Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: rRqNwzBBdZjUU8T9U3c/Fuz82yEhDDkR+hsocfkhzCQ=
Subject key identifier: 69:00:B9:87:8E:46:32:CC:24:A5:CB:0F:BD:F5:2E:E9:E8:0B:DE:38
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 01A0EE8BB8BC8B382D050344F04B26F2C74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 137A
Signing time: Tue 29 Sep 2026 19:02:09 +0000
Manifest this update: Tue 29 Sep 2026 19:02:09 +0000
Manifest next update: Wed 30 Sep 2026 19:02:09 +0000
Files and hashes: 1: v7WcqpRYWHh239LPGmTnapW7Q_w.roa (hash: xmjmImowRyBXLpG11gkpyM1tBT1YhUEBnShnhTtDYrk=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: IrfrPWXm+ZmsZzjoFa4UOd7/P6iOyzzT4+CBygU4XfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:8b:b8:bc:8b:38:2d:05:03:44:f0:4b:26:f2:c7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Sep 29 19:02:09 2026 GMT
Not After : Sep 30 19:02:09 2026 GMT
Subject: CN=6900b9878e4632cc24a5cb0fbdf52ee9e80bde38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2a:52:6e:10:80:8f:8f:00:c2:41:a1:2d:a3:
c5:0c:11:35:c0:cd:8f:ec:95:0a:2b:d8:af:dd:d7:
ba:cb:e0:6f:9b:80:3d:f7:d5:4f:0d:47:d7:d7:8a:
81:3e:aa:ad:96:6d:c8:2e:f1:5e:7c:25:5c:25:8f:
93:98:d5:f6:73:47:62:45:ea:cf:ab:73:bc:96:03:
3a:25:b7:27:86:4a:fb:cf:65:07:ff:79:32:c2:81:
6d:41:2c:dc:2a:36:32:bd:27:7d:3d:dc:b5:79:be:
3f:4e:fc:be:7e:d9:2e:07:9c:18:b6:05:46:e6:ee:
62:21:fb:18:55:7c:40:ef:2f:01:38:80:80:f6:9b:
b0:46:f5:e3:d2:f1:05:b5:51:87:df:e1:3c:22:a2:
00:e6:1d:f2:b2:fb:9a:1e:79:66:7b:62:36:09:95:
db:62:3e:94:85:ca:b0:72:47:1e:93:1a:ab:be:5d:
f4:53:cb:22:66:69:75:f5:e6:37:7b:6e:df:72:ef:
6c:88:05:15:91:40:08:7d:82:00:e3:39:9a:6a:de:
e9:8c:a0:d5:69:29:9e:80:b6:70:1c:b0:6e:4b:17:
93:ef:92:20:1d:72:b1:a2:b1:ba:d4:3c:56:18:de:
2d:3a:f8:0b:d8:c7:07:fb:03:e3:1b:1f:4b:6b:f0:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:00:B9:87:8E:46:32:CC:24:A5:CB:0F:BD:F5:2E:E9:E8:0B:DE:38
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4f:f4:6a:d4:ae:83:1d:a8:73:33:b8:8e:11:b9:46:2f:8b:
39:77:ac:6e:80:7d:32:db:ad:b2:fb:36:1d:f8:82:0d:2c:e8:
4e:b6:c3:c9:6f:ff:de:dc:34:88:e2:27:f4:68:a9:1d:0f:44:
9b:b2:d2:d1:55:df:8c:dc:a5:cf:27:e2:32:9e:9a:58:0c:5f:
02:4d:c2:87:95:e8:39:d8:6d:6f:7f:a7:b0:62:0f:40:cd:64:
41:bc:4c:ab:b3:88:b0:7f:6e:fd:fc:c1:45:12:54:39:89:0e:
93:73:ec:a2:dc:3a:a3:34:53:fb:3c:0f:8f:45:11:84:36:cf:
db:81:4d:13:1b:36:73:f9:e2:ce:99:ba:c1:54:48:f5:19:9e:
79:38:65:7a:90:b8:59:85:0f:71:44:32:e8:32:72:29:09:99:
fa:54:e3:f0:f3:b2:d4:42:9d:bb:6b:e3:32:58:f5:57:6f:12:
bb:fd:e3:73:80:1a:83:43:60:c9:87:d3:72:b0:c5:b0:81:4a:
05:fa:a5:5e:5e:c2:02:8a:92:33:32:f8:ae:42:e9:32:8a:f3:
2f:7c:43:ac:e8:45:ff:cb:f2:ec:ff:28:1f:38:53:71:e1:d2:
c6:cc:36:bf:a5:0f:84:73:52:88:8e:d5:1c:f2:75:11:3e:e8:
3c:33:53:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:47:04 2026 by rpki-client