Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier: sMkkrxRQUHh3Gd43BDSea/WYSrV3olvlYuL2WGcDrPY=
Subject key identifier: 37:AA:FD:73:54:6E:09:72:C3:33:CF:53:0B:A1:80:B7:3A:7C:D4:51
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial: 01A0D15C1EF7A8CA50BAEC138BBCD90C9700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 03:01:10 +0000
Manifest this update: Thu 24 Sep 2026 03:01:10 +0000
Manifest next update: Fri 25 Sep 2026 03:01:10 +0000
Files and hashes: 1: EY3B-toGXUZtNKRbRIT1VD4kBHE.roa (hash: 3Wh78iI9ibfL8FY/7stYt19m1NshKZMf/srlWVz8NYk=)
2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: jJtQPYwFrZUGMBP7pEarRyaX73jTzf0uEr6q4YWH9hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:1e:f7:a8:ca:50:ba:ec:13:8b:bc:d9:0c:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Validity
Not Before: Sep 24 03:01:10 2026 GMT
Not After : Sep 25 03:01:10 2026 GMT
Subject: CN=37aafd73546e0972c333cf530ba180b73a7cd451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:37:3b:c7:30:66:19:86:cd:aa:8b:34:66:
26:6e:8d:13:76:f8:b9:0c:54:11:40:e3:c1:aa:8a:
f2:cf:79:b7:17:9a:a0:b2:0c:5b:b0:4c:56:11:00:
8b:52:91:62:36:bc:bc:45:52:4a:b9:64:86:2c:22:
d2:98:22:4e:fc:a2:b0:b9:ef:be:59:29:3f:f3:d2:
59:60:1e:cd:48:f3:ca:ac:e8:87:36:af:f5:a2:cd:
be:5e:84:f7:b6:ed:e7:db:9f:46:22:18:11:9e:68:
d5:55:ec:71:13:a0:ab:5f:5a:99:f5:58:92:4c:44:
53:27:02:43:83:b2:ac:28:89:a3:2e:c8:d9:74:83:
cf:ad:dc:63:65:3a:8b:cf:55:83:64:90:e3:fb:3a:
84:08:eb:7c:b8:13:42:d3:d9:6f:6e:ae:5a:7b:06:
26:7b:d2:b8:12:4e:43:56:55:71:d0:23:da:de:1e:
5b:f4:ec:d5:80:26:cc:c2:6d:c3:e2:05:15:0f:ac:
a3:81:c1:fe:37:b1:1e:4e:4c:86:d0:56:ec:b0:88:
32:97:09:d7:bf:60:fb:e0:dc:a7:aa:56:9d:b2:d4:
36:3c:ed:48:5b:a0:ae:a1:18:f3:46:53:9d:d0:11:
87:54:38:51:bd:3e:a6:5d:15:b6:36:2a:94:0f:e6:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AA:FD:73:54:6E:09:72:C3:33:CF:53:0B:A1:80:B7:3A:7C:D4:51
X509v3 Authority Key Identifier:
keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:16:0e:65:da:68:d9:d8:7e:c3:aa:f0:f9:5d:dc:35:aa:5f:
cc:d7:5e:09:a0:fd:e4:34:8e:e8:e8:42:9d:7f:52:74:ea:db:
d2:4f:90:27:2a:02:63:8c:6f:19:94:48:5e:cd:72:eb:9e:fd:
d7:dd:42:1b:d6:d5:b8:c1:2b:38:3d:51:f3:31:b4:05:dd:71:
ed:48:36:dc:83:f8:19:35:92:b7:10:56:a1:7f:3c:bd:fc:59:
3a:d7:1a:69:61:44:12:91:2c:64:6b:7a:4c:a8:9c:7e:99:33:
9a:60:ed:45:e5:9d:36:a2:9d:39:b8:5f:9d:b8:12:1b:61:84:
b7:43:36:fb:22:52:97:20:e4:00:06:78:3c:81:65:9f:32:55:
e6:28:f7:f8:a9:83:d6:aa:b0:30:08:d0:8f:c5:a1:69:d0:0d:
60:89:dd:6c:ed:e4:7a:dd:2f:69:43:18:d3:11:fd:bc:ba:e7:
e3:d2:bd:7d:97:08:b6:8f:d7:ea:3a:62:7d:3e:84:9f:d8:a4:
01:77:78:f2:f2:1f:c4:94:0b:7f:f8:87:c9:f9:aa:44:13:c8:
de:48:a5:2c:0b:c2:77:70:52:81:f9:02:30:8f:76:8c:93:49:
e6:e6:1b:8a:03:53:7c:10:ea:42:9d:3a:e2:f0:1c:1e:24:41:
7a:c5:1a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:40:44 2026 by rpki-client