Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: HKhpby3PEAIft3WmtVj5a+t+nS/SEGpqRjZaBRLJSTU=
Subject key identifier: 40:51:45:7F:8B:B7:17:F8:EE:7D:C3:3B:A1:10:24:F8:50:10:E8:97
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 01A0D64BE299819D3AE703D5003683752FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0FB9
Signing time: Fri 25 Sep 2026 02:01:32 +0000
Manifest this update: Fri 25 Sep 2026 02:01:32 +0000
Manifest next update: Sat 26 Sep 2026 02:01:32 +0000
Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: rtQHaI596Q0iEKdXxFtJ8ILe42xQtux07iGtKMiX+fo=)
4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:e2:99:81:9d:3a:e7:03:d5:00:36:83:75:2f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Sep 25 02:01:32 2026 GMT
Not After : Sep 26 02:01:32 2026 GMT
Subject: CN=4051457f8bb717f8ee7dc33ba11024f85010e897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:06:62:0d:d9:75:e7:8d:00:a2:c7:b7:e2:
f7:26:41:90:0c:f3:23:53:d2:73:19:c7:47:da:be:
70:79:b7:1e:2e:95:3b:fa:03:83:ca:bd:0b:43:ad:
c3:3b:59:a0:63:01:20:fc:0c:09:1e:ed:01:7c:a5:
d4:89:24:d8:ef:f6:fb:f4:26:aa:c4:67:4f:06:d7:
ca:46:65:59:a2:93:c2:8d:2c:95:b2:47:46:d7:a5:
38:d4:42:5a:90:24:c6:40:26:77:48:d1:44:ae:e6:
2a:dc:4f:5e:ac:85:5f:d9:27:01:e2:22:7f:fe:f7:
57:f4:5d:a8:f5:a3:74:6a:2f:03:1b:53:61:60:1e:
e6:4e:ba:cd:38:4a:93:b2:50:80:27:ea:18:66:ac:
0d:48:42:03:77:91:aa:55:61:1f:50:31:3e:5f:8d:
cf:7a:57:aa:ce:20:d6:94:92:56:8e:49:1c:cd:03:
95:8a:b7:79:a8:9d:2e:01:db:3f:3e:3f:97:89:8b:
0d:fb:77:44:69:25:06:6c:94:9f:20:ce:b0:72:ce:
26:b9:d5:2b:b0:09:00:1b:91:b1:96:40:ba:e5:3f:
64:4c:72:29:45:44:db:e3:ac:c5:7d:48:8c:c2:29:
ed:32:7c:33:99:74:4f:4b:60:97:df:a1:2e:c4:70:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:51:45:7F:8B:B7:17:F8:EE:7D:C3:3B:A1:10:24:F8:50:10:E8:97
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d5:d9:2c:97:5b:c2:1e:ee:41:ad:f8:fb:03:8c:4a:17:63:
02:b6:30:bf:82:a5:74:a0:a2:b5:9d:01:f8:d6:78:d9:9b:a0:
92:7c:ce:ca:ee:e8:55:d8:55:41:68:73:d8:c1:e4:8d:92:c7:
4c:b0:6f:29:6d:67:26:7a:1f:db:a8:f9:9c:81:99:c3:90:fe:
c0:1b:9e:85:38:1d:c1:f7:19:d5:31:53:ed:e9:3f:fe:54:ff:
8a:b3:80:69:28:96:10:30:6b:0a:e1:e8:64:84:2b:c5:5f:79:
83:4e:de:0c:48:13:7c:90:4a:05:1d:88:53:39:ec:72:75:07:
e6:a1:aa:77:85:bf:4a:3a:9d:1c:71:94:88:f3:11:9c:dc:06:
bc:7b:a6:bb:17:62:a2:2c:5f:30:4a:26:ec:05:85:3a:9b:a5:
ce:0e:5a:75:b0:95:dc:0a:2e:64:6f:39:75:58:39:44:27:2d:
e3:d4:d3:89:c2:ac:7c:55:f8:11:f0:7b:62:fe:1f:75:aa:34:
0c:56:46:e0:5c:b4:6b:ec:0f:85:da:11:67:8c:21:62:0d:c1:
33:48:83:ec:47:e6:04:37:da:fc:e1:2d:8f:6c:89:e3:68:ef:
9e:53:18:30:64:a8:9d:bb:c6:39:45:09:80:ec:7f:03:1b:07:
9c:14:4f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:44:25 2026 by rpki-client