Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
File: dZSaAgpSrHxVFICFzj7-LQKq09k.mft (raw, json)
Hash identifier: IIMvARHyyJvqUdVbDnWQy9ZNiWQIXnrptbKHXsR4j18=
Subject key identifier: 59:BA:29:F6:24:45:EF:5C:95:37:44:12:52:ED:DE:4B:13:90:96:80
Authority key identifier: 75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
Certificate issuer: /CN=75949a020a52ac7c55148085ce3efe2d02aad3d9
Certificate serial: 01A1024877895F99BEDFE2BE9ECFFAEBB0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
Manifest number: FF
Signing time: Sat 03 Oct 2026 15:01:05 +0000
Manifest this update: Sat 03 Oct 2026 15:01:05 +0000
Manifest next update: Sun 04 Oct 2026 15:01:05 +0000
Files and hashes: 1: cfG8GDhSC5IbhMcmwnrArCxDK5A.roa (hash: FkrvdsSSTjBBdNtO3cQ3OTlfM00z/ndv4EdJpdqE/pM=)
2: dZSaAgpSrHxVFICFzj7-LQKq09k.crl (hash: MmZv1azZ4LU3WpXEeVjRv2PycX4fJBmNmnyysEWFa2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:77:89:5f:99:be:df:e2:be:9e:cf:fa:eb:b0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75949a020a52ac7c55148085ce3efe2d02aad3d9
Validity
Not Before: Oct 3 15:01:05 2026 GMT
Not After : Oct 4 15:01:05 2026 GMT
Subject: CN=59ba29f62445ef5c9537441252edde4b13909680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:a2:ca:c8:b5:b6:ab:93:07:c2:d9:bd:a2:
80:8b:6a:27:c5:94:ee:0d:45:81:16:4f:07:e3:13:
73:16:be:b9:fa:cd:14:e4:11:e5:5c:ff:b6:c6:c7:
1d:6d:9a:05:04:54:0a:59:64:b4:43:da:2b:87:b7:
dc:25:38:e9:fe:c1:32:0a:4f:c3:5c:2e:6a:dc:f2:
54:64:52:04:ff:6e:b5:75:81:df:9f:9f:8d:8f:6b:
1d:be:78:5a:ef:21:0c:f5:c2:52:f4:ee:4f:2e:8f:
35:90:c6:f6:59:b4:03:50:e6:88:a2:6b:cc:ba:08:
ff:af:55:db:73:15:86:5b:99:e2:c8:98:dd:ad:aa:
37:b5:ca:65:ae:9b:2e:ce:78:d6:2e:43:72:ed:13:
ff:03:d7:86:94:89:94:21:19:5e:31:ca:4d:6c:e1:
06:3b:0e:99:bf:b6:ba:1c:14:e9:b5:63:85:b1:e7:
86:64:36:72:a2:b8:74:80:87:d4:f7:b1:18:cd:26:
79:c0:a7:2a:56:65:c0:9f:7c:3b:49:bc:90:b6:a8:
5f:83:a1:eb:7d:51:0d:b0:61:b3:24:69:1c:5c:a7:
6d:af:b4:ea:a2:ab:86:fb:87:a8:15:93:83:22:5f:
b0:5e:43:b6:7e:bd:61:38:4a:8b:c9:3d:9a:1f:1b:
55:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BA:29:F6:24:45:EF:5C:95:37:44:12:52:ED:DE:4B:13:90:96:80
X509v3 Authority Key Identifier:
keyid:75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:cb:bb:86:80:48:c1:35:00:b3:6a:1e:b7:28:10:b7:e4:69:
33:5c:d5:bc:1e:10:58:77:f5:23:bd:e6:cd:82:27:57:4e:88:
a0:48:e0:1a:23:27:94:ec:d7:93:b9:70:9b:cb:f3:23:52:52:
f6:18:ad:3d:46:26:36:fc:a2:16:67:d6:7e:9a:7a:f0:d7:44:
5d:91:e2:2c:58:ab:7c:94:fa:59:8f:42:79:fb:86:a7:7e:ae:
f1:80:4b:83:c9:f1:0d:86:7a:c2:af:47:78:38:2f:1b:55:e4:
14:5f:ca:57:57:d5:0e:6b:bd:29:a1:1d:71:8a:99:3b:6e:4d:
93:d3:58:66:d2:3d:54:56:1e:3a:d9:35:1f:6e:7d:eb:20:d1:
92:87:5d:bf:75:4b:ed:8a:68:d4:53:c2:c7:1a:f8:3e:bd:03:
f9:a7:b6:0c:d4:2c:7a:fa:a8:d5:d3:96:b2:e6:96:f2:cd:3f:
0b:38:b9:d5:11:bc:7e:9b:c9:4a:ba:c6:a1:7f:79:8e:59:f3:
b3:54:02:8e:4f:49:4b:8a:10:0c:a3:a6:bc:75:44:fc:e4:15:
4e:c1:f2:f4:b3:8a:db:49:b7:7a:ff:df:aa:45:c1:c7:1f:38:
b8:a8:3f:b4:27:4d:44:3e:73:cf:a5:a0:1d:c3:27:e6:dc:d9:
39:36:97:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:52:05 2026 by rpki-client