Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.mft
File: zshzRXQrnVgBslMjyCcnWuD5Stk.mft (raw, json)
Hash identifier: ocSFbgg02ZsUHkkZ1PC2ctlhI03FHGNwsBAQHtiiFHk=
Subject key identifier: 9C:08:63:D4:9C:ED:4C:58:D3:C3:8D:2D:BC:FB:99:D0:55:F8:C9:0F
Authority key identifier: CE:C8:73:45:74:2B:9D:58:01:B2:53:23:C8:27:27:5A:E0:F9:4A:D9
Certificate issuer: /CN=cec87345742b9d5801b25323c827275ae0f94ad9
Certificate serial: 01A0DA970B95758D96AE9501231735A5763E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zshzRXQrnVgBslMjyCcnWuD5Stk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.mft
Manifest number: D3
Signing time: Fri 25 Sep 2026 22:02:07 +0000
Manifest this update: Fri 25 Sep 2026 22:02:07 +0000
Manifest next update: Sat 26 Sep 2026 22:02:07 +0000
Files and hashes: 1: JBmrghiTDzjDVafNtUXpcpiVMDA.roa (hash: ytVgRgTltCnzpOMTVkA88MbE1jIuSsREsUuIGqNHZ00=)
2: zshzRXQrnVgBslMjyCcnWuD5Stk.crl (hash: CvXrZocVCr9NasqZzaaWTJ5ehv8jKIliXUzQsWiPIcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zshzRXQrnVgBslMjyCcnWuD5Stk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:97:0b:95:75:8d:96:ae:95:01:23:17:35:a5:76:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec87345742b9d5801b25323c827275ae0f94ad9
Validity
Not Before: Sep 25 22:02:07 2026 GMT
Not After : Sep 26 22:02:07 2026 GMT
Subject: CN=9c0863d49ced4c58d3c38d2dbcfb99d055f8c90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:97:0b:75:d7:47:5e:70:43:28:2f:06:42:
4b:e9:dd:9b:e9:9a:e7:37:a8:7f:a2:2f:5a:5e:2f:
72:c1:bd:18:21:c0:73:8e:77:11:94:70:3c:56:d8:
56:fd:15:d1:ed:8e:4c:dc:de:52:26:76:77:a7:38:
8a:34:d0:76:e4:5d:c6:29:c2:ee:2d:1b:2c:79:a7:
52:8d:75:5d:d8:5a:12:b9:36:6a:10:a4:d6:33:c7:
d0:d2:30:b2:ef:84:19:0a:aa:5d:69:76:ef:77:af:
6e:fe:91:0a:1c:ca:e0:1b:cb:37:68:03:27:3a:5a:
ae:c3:15:52:59:c4:e8:6b:98:aa:64:b6:eb:94:15:
a8:19:41:c6:cf:d1:d6:50:b7:aa:4a:ff:4e:86:bb:
f7:ec:ca:ae:cd:9c:e6:ee:e6:3c:9c:05:06:f4:15:
42:60:f7:6b:e0:8b:26:b6:ff:d3:25:ca:47:0e:9a:
5f:b7:f3:03:06:c3:fd:4e:a2:fa:40:d2:5d:3f:ea:
3f:18:59:3b:10:73:4b:df:9c:fc:0e:1e:92:24:bf:
be:53:f7:de:dd:4b:32:4d:57:7d:64:49:3b:d0:73:
02:c9:5b:fa:04:99:a1:71:eb:fc:0c:8b:a0:f5:14:
72:8c:96:dd:c4:6e:d0:fe:f5:99:81:39:45:cb:9e:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:08:63:D4:9C:ED:4C:58:D3:C3:8D:2D:BC:FB:99:D0:55:F8:C9:0F
X509v3 Authority Key Identifier:
keyid:CE:C8:73:45:74:2B:9D:58:01:B2:53:23:C8:27:27:5A:E0:F9:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zshzRXQrnVgBslMjyCcnWuD5Stk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:21:95:19:60:33:d1:4a:90:69:dd:d7:d2:28:93:28:bb:b5:
01:88:0d:2a:31:c4:c1:ba:f1:ba:e4:b5:8f:53:c0:86:34:ee:
d3:9b:88:fb:30:21:d3:bf:fc:62:91:1c:0c:f7:30:fa:e2:ce:
fb:d0:0d:41:d4:2f:1a:52:3a:62:5c:f4:1a:d5:91:83:b7:62:
03:65:05:bc:2a:44:22:19:8c:ce:cf:cd:39:54:3a:1d:44:4c:
b0:43:77:b8:01:f2:da:1a:bc:35:62:ca:4c:e6:a0:59:04:93:
b1:05:d8:46:ff:65:c9:da:6a:e4:64:69:f3:a0:9e:b4:c3:78:
ac:cd:92:6c:e6:fd:e7:31:9b:ad:e6:85:7b:6e:5c:a4:b8:69:
4b:e0:d0:e3:85:5a:3a:d8:16:3b:a5:0c:2b:6d:d5:55:7b:4e:
d2:a3:02:4a:b4:a9:d6:49:dd:dc:24:24:45:2e:99:ae:ee:31:
b6:34:c5:63:6d:b2:69:76:60:79:97:7d:1d:b3:34:7b:4a:3b:
ac:f5:94:b9:1f:a4:b1:ca:74:a7:84:ff:4e:37:a6:e1:fa:2b:
af:04:45:14:20:b0:2b:87:d4:15:7c:13:52:de:4b:d8:3b:59:
8f:eb:93:53:e0:d3:f5:a1:c5:6d:90:e5:2a:c9:1f:e8:dd:85:
fb:73:f3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:14:07 2026 by rpki-client