Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
File: Zr5SEJO7idx2JQsif39_umbiKNg.mft (raw, json)
Hash identifier: qmUpDVJdIjpwRjFJ5AwyRf4ButWTXDQuGXYK8qoWfU4=
Subject key identifier: 4C:C0:18:97:DD:83:3B:8B:F0:A4:E9:C9:05:52:6C:AE:96:84:02:23
Authority key identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
Certificate issuer: /CN=66be521093bb89dc76250b227f7f7fba66e228d8
Certificate serial: 01A0DA96B1102C72487A28ACE7DF138C7DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
Manifest number: 05C8
Signing time: Fri 25 Sep 2026 22:01:43 +0000
Manifest this update: Fri 25 Sep 2026 22:01:43 +0000
Manifest next update: Sat 26 Sep 2026 22:01:43 +0000
Files and hashes: 1: Zr5SEJO7idx2JQsif39_umbiKNg.crl (hash: O6wXZ2K7uelmIVTAATYxdgOAI9l/Fb1BN828gkMBOk4=)
2: vRM_LGbWv2w9cKQdXqOHlRePDQI.asa (hash: ORLNjodyCGoSATuVjwDrx01Z8NUV9ta4Ef/5NzIWEY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:b1:10:2c:72:48:7a:28:ac:e7:df:13:8c:7d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66be521093bb89dc76250b227f7f7fba66e228d8
Validity
Not Before: Sep 25 22:01:43 2026 GMT
Not After : Sep 26 22:01:43 2026 GMT
Subject: CN=4cc01897dd833b8bf0a4e9c905526cae96840223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:23:39:50:b6:9b:66:20:f4:08:32:a5:5d:
58:f6:bb:74:c9:db:c4:ae:f7:c0:45:31:a6:7a:d8:
c3:7b:52:15:b5:96:2a:7a:77:14:da:3c:70:c7:39:
de:7d:b8:ac:5e:9f:e6:76:ae:6c:64:9f:e5:78:27:
c1:e6:a3:70:83:8c:82:f4:5a:9f:2d:49:0f:09:3b:
1a:4a:21:e2:e6:ab:cd:3b:22:bc:f6:1e:86:97:4a:
a2:c3:e3:91:63:ba:50:4e:99:f3:ce:da:03:37:3f:
79:62:3f:04:bc:06:f0:07:3c:19:51:5e:e8:12:f0:
db:db:73:d9:01:f7:0b:3d:02:dd:e9:4e:8b:0a:68:
24:a7:18:92:84:0d:7a:d3:01:8c:db:ab:e1:0b:f0:
a8:e7:1c:c8:a2:af:6f:11:bb:99:41:da:23:d6:a7:
95:f0:6a:65:ce:3c:55:0a:6d:ec:a1:b2:c9:ba:38:
aa:31:ad:c7:62:7d:9a:d9:f9:9a:df:90:eb:7a:4f:
05:2d:8c:00:b9:48:28:52:05:42:f9:f2:9d:83:ae:
09:a3:a9:fb:20:0d:10:db:16:1b:a3:4c:a1:03:14:
37:ad:05:e6:b7:e5:08:dc:5a:56:bc:98:37:65:8a:
fb:41:3a:3c:65:77:48:e2:02:ff:65:b0:54:f8:cb:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C0:18:97:DD:83:3B:8B:F0:A4:E9:C9:05:52:6C:AE:96:84:02:23
X509v3 Authority Key Identifier:
keyid:66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:59:2e:6e:92:cc:36:da:02:25:6e:88:9f:4d:57:81:b9:6a:
d2:06:c8:38:00:03:c4:9b:06:c0:6b:d5:4d:47:35:1e:30:e7:
14:75:e5:fc:37:5e:dc:6e:56:64:ab:ca:d1:10:5a:b4:95:ee:
32:9f:b6:17:93:95:de:e2:ce:fb:fa:2c:ea:af:98:61:2e:51:
7e:47:c7:f8:d7:83:3d:73:65:66:71:be:88:10:4d:19:5c:fe:
c6:ad:2b:f8:a7:b9:b9:e6:0c:1c:6f:2a:c5:33:59:79:75:d0:
64:79:92:43:9d:57:5b:1e:c9:95:5c:49:d4:cc:2b:a5:a3:fa:
48:35:0c:db:a1:3d:5a:fc:b8:04:ef:b1:22:e9:87:c9:cc:38:
87:d5:be:9f:1a:e8:e2:b9:97:93:cd:8d:80:6f:e5:1d:b9:fd:
b3:2f:f7:10:e1:11:f8:b8:44:26:92:10:80:89:99:33:f7:29:
26:d6:5c:ba:d2:e2:d2:80:71:50:69:9f:d1:e0:b1:64:7c:18:
b6:51:c2:94:9d:79:43:da:16:12:6b:9a:a4:17:f6:2f:26:04:
71:b6:e4:a7:d4:7d:50:42:45:a4:83:fc:2b:9c:8e:51:17:36:
62:4c:ce:5a:9a:5e:67:64:f2:7b:62:78:ff:89:22:51:82:d4:
8b:f9:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:57:17 2026 by rpki-client