Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File: zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier: tPBZYHktgZ4r35VBRGHrt0vhyu4IypGOOmED3euU6EY=
Subject key identifier: 9B:33:25:F0:3A:B0:A1:7B:E5:6F:60:95:AC:09:DA:2A:3A:8A:C1:DC
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer: /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial: 01A0EDE633C1FB1200A3A2A762349B6F77F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number: 0A21
Signing time: Tue 29 Sep 2026 16:01:21 +0000
Manifest this update: Tue 29 Sep 2026 16:01:21 +0000
Manifest next update: Wed 30 Sep 2026 16:01:21 +0000
Files and hashes: 1: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: jFT1zhts4gnDtsh5ggqvw4O/zyrFVrj29H0bICwXwMQ=)
2: zyPqIwgvyXC9lIUoG61mB6n09UU.roa (hash: vO04NStXDDqi7y92fry/H4qNWdoUZgsfcjDUmEnQqDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:33:c1:fb:12:00:a3:a2:a7:62:34:9b:6f:77:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Validity
Not Before: Sep 29 16:01:21 2026 GMT
Not After : Sep 30 16:01:21 2026 GMT
Subject: CN=9b3325f03ab0a17be56f6095ac09da2a3a8ac1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:fb:89:3d:d9:a2:b4:ca:7b:e5:e7:b5:45:
32:0e:a6:b0:8f:75:fe:14:3c:ff:85:18:d5:f6:86:
b5:b6:9b:3d:72:03:eb:f9:0a:30:07:2e:2e:ab:98:
a8:8e:09:0c:3e:20:5d:99:20:24:2b:0c:38:6f:be:
35:bc:90:64:1d:19:09:a4:c9:af:91:8a:14:d2:4d:
6c:bd:db:b3:17:0b:98:59:9e:83:85:d8:28:27:c6:
16:1c:85:a4:4e:35:be:e2:ad:ab:02:91:87:ac:c6:
1a:c8:84:20:53:18:b0:42:56:39:72:d3:72:d3:57:
19:65:f5:6b:c6:08:ba:70:3b:ce:78:41:09:3b:91:
d8:2d:48:c2:d7:b9:04:41:36:b6:31:c5:9d:42:ed:
09:d1:fa:f5:2c:d3:35:4b:52:61:c1:cb:81:a5:45:
b8:a6:7c:7b:25:51:f7:0e:aa:38:20:ba:b2:25:77:
c9:8f:18:f9:a6:41:3d:35:f2:f2:2b:c5:01:ea:e0:
96:ea:d3:20:67:05:25:65:5d:70:80:d1:10:52:ec:
1f:81:df:de:f1:e0:0a:a1:70:b9:6c:1f:e3:61:a4:
d0:bc:be:26:9e:0a:b0:56:cc:20:80:01:c6:cc:62:
6f:99:df:b2:57:05:9a:93:ee:ba:19:44:de:77:f0:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:33:25:F0:3A:B0:A1:7B:E5:6F:60:95:AC:09:DA:2A:3A:8A:C1:DC
X509v3 Authority Key Identifier:
keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8d:d1:1a:dc:f3:1f:05:1b:70:0f:c5:c2:ca:9d:e5:c3:3e:
30:3d:8f:29:35:df:2c:20:29:c6:67:2f:61:b0:6d:0a:96:a7:
0d:26:81:65:43:1d:4a:24:00:65:57:e6:0c:de:d1:47:3c:07:
1d:76:be:0a:38:aa:a9:2a:4c:5c:65:df:65:5a:3c:58:ba:ee:
b6:9a:d1:43:56:e8:ae:20:fe:10:e7:a5:b0:57:24:8e:8c:2c:
7b:96:ed:c7:9c:aa:dc:e0:02:a8:fa:4f:ea:55:ee:ef:7e:ac:
ff:c1:a1:20:c7:f8:67:ca:3e:02:c9:a3:37:98:21:e3:8e:bd:
60:38:8a:09:f7:f5:c2:2e:69:01:cd:7e:a7:aa:5a:70:e4:ce:
65:ec:87:8a:31:21:b8:f5:d9:c3:84:ca:06:67:4e:3a:e2:b1:
2e:47:a2:79:54:17:f3:67:51:6b:57:37:56:c8:9c:39:67:13:
0e:65:9a:34:a8:b2:c5:09:9e:06:90:d0:e3:13:6a:f0:e6:b8:
48:cb:ad:28:dc:8b:bb:91:3c:54:a7:84:e5:da:64:23:c3:b9:
47:70:26:db:50:29:35:64:e4:90:f1:60:4f:d6:ef:e4:7d:5e:
cd:71:44:c0:4c:44:60:77:11:e5:f3:8a:13:23:c0:3e:c3:52:
46:a6:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:59:55 2026 by rpki-client