Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: bpAkkP5/lhbf08XAa7V7n+mK/f9+5NMTlNnmSwjZQi8=
Subject key identifier: 9C:D6:81:BA:9B:6D:8D:C5:F7:4A:CB:AA:F9:86:6C:59:0A:E2:83:F5
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 01A0DC8465CB071048528AD1C4BA680C1348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 1528
Signing time: Sat 26 Sep 2026 07:00:59 +0000
Manifest this update: Sat 26 Sep 2026 07:00:59 +0000
Manifest next update: Sun 27 Sep 2026 07:00:59 +0000
Files and hashes: 1: HY8y2aUxH2zl7Z8uEFKyCs4_DZE.roa (hash: pgB+L4R4Q18tDhMP8CyO3Aai8GigL3mxjQcI8MoXdXI=)
2: cKZJLTzeqYRhpsddyswZAoLcpsE.roa (hash: HgvgjBFasTjpcgFlyoecgapQ0MDuq029z3qYeWnH2Zk=)
3: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: RcQHRQrnSsqAa+izRaTK9GCVXRhWWwP9VzWS3OAH/WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:65:cb:07:10:48:52:8a:d1:c4:ba:68:0c:13:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Sep 26 07:00:59 2026 GMT
Not After : Sep 27 07:00:59 2026 GMT
Subject: CN=9cd681ba9b6d8dc5f74acbaaf9866c590ae283f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:72:30:77:0c:c6:54:0f:5d:33:eb:33:13:30:
a5:84:06:c3:d6:0d:ff:03:1d:54:84:b4:db:a4:0b:
5c:17:fa:64:62:19:4c:78:ec:f9:0a:d6:c1:f9:39:
36:56:cf:ba:2b:b1:11:39:24:2b:74:38:83:50:b9:
e3:50:58:01:5a:ce:9a:92:0d:f3:35:ba:55:dc:16:
6b:d7:68:20:f7:bb:87:7a:bd:80:2e:2f:16:9e:8f:
43:0e:c8:75:b7:d1:03:c9:1f:27:2a:4f:cd:54:7b:
21:56:ea:b6:58:98:7f:fa:06:97:d8:16:c4:73:de:
50:a7:26:04:d3:b0:91:78:aa:aa:b8:e7:2d:e3:fb:
47:09:77:70:f0:2a:bf:0f:a3:19:e1:c1:6e:1d:3c:
29:5a:f4:e9:20:cb:12:fa:16:42:77:66:53:1c:23:
a5:40:32:15:2b:8a:79:00:88:8b:14:e0:11:84:0b:
57:e8:3a:2b:14:43:e0:15:d2:13:e2:ef:44:25:10:
3d:28:78:75:53:7c:da:43:b8:64:30:e0:c7:5f:da:
89:73:4d:27:97:95:ae:0b:58:ca:12:22:1a:39:aa:
ba:30:1f:5b:63:17:77:9f:40:92:63:d2:72:7a:51:
8c:33:03:f1:bf:e6:60:f2:94:f1:a4:78:7b:81:bd:
30:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D6:81:BA:9B:6D:8D:C5:F7:4A:CB:AA:F9:86:6C:59:0A:E2:83:F5
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9a:b3:a6:a0:1e:8b:62:da:39:21:08:cb:73:e1:01:15:a5:
22:e6:fb:09:ec:fb:03:e1:d5:28:00:50:08:c0:af:04:78:fc:
fc:2a:96:3a:61:fb:dd:13:c9:1b:1b:39:f4:02:d5:c6:db:b3:
15:1e:ce:37:c6:11:1f:f7:c3:a0:30:01:f8:db:32:78:fb:53:
86:68:c8:ad:0b:ed:cd:8f:a9:2a:04:96:4b:65:c4:e4:a2:d8:
63:14:79:26:99:76:e1:80:24:79:c3:35:92:f7:f4:16:58:7b:
cf:96:3d:cc:7d:1a:bf:82:4e:70:72:4f:af:7c:73:ef:10:e4:
23:f4:c0:85:f9:93:67:05:fe:f0:8c:90:b0:42:ef:e7:32:96:
bb:ca:53:23:a0:c4:14:c0:66:e7:e1:e0:95:e9:7b:ca:fc:be:
13:52:6d:ec:d5:8c:4e:89:dc:68:4a:1f:75:6b:2b:44:4c:be:
5b:2f:a7:6d:85:b8:d0:56:a8:ec:32:9f:f3:d9:88:6f:fe:57:
f1:67:57:34:b2:ea:53:60:a0:28:0c:5f:f1:b9:80:97:8d:cc:
cf:a4:81:a9:9a:52:fc:22:d9:8a:74:a6:4e:b0:3b:d2:e0:af:
17:8e:c4:12:ec:f8:eb:3a:35:ac:a8:b6:d9:9b:b3:9b:26:1b:
d8:85:31:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:18:00 2026 by rpki-client