Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
File: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft (raw, json)
Hash identifier: dte/MtJrNTZk5JPgKHi3aWVkeegr7soivlpQ4t5fup4=
Subject key identifier: A4:58:05:7E:F3:96:8F:AC:E4:3F:1D:27:C6:60:D2:25:B3:90:6C:C0
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Certificate issuer: /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial: 01A0D8DF73A689112938C710F552765E8630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
Manifest number: 13DF
Signing time: Fri 25 Sep 2026 14:01:57 +0000
Manifest this update: Fri 25 Sep 2026 14:01:57 +0000
Manifest next update: Sat 26 Sep 2026 14:01:57 +0000
Files and hashes: 1: 1-LHcZlaxr8dQvsVNzQIDaN2BeWE.asa (hash: LiZ9oWhCLFkLqjTHi7biMv/A13XAhUUyZNZ2kHRDC4o=)
2: Cmjf0diDBjMpXK9Rg283uLnjsa4.roa (hash: 3GF0sphnOBAsl682z8e9nrFNXKLn18jG5JHQOBCJ7qE=)
3: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl (hash: BVvlnhSt/4qLjdMq/nEb/4KM4lFxT7nC3u4Drdl5/kw=)
4: moqlfmKaE2Btn3qkc70wanITJss.roa (hash: b78qrODXBzetBQGVOPaslkoF1rHcqGwC5Req+zJKsno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:73:a6:89:11:29:38:c7:10:f5:52:76:5e:86:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
Validity
Not Before: Sep 25 14:01:57 2026 GMT
Not After : Sep 26 14:01:57 2026 GMT
Subject: CN=a458057ef3968face43f1d27c660d225b3906cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:31:5e:48:dd:b3:9c:5f:b0:1a:c4:71:33:
f7:1c:53:ae:e1:2a:f6:23:e0:1e:73:32:2a:04:f3:
c7:fb:3b:28:27:d0:54:60:31:0f:a2:3f:33:c4:c0:
48:cb:56:9b:ec:45:69:fc:df:c9:d4:59:57:1d:d1:
93:be:6f:57:65:12:90:9c:f4:7a:17:60:48:d1:1f:
c8:70:60:dc:13:5b:13:d2:83:c3:5f:52:35:cf:39:
3c:32:b0:1a:3f:a1:76:14:c8:cc:c7:86:14:28:39:
9a:cd:11:75:88:a2:c4:07:d3:28:e1:f1:35:76:3f:
15:36:46:73:44:cc:67:2e:6b:37:1a:62:bf:f2:6b:
6e:71:9a:9b:34:21:96:be:4b:7d:4e:ce:e6:d5:87:
28:28:35:dd:3a:c7:a9:c0:e9:1d:10:33:b4:9d:50:
a1:b0:a3:15:a4:ff:bc:0b:14:29:38:3b:e8:02:a5:
a7:61:c4:bf:dc:1d:84:6c:e6:56:52:7f:f5:08:3c:
89:d2:16:fb:29:08:3f:61:91:24:12:2c:55:be:32:
34:04:7b:9b:76:87:80:e0:e6:41:99:d0:70:d3:8c:
0e:55:1d:cf:93:dd:ff:68:f5:13:0e:7c:c8:55:b1:
3c:51:84:35:64:49:14:25:a2:6a:58:72:b6:a8:23:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:58:05:7E:F3:96:8F:AC:E4:3F:1D:27:C6:60:D2:25:B3:90:6C:C0
X509v3 Authority Key Identifier:
keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:85:86:10:46:c6:bb:a9:bc:ad:7a:40:b8:c1:83:87:dd:10:
09:0c:9f:2e:c8:78:68:b1:ef:78:79:6e:6e:16:07:10:bc:e1:
2c:1b:6a:df:37:10:67:e2:52:b8:84:03:82:16:54:17:77:9b:
9a:71:af:f1:c7:74:6f:ec:81:cb:f0:d8:85:a6:be:93:37:48:
d5:8d:b6:5a:e0:08:24:fd:45:4b:49:8b:20:3e:79:59:2a:0e:
d3:95:0a:8b:1c:3d:89:df:e5:a2:3d:f1:ad:c8:41:47:ee:7d:
9e:a5:4f:87:89:3f:0e:3c:1a:1e:13:b8:2d:4e:31:23:20:07:
07:3c:15:28:f4:dc:21:62:03:30:a3:ab:01:42:3f:49:12:40:
d8:fb:70:e5:5b:e7:fc:06:1f:05:1e:df:ed:1a:2e:de:c8:e9:
67:62:87:5e:dc:20:99:81:fb:ee:c9:89:8d:60:f3:8f:7d:8f:
d6:3e:cd:60:7e:aa:e0:5d:94:cc:a3:fd:95:cb:30:50:d9:46:
ed:6f:dc:2b:34:03:92:7d:a2:46:4d:9b:d9:b4:7b:80:f0:f8:
be:1b:f3:41:99:1a:9a:34:17:31:07:a5:8d:07:76:28:5f:40:
26:ea:f9:cd:f2:09:63:21:5a:45:4e:cc:12:7e:00:f1:b6:7c:
7e:23:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:59:04 2026 by rpki-client