Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: u9eaM+Ysk5TZyQQurc4Pd3JBQm8mt/chYJtNb1gXQSk=
Subject key identifier: 09:F4:70:E7:1E:C1:3C:21:E0:90:9C:2F:F3:4A:E0:A0:29:77:4A:D4
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 01A0CE5AAB0AADC3F6E40A19FC3024D137B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 07C4
Signing time: Wed 23 Sep 2026 13:00:43 +0000
Manifest this update: Wed 23 Sep 2026 13:00:43 +0000
Manifest next update: Thu 24 Sep 2026 13:00:43 +0000
Files and hashes: 1: Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa (hash: xOQT8aF5alDLKyDZy7KGBBHerw/+VNesMI/Q2sx+T/E=)
2: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: d0b8P+LYBcqLjdksBu5iestTGLJrv3FVvsYO+a8mm1Q=)
3: f6Gl5ia878MGtM32MXnrZU8aNMI.roa (hash: DY0u0e2tgwdLOC3jP4WK/B8b0MSVRVEFdP0Swwb6Kq0=)
4: s9H6P_An9Cs8KJ23K6jcUiaST5I.roa (hash: R6YBzLVPih79ie1zLN00BwSvjURpM3Xic3Nu8UvJvIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:ab:0a:ad:c3:f6:e4:0a:19:fc:30:24:d1:37:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Sep 23 13:00:43 2026 GMT
Not After : Sep 24 13:00:43 2026 GMT
Subject: CN=09f470e71ec13c21e0909c2ff34ae0a029774ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:f5:29:24:a5:c5:d6:5d:68:1c:e5:1e:0b:
42:42:f1:68:e1:2d:7f:fe:4c:03:ff:00:43:0f:86:
fa:4c:df:a0:b1:8c:3c:b1:c4:dd:64:f7:e1:b2:50:
4c:17:e3:b8:45:00:b5:bc:59:33:03:18:77:ab:65:
ad:cd:e7:5a:95:91:93:64:84:a6:24:e6:7d:20:df:
be:42:5b:4c:8e:40:16:21:b5:7a:2c:c0:6b:60:fb:
05:27:52:d9:cd:fd:33:0b:0f:ea:69:0f:9e:f5:eb:
1a:3d:8f:dc:6a:b4:6d:83:9c:b4:05:50:40:7c:ac:
48:ab:d2:a2:42:61:49:b7:e9:01:c4:0a:e2:81:05:
a9:80:64:e9:d4:d4:27:d5:b2:46:b4:d7:a4:9d:b8:
3e:f0:9f:a3:f5:48:38:97:e7:1e:0c:8a:6a:aa:2c:
23:9f:03:42:65:2d:fd:38:86:04:18:79:5b:73:92:
7e:56:fb:f3:12:f2:94:b2:93:af:47:7e:b8:c1:1b:
06:49:80:75:86:82:0e:cf:e3:94:be:f5:9a:8a:81:
11:a3:40:75:b1:46:c5:82:82:93:7e:f4:7f:a4:65:
eb:e7:72:6d:8d:b4:28:a5:29:84:59:9a:0f:4c:43:
bb:54:2c:8d:88:03:37:c8:06:a9:de:f7:fa:68:83:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F4:70:E7:1E:C1:3C:21:E0:90:9C:2F:F3:4A:E0:A0:29:77:4A:D4
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4a:fb:f7:25:0e:3a:b0:cd:27:ac:81:b2:50:7e:08:27:31:
83:3f:19:6e:7c:bb:02:df:63:c0:41:d5:cf:7a:cb:72:6d:23:
db:72:dd:ea:5a:27:68:ac:e8:00:ce:31:cf:ee:8f:05:48:f2:
36:70:11:79:e3:8e:cb:c7:47:3a:af:76:a5:63:9d:40:a9:40:
c5:c1:82:e5:45:2c:5e:16:e0:af:a0:bf:73:45:ac:aa:c1:30:
2a:3f:48:c2:fc:c1:e5:a3:bc:86:4b:1a:e5:c6:35:32:cb:47:
ed:50:36:fd:73:e8:db:1a:f6:1c:6c:f7:a3:d1:86:6b:07:e0:
21:78:1c:fb:ea:96:c2:f5:0b:7a:4a:28:60:a8:01:9e:b7:3b:
54:52:c6:56:52:9b:e1:2f:06:37:e9:94:e0:7f:56:ea:16:4e:
0b:10:bb:8e:97:b6:63:4a:d1:31:1d:aa:8c:5b:cc:a3:9f:b4:
d0:34:98:ec:d5:dd:d1:a6:00:bf:62:ed:ca:90:0d:86:02:90:
15:63:1c:af:3c:36:30:bb:bc:ff:73:aa:29:36:8b:79:e2:08:
8c:2d:50:92:e5:73:cf:7c:ab:94:a4:9b:78:39:7e:3f:20:66:
85:11:d2:3a:9e:30:cc:0c:3f:99:b4:96:d5:c4:82:15:61:21:
f1:59:31:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:16:01 2026 by rpki-client