
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File: ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier: z/pOtfXubtnZrzMB0mO+IILk0I42SmorbBHoozoVnBw=
Subject key identifier: ED:BF:C1:04:87:B0:79:6E:B0:14:81:71:1D:48:79:B3:03:FD:6C:81
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial: 01A0D3F0B7FDDDE56FEA403BF010FC3BE275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number: 08E9
Signing time: Thu 24 Sep 2026 15:02:43 +0000
Manifest this update: Thu 24 Sep 2026 15:02:43 +0000
Manifest next update: Fri 25 Sep 2026 15:02:43 +0000
Files and hashes: 1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: m3EOdA6uoXVo6meLDKZm5wPC6EbGzxzOShQvkQkTcM4=)
2: t-CPneeaVHYgCJeN9aRr26OHu8s.roa (hash: i5R3976Bs/xCdmNx5+5wTM2K2LQaNxrVpxX02Fkd/C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:b7:fd:dd:e5:6f:ea:40:3b:f0:10:fc:3b:e2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Validity
Not Before: Sep 24 15:02:43 2026 GMT
Not After : Sep 25 15:02:43 2026 GMT
Subject: CN=edbfc10487b0796eb01481711d4879b303fd6c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:39:a2:2d:a6:30:43:78:a6:27:4f:43:e8:
64:96:96:81:9c:b2:af:55:6d:49:e9:7c:89:79:fc:
67:e6:b7:c2:43:b6:2f:7d:d5:fc:64:1a:46:f7:36:
27:d7:3d:b5:aa:a8:24:75:88:df:c0:ca:fd:e2:fa:
2d:4a:df:0d:c1:75:58:f0:2a:a0:68:02:29:17:42:
09:59:5a:14:47:e7:2f:de:eb:bf:90:ef:4c:2c:ee:
84:27:1d:6e:91:2d:c5:ad:de:b2:c7:99:d6:41:a5:
fe:40:79:61:9d:6f:9c:db:08:02:ab:d6:ca:37:1f:
4f:ea:ee:90:8f:50:e5:94:35:70:93:ed:52:2f:64:
6b:02:a9:18:76:7c:d3:c3:eb:56:b4:6b:69:b6:aa:
09:24:8f:84:de:f2:e9:71:1f:79:ab:72:74:66:6b:
d4:37:70:8a:05:4b:92:fd:4f:57:ea:ec:a9:e7:4f:
41:7f:fd:a6:a7:0e:6b:bf:f0:a7:2e:5d:37:c1:9e:
0e:4b:11:1a:98:4f:5c:04:47:f3:f2:cf:7d:a2:7e:
bd:2c:cd:18:ca:ed:9c:b7:3e:15:dd:47:98:37:f6:
42:3e:83:48:a4:e1:7e:fa:85:a9:04:00:1f:c5:78:
16:f2:eb:b7:f2:d3:4a:f5:09:f4:f0:cc:1e:ca:2a:
67:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BF:C1:04:87:B0:79:6E:B0:14:81:71:1D:48:79:B3:03:FD:6C:81
X509v3 Authority Key Identifier:
keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5a:9e:50:0f:2c:4a:fd:6a:b2:2b:cd:10:71:0c:dd:65:43:
ad:ac:33:af:a4:47:74:b4:ee:2b:68:da:ed:6c:60:f8:bd:28:
8e:e9:9d:ae:87:5f:d2:f4:12:8d:7e:44:12:11:b1:06:96:75:
9d:12:ef:b6:f6:44:06:4f:d3:7e:9d:f1:6a:60:11:a1:41:2e:
e6:61:c7:7d:7c:81:61:a4:5b:d5:4e:29:73:24:42:2e:3f:eb:
43:c1:c5:70:3f:c0:90:98:e6:6d:05:ba:d6:4f:5d:ac:ed:e4:
46:d7:cb:04:03:ac:65:ef:d3:7c:45:20:e2:91:64:da:99:5d:
03:ae:4a:b6:6d:e9:d2:4f:96:21:ef:52:23:a1:49:48:26:87:
3f:d5:32:33:73:de:d6:4f:c4:96:fa:59:2d:6c:cb:41:70:03:
7f:f6:03:01:5a:9a:fa:7f:f9:c4:34:24:56:cc:72:3f:15:3c:
62:4c:73:e9:22:fb:de:d0:ca:ab:ca:85:c7:76:e4:91:82:b2:
a7:b5:4a:2e:34:20:96:df:e1:cc:4e:ab:93:b9:3e:88:a2:6b:
06:99:d8:16:34:5a:4d:47:26:e1:a7:30:69:d1:ab:f9:03:71:
ff:25:21:75:a1:2a:78:a5:2e:4a:52:5c:b0:9c:79:83:6c:be:
12:f9:9d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:43:32 2026 by rpki-client