Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
File: zkP-lNpK73rfscFih1rxysfLpLE.mft (raw, json)
Hash identifier: j3nIgRYKjbTZHn4S0Pfp8m679bq97Cp2Da2myGxGKbQ=
Subject key identifier: 6C:93:47:AD:69:D1:37:E9:33:4C:74:74:95:07:32:71:C5:F4:C0:10
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial: 01A0D8A83B11D0BD816A802F330E59C0AE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 13:01:38 +0000
Manifest this update: Fri 25 Sep 2026 13:01:38 +0000
Manifest next update: Sat 26 Sep 2026 13:01:38 +0000
Files and hashes: 1: 0lsa2lsdRbGhXDlBoxyUzEcvTkw.roa (hash: TZA+evGUSrxkMyqk95k24o509cA93t42uHVcHnI4ehI=)
2: zkP-lNpK73rfscFih1rxysfLpLE.crl (hash: TbckgaOXmjEBNcRxGoOwVqzZ3foYU/DBdWK9SXdtMA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:3b:11:d0:bd:81:6a:80:2f:33:0e:59:c0:ae:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Validity
Not Before: Sep 25 13:01:38 2026 GMT
Not After : Sep 26 13:01:38 2026 GMT
Subject: CN=6c9347ad69d137e9334c747495073271c5f4c010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:32:2e:82:5b:18:5b:d6:8a:b4:e3:71:86:
fe:35:e6:02:48:e5:83:aa:f4:ea:d4:31:26:1c:d5:
c1:95:97:ae:72:16:94:8d:16:d0:62:f1:72:5f:bb:
f3:af:fa:03:7e:0e:b9:d1:6e:b9:04:22:ac:b6:14:
e7:4d:69:e2:c7:0b:7d:7f:f2:26:7c:fe:19:03:10:
d3:88:89:a2:58:d5:b8:56:7d:a4:62:b7:35:da:4d:
2f:64:d5:08:44:86:65:72:79:f9:f8:ff:6f:09:ab:
a4:04:ed:8e:c4:67:23:8b:70:a8:52:43:e6:c7:3e:
e4:f8:38:5f:53:f8:87:37:0f:ea:32:2d:e6:d6:76:
1b:c0:a0:1e:76:e9:56:38:89:b8:d6:76:af:ac:7c:
bc:77:17:42:bf:b1:49:a7:12:e2:a3:6f:73:46:d1:
57:a4:2f:78:53:bb:2e:5c:20:ba:97:c8:4a:3e:0c:
ea:29:e8:db:4c:2a:03:73:53:61:d4:c1:05:d7:3c:
48:b4:1b:97:20:01:20:bd:c5:99:10:6e:11:7b:3a:
f6:9e:78:b2:53:53:1c:f1:90:58:59:c3:e7:1a:80:
ec:68:42:da:f2:9f:01:89:85:32:e2:2b:29:3d:3c:
4a:43:7e:39:93:3c:a4:3e:2d:fc:93:2a:a4:d4:9a:
e2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:93:47:AD:69:D1:37:E9:33:4C:74:74:95:07:32:71:C5:F4:C0:10
X509v3 Authority Key Identifier:
keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e0:e6:d2:3e:51:e2:b4:92:34:fc:92:50:af:33:2a:3d:d0:
66:b4:fc:06:1f:31:3d:5e:49:d0:e6:1d:ce:02:e8:39:3c:31:
68:f5:e7:01:7d:c1:98:72:8a:48:c3:24:8d:82:c5:2d:e9:f8:
7e:4f:c9:0b:96:35:62:51:ee:a7:40:cb:92:93:54:7f:bd:3d:
1d:4b:1a:3b:74:7c:dc:cf:ae:5b:12:38:f2:23:a9:c2:93:bf:
38:27:74:20:07:3d:54:2a:bc:39:63:35:59:93:a5:3e:0b:21:
1a:4f:0e:ba:9d:d6:ca:76:28:21:54:16:67:2b:ef:ec:9a:52:
31:79:d2:d2:b7:d3:1d:80:f6:b3:ac:dc:76:36:f6:73:67:b3:
da:47:38:25:d7:c7:6d:96:f1:e5:a3:69:bc:69:98:8b:e7:b2:
2b:1f:99:8f:03:20:65:fb:6a:8e:04:39:ca:66:36:59:62:b7:
df:b9:56:a1:fe:60:88:20:cc:cd:e9:17:71:54:dd:ae:b6:d5:
0a:ab:86:13:c2:15:1a:6e:9e:1c:2d:23:50:60:f1:11:78:e8:
8c:e4:8f:62:84:38:02:28:f8:31:24:b8:b5:5e:82:d7:1c:c2:
c1:d5:f4:91:d2:89:22:61:c0:f5:01:64:0f:50:ac:6a:29:3c:
6f:0d:cd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:03:47 2026 by rpki-client