Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
File: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft (raw, json)
Hash identifier: GA0xlvO5mhge0BdIESek/TWzzNRZ9ObPxtwdE022Huk=
Subject key identifier: 02:D0:AC:47:0B:13:85:85:D5:F5:22:F7:CB:83:BF:90:16:EE:0D:8A
Authority key identifier: 66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
Certificate issuer: /CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Certificate serial: 01A0F0E75448EBA9E475E0A1DDF44EE7FD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
Manifest number: F6
Signing time: Wed 30 Sep 2026 06:01:27 +0000
Manifest this update: Wed 30 Sep 2026 06:01:27 +0000
Manifest next update: Thu 01 Oct 2026 06:01:27 +0000
Files and hashes: 1: 65lyhfcnUeev5X-4CcMUdWujCvQ.asa (hash: Q5VU2hVKSklyugtCkKPk1YQjPGPSs0Bldy1d061Ftg4=)
2: PQUU7wS6Dnj9yIlgV8Xc2NVBH64.roa (hash: KhnDFB03h86ec4eUqmqIrwmEs0JGq+ImfCvKHB/LolY=)
3: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl (hash: O6LaJVjSMp5f4RT9wggwmkx9xlvVDHFCDJWX3eb57ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e7:54:48:eb:a9:e4:75:e0:a1:dd:f4:4e:e7:fd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Validity
Not Before: Sep 30 06:01:27 2026 GMT
Not After : Oct 1 06:01:27 2026 GMT
Subject: CN=02d0ac470b138585d5f522f7cb83bf9016ee0d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:28:8f:40:eb:0d:11:50:02:0c:9f:ab:94:
ab:2b:7d:21:3c:da:24:0e:9e:cb:18:31:33:e8:d7:
81:7e:98:31:6d:7b:e2:65:2b:34:a7:0a:a0:2a:61:
8d:a3:a7:d3:cc:2b:df:fa:29:d6:25:54:6c:00:d4:
1e:02:0f:af:5c:2b:90:17:d1:54:b8:48:eb:9f:91:
fe:da:cc:21:fa:a7:c4:6b:b4:d9:5a:13:03:f3:f8:
dc:ff:db:c2:33:e6:38:bf:37:cc:5f:79:68:d6:d4:
2c:eb:a1:0a:b1:80:38:cf:69:f6:24:6f:a1:8d:ad:
a6:ff:d0:81:5d:93:b2:47:ce:6a:a1:cf:0e:d1:ce:
54:da:ce:a2:58:16:d4:d3:c7:cd:88:ae:3b:38:21:
5c:e2:eb:ff:3f:e1:a1:25:6b:44:5d:9f:2f:5a:38:
3c:a5:32:e0:87:0a:28:e5:b0:14:14:cd:c7:23:c8:
7f:5f:db:73:53:e8:21:e1:8e:38:e5:af:c1:b9:87:
cc:7d:3b:13:70:70:ff:b4:c9:c3:21:63:5f:c0:1e:
26:b0:c0:bb:3c:f6:48:4e:d6:a5:fa:08:10:a3:d8:
88:46:a4:cc:59:f6:f5:63:71:8c:a5:ec:6c:79:11:
a4:c8:55:19:6a:5c:2c:45:e0:d6:f7:99:6d:2d:e2:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D0:AC:47:0B:13:85:85:D5:F5:22:F7:CB:83:BF:90:16:EE:0D:8A
X509v3 Authority Key Identifier:
keyid:66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:dc:53:7f:90:0d:b9:20:2e:07:4f:01:f4:fc:b8:47:79:dd:
b3:e4:23:62:ee:e2:30:2c:d0:9d:9b:72:59:6f:92:71:bc:ad:
f8:ea:45:93:5d:0e:82:50:76:8f:e1:97:0e:c1:aa:34:6e:42:
6f:11:1c:63:eb:3b:57:31:05:c5:81:68:ba:6e:cf:f0:32:d5:
21:17:b3:bf:fd:8f:fa:4d:6c:c5:05:f5:3f:be:5e:bf:ed:66:
66:55:5c:4c:29:f2:c4:e2:07:b8:ae:45:3e:eb:10:08:ed:39:
c3:ef:75:42:a8:b9:16:66:21:2e:39:fd:19:22:e9:e4:09:4d:
cc:40:bf:f5:14:0a:6f:36:1e:8c:ef:a8:9a:07:b3:3c:07:34:
f4:cc:6a:ac:9d:2c:6d:1c:e6:c7:6e:d5:e2:e4:76:85:16:19:
31:1b:25:9d:43:18:2c:31:9a:ed:6c:2b:21:ee:1d:6b:b9:31:
81:a1:34:d6:1e:e7:d2:23:54:26:29:01:4b:0b:0f:a5:de:77:
ba:16:0f:71:2e:bb:4c:66:22:27:9e:af:09:66:27:6f:09:43:
15:a3:8a:c1:7a:e7:eb:b7:71:03:91:7c:a7:ce:32:06:54:7d:
74:45:64:47:5a:1b:98:b0:bd:4f:2a:26:44:b4:25:69:47:fd:
29:82:4a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:40:14 2026 by rpki-client