Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: 7e0bDOj+VbqbfkbyQroARVXHDFcJKnTnmwSWUPmKyC0=
Subject key identifier: D6:9D:8A:EC:0B:DF:AC:04:FB:1A:DD:68:54:F8:4F:D1:64:05:37:C6
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 01A0F0E7099716922B1916D0AA8B9941870A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 1A7B
Signing time: Wed 30 Sep 2026 06:01:07 +0000
Manifest this update: Wed 30 Sep 2026 06:01:07 +0000
Manifest next update: Thu 01 Oct 2026 06:01:07 +0000
Files and hashes: 1: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: RlHXIsU+mhtxUySidha9cPjwY/FH0EUkfJFhcTM7N7c=)
2: tF-2EeR_Sloua9VRcDrOJtjCE4c.roa (hash: SRucPtbp0q4X2q4N9kPCOOMgbw4idYsb5wYcEAqop+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e7:09:97:16:92:2b:19:16:d0:aa:8b:99:41:87:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Sep 30 06:01:07 2026 GMT
Not After : Oct 1 06:01:07 2026 GMT
Subject: CN=d69d8aec0bdfac04fb1add6854f84fd1640537c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e8:da:b5:11:cd:61:ec:48:01:0d:24:6d:d2:
7f:0f:ed:b9:dd:7e:e1:fd:4d:c8:33:02:43:b3:8a:
c5:40:2f:60:47:b9:dd:65:bc:23:3c:d7:2e:7f:99:
30:8b:02:d9:f9:f2:0d:79:d1:4a:31:2f:b7:65:bc:
20:14:fe:08:1c:af:0f:9b:72:c9:ab:5f:6d:8c:e2:
3a:bf:7c:99:28:6e:03:8d:b6:06:00:b9:3d:b2:09:
92:16:c6:76:69:fe:1f:88:97:b1:ae:08:65:54:68:
31:4b:81:6f:ac:ed:6f:82:cb:4a:1d:b6:29:23:b6:
60:dc:1d:21:cc:4e:85:f2:c4:54:d8:79:28:1e:0c:
97:6f:3d:85:61:04:6a:5a:7b:31:93:05:eb:d5:f5:
54:35:cb:c5:a6:20:34:be:5d:7d:01:13:d6:65:76:
e3:7f:8a:42:b0:08:b8:cb:0f:17:5f:2f:c1:3c:25:
75:00:31:ef:b1:9d:77:52:4c:37:8d:4f:84:22:34:
43:17:17:bc:fd:b9:f8:71:1c:e6:97:24:3f:d8:48:
08:53:ae:c1:30:97:7a:b1:40:64:19:70:f2:c8:5d:
3e:e6:54:ba:fd:57:6c:14:35:6c:ed:1e:dd:ed:24:
03:fd:1e:f2:73:98:ab:77:25:b0:ad:ef:f3:d5:4b:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9D:8A:EC:0B:DF:AC:04:FB:1A:DD:68:54:F8:4F:D1:64:05:37:C6
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:77:a1:7c:9a:e5:e1:7f:8d:16:7a:a8:2f:48:b6:90:64:b7:
53:54:b2:75:56:c2:2f:3d:31:cf:21:5b:4f:77:8f:84:5d:e3:
6d:ef:92:ad:a3:66:ee:74:7a:02:7a:cc:01:1e:07:a8:98:4d:
1e:a6:fb:70:75:b6:fa:43:58:6c:79:52:4e:5a:2a:58:8b:8e:
95:9f:6a:91:46:ac:d1:c0:eb:00:b9:c4:1b:ea:58:9c:87:81:
80:3f:aa:f7:0e:23:a7:20:22:05:cf:7a:ab:9f:cb:45:8c:90:
3f:37:88:2f:11:4a:81:f5:0f:24:eb:8c:61:4e:31:f3:c6:f8:
7a:57:6b:5b:42:5d:16:50:d5:83:55:00:ca:21:c0:36:18:61:
84:da:08:37:f3:42:22:38:43:fe:d4:c8:95:34:d7:c9:e0:79:
bc:47:90:23:57:0e:28:85:3b:6a:7b:f2:0a:78:02:cf:d0:c1:
96:d0:27:2e:4a:c0:94:86:34:5b:34:ec:35:94:4d:d3:92:7e:
a5:83:b0:44:f4:72:7e:f3:c9:b7:95:71:b1:6a:08:3d:e1:1e:
30:a9:b0:49:64:e5:bd:3d:54:b3:c9:20:6e:02:89:b3:73:de:
9f:62:81:2d:6f:28:70:6b:d2:39:79:98:3a:d2:21:9e:80:3a:
1e:e6:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:31:28 2026 by rpki-client