Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
File: zkn8E0twZULK8aHvvgNPcBG0lDY.mft (raw, json)
Hash identifier: BiQgkXqRAQE429ORc64DhY7jaB0G+P/sjtAcQkGnSdo=
Subject key identifier: 77:8B:AE:F4:FE:7E:DD:FC:47:C8:5D:18:80:A6:E7:D5:8D:B1:5B:13
Authority key identifier: CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
Certificate issuer: /CN=ce49fc134b706542caf1a1efbe034f7011b49436
Certificate serial: 01A0D6F07B6F3603C076DDF0411591D5A9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
Manifest number: 0997
Signing time: Fri 25 Sep 2026 05:01:19 +0000
Manifest this update: Fri 25 Sep 2026 05:01:19 +0000
Manifest next update: Sat 26 Sep 2026 05:01:19 +0000
Files and hashes: 1: jv18kUzHEBlDlkIHJKkxODrKqc0.roa (hash: wdFZODPpunDdGOXTc+SSGtgRA0zL9y523IFxS0/YWn0=)
2: zkn8E0twZULK8aHvvgNPcBG0lDY.crl (hash: qjpIjmp/D0lYJrTnUaamO/P+egPKLZ1Nv8lOACAb2GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:7b:6f:36:03:c0:76:dd:f0:41:15:91:d5:a9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce49fc134b706542caf1a1efbe034f7011b49436
Validity
Not Before: Sep 25 05:01:19 2026 GMT
Not After : Sep 26 05:01:19 2026 GMT
Subject: CN=778baef4fe7eddfc47c85d1880a6e7d58db15b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:e2:b5:05:fc:a9:ad:20:57:22:70:7d:2b:
2c:a4:1d:bc:d5:27:c6:d5:4c:d1:8c:d0:2b:ce:41:
5d:55:12:e9:df:d8:e4:80:6c:01:03:0e:c5:08:b2:
bd:ef:9e:63:69:bb:2b:7a:d4:83:2b:34:37:e7:84:
1e:92:63:f3:4b:21:72:aa:86:3d:a3:d8:c3:87:4a:
bb:ba:de:c8:65:af:8d:0e:ca:1e:de:f7:df:3d:24:
5d:a6:3d:d1:fe:37:bc:98:0c:f6:dd:c1:4f:f2:88:
d3:50:30:fe:9b:12:4d:29:8d:e0:5e:a9:7d:7d:17:
60:5e:b0:62:2f:db:5f:af:af:02:8d:81:c6:08:88:
a8:c2:f5:2b:08:67:11:d6:89:38:05:14:6d:1c:cb:
25:a5:bb:6b:23:75:4a:3b:84:81:03:d6:22:b5:44:
dc:f7:9b:e5:0e:14:93:45:03:f0:54:78:ef:73:0e:
07:1c:29:0f:3c:b5:19:ea:e7:a0:ba:8b:92:1d:d9:
0f:0a:05:53:ae:73:9d:ca:94:77:5e:05:96:f5:a7:
7a:7e:fa:c4:77:ba:22:48:e3:be:56:2c:55:c6:78:
40:69:96:ef:aa:aa:ad:68:94:b5:15:9c:32:05:45:
44:83:0f:6a:cb:a3:29:93:7f:12:52:66:96:1d:71:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8B:AE:F4:FE:7E:DD:FC:47:C8:5D:18:80:A6:E7:D5:8D:B1:5B:13
X509v3 Authority Key Identifier:
keyid:CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:79:22:4d:ce:a7:66:b8:d4:68:09:4a:28:a3:08:ac:4d:17:
32:83:d5:8f:81:d3:ef:1a:89:fd:2e:9e:b3:39:04:96:b9:da:
65:36:dd:92:1f:b4:fc:25:40:31:02:ae:92:f4:30:72:de:e9:
8c:45:fc:6b:8f:a0:72:ed:07:f0:22:95:96:8a:d1:49:e5:db:
e7:b3:7a:a8:03:94:d0:1a:1c:4f:77:1c:f6:79:a6:3e:86:7e:
30:99:f7:49:80:8c:54:b4:23:db:cb:5c:16:3e:89:1f:23:58:
77:5c:10:4f:c6:c5:5f:5a:a9:04:d0:6c:71:0a:b4:ba:1e:61:
fd:0f:8d:93:f9:51:41:31:49:29:6c:6e:22:1c:42:c9:d8:52:
c6:b2:48:e9:a4:02:0a:c6:4c:7b:a3:66:2b:ac:92:54:d1:33:
d6:42:ca:3c:8d:e2:ef:f2:b1:2b:21:8f:76:8a:cf:77:80:14:
ff:42:bd:f5:6c:0e:46:f0:7d:af:4b:6a:f6:24:c3:47:0a:c3:
63:14:10:3f:7d:df:bb:27:b1:81:31:e2:56:e6:5d:19:f0:90:
16:c3:ac:e7:b9:de:f5:8b:04:bb:7b:35:0c:e0:63:62:a4:91:
26:af:77:f9:3a:19:51:eb:a0:97:81:ae:da:77:7a:f2:65:7b:
11:10:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:54:54 2026 by rpki-client