Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
File: zoCPTPJWR31wopTRMBbCToQn1cI.mft (raw, json)
Hash identifier: 3G55KP8KQWJRGslzttvPbZgpZj1+i9rn2rMflcJ9+LM=
Subject key identifier: EA:9A:A5:F6:68:DB:30:6C:38:3D:78:8D:DD:CB:BB:B5:38:C0:46:D0
Authority key identifier: CE:80:8F:4C:F2:56:47:7D:70:A2:94:D1:30:16:C2:4E:84:27:D5:C2
Certificate issuer: /CN=ce808f4cf256477d70a294d13016c24e8427d5c2
Certificate serial: 01A0D9BAB6B904652F5BF0B669519C8E0AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:27 +0000
Manifest this update: Fri 25 Sep 2026 18:01:27 +0000
Manifest next update: Sat 26 Sep 2026 18:01:27 +0000
Files and hashes: 1: _JmG_0xrHcMFjUFl8DJsIFUaYD8.roa (hash: 7k5k2uPEyUiwrs4Pq2qVmxoQcxV+zQ2r/avbqedzahU=)
2: zDXzBZeXum8l30Cf-mJ2T8gbfQg.roa (hash: sIKKghlLT4flRrCI8RlvLEJlP+eAnZaJEqf8oP1H+nw=)
3: zoCPTPJWR31wopTRMBbCToQn1cI.crl (hash: 7Q2wzJ/Sekt+oVPpRatHIS6gtr7XPxTbzm1flv3jHtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:b6:b9:04:65:2f:5b:f0:b6:69:51:9c:8e:0a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce808f4cf256477d70a294d13016c24e8427d5c2
Validity
Not Before: Sep 25 18:01:27 2026 GMT
Not After : Sep 26 18:01:27 2026 GMT
Subject: CN=ea9aa5f668db306c383d788dddcbbbb538c046d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:29:d9:55:1b:09:20:5e:73:2a:80:2a:c7:
be:56:53:4e:9f:36:aa:b0:75:86:f9:9b:4f:43:89:
ae:a0:82:ad:66:cd:23:1d:cf:51:1b:06:28:30:9a:
1b:25:0b:93:8c:9d:a5:79:31:c8:97:41:2b:db:34:
c7:a0:77:c6:7e:76:a2:62:32:d4:da:69:7d:a9:e5:
4e:0b:fb:33:1b:d3:2f:c3:24:a6:52:39:c0:27:b9:
91:77:22:55:00:3b:96:c5:16:59:64:a4:77:42:fd:
75:85:05:dc:11:86:2d:2f:5c:c7:0e:3c:94:af:0b:
e9:97:b5:b4:09:7e:b8:ea:c3:13:70:29:4e:0e:db:
cb:73:03:96:5d:f9:55:70:ea:38:91:8a:f8:78:b7:
28:5d:82:61:fb:c3:b0:6c:da:88:05:db:41:b6:79:
c2:19:7f:cf:4b:45:f0:51:47:94:8e:fe:6e:35:b1:
aa:0f:33:9e:80:24:43:84:5d:ca:38:ec:ee:a9:69:
77:af:82:91:40:3b:20:71:21:ed:35:22:f3:f0:7e:
03:2b:f6:2d:36:06:d9:4f:3a:28:1f:f7:c7:52:19:
31:13:ea:1f:b9:17:ec:d1:e9:74:db:6a:50:83:df:
a4:80:11:57:9b:1f:0a:50:b2:3f:7c:9e:1f:70:6a:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9A:A5:F6:68:DB:30:6C:38:3D:78:8D:DD:CB:BB:B5:38:C0:46:D0
X509v3 Authority Key Identifier:
keyid:CE:80:8F:4C:F2:56:47:7D:70:A2:94:D1:30:16:C2:4E:84:27:D5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8c:59:38:18:0f:d3:e5:35:5a:62:0e:19:60:b6:2a:9d:e2:
23:05:6e:05:61:6d:41:c4:08:be:99:26:64:78:b6:d0:80:eb:
82:fb:ac:29:8b:c4:3c:7b:a2:8e:35:83:75:be:fa:d9:03:72:
c9:13:93:e9:09:d2:e1:67:df:9e:1f:e3:87:f4:1c:3c:83:fa:
1a:8a:ec:17:91:20:2f:f9:cd:5d:6c:a6:de:13:97:47:b5:da:
f9:9a:08:4f:5e:0a:33:1e:cd:7f:b6:c8:c8:cf:2a:ec:49:cf:
63:31:38:29:34:98:43:a9:91:c2:6d:2e:89:7c:bf:a0:a9:02:
f1:55:a6:88:db:b5:f5:79:d6:35:2b:bc:a5:a3:80:92:ec:3c:
e8:73:05:d9:83:06:53:5a:dc:00:8e:1d:cf:21:42:f1:49:72:
1c:8b:4e:56:88:35:6c:1f:fd:5d:cb:7f:05:9e:dc:82:c2:17:
5a:68:e8:c7:bf:cd:21:52:7a:9d:0f:7a:98:db:7d:50:f8:6f:
a8:1f:1a:6b:77:37:5f:a2:b9:b3:e2:bd:ac:96:b7:51:da:80:
be:64:ca:1c:24:3a:0a:27:34:ea:c9:a1:85:0e:4a:10:ca:dd:
5c:52:cd:ee:91:73:bd:43:73:f3:70:10:8c:05:92:ee:6a:1c:
39:80:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:28:04 2026 by rpki-client