:48:ac:f0:48:4d:f3:5e:
94:12:60:2c:a0:57:27:0c:db:bf:c4:d5:30:12:35:
38:96:d5:eb:55:33:9d:4e:0f:0c:81:b0:61:7e:93:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:54:37:87:04:FD:80:92:27:3C:DB:4B:E7:FE:39:16:1E:B5:F6:4F
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4a:8d:a1:41:29:22:4b:88:26:22:9e:f4:2c:42:5d:5f:9d:
f0:ee:d3:e7:67:f6:9c:2f:8e:c6:70:6a:6a:a7:b0:ca:fd:0e:
53:6b:11:7e:d4:a3:df:43:2b:66:ff:2b:fc:81:82:62:aa:41:
1d:38:4c:7e:6e:80:1f:a6:88:4e:54:41:c8:c2:0d:ce:2d:8f:
97:5e:62:b5:3b:b1:d3:1a:19:df:e2:71:6e:15:a1:bb:88:90:
c9:ff:af:9f:c4:29:13:f4:d3:f0:81:62:13:88:02:81:97:a6:
c1:d2:63:be:55:7f:3e:f7:9b:7e:79:9e:76:23:d1:9a:43:38:
92:a7:7e:11:c5:03:95:26:52:01:92:f4:cf:fd:e6:eb:14:e5:
fa:b2:9e:fc:0b:db:69:13:43:02:a7:ac:5f:ec:63:f8:0c:b9:
14:6c:03:d5:29:85:98:7b:40:dc:d8:48:48:f9:a1:cd:ee:15:
71:b4:b8:46:db:76:13:c7:0f:3d:5b:fe:23:e5:23:90:d0:67:
e7:d0:f9:b4:6b:1d:50:72:32:8a:df:f7:e5:54:88:1d:0d:c5:
16:26:a8:e4:34:47:8d:0a:a9:a8:3b:1f:5a:8f:ca:3f:31:12:
2e:72:b5:5a:2e:1e:53:f9:a5:4b:8b:17:a7:d2:44:07:b9:89:
b6:f0:97:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:41:38 2026 by rpki-client