Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: p1+7IYL8D250HcAPMrYvUO6jIJb28NOK40TF9Ur13vI=
Subject key identifier: AD:CF:9C:42:08:04:ED:F2:87:94:A4:CC:E4:56:CA:2F:95:74:92:F0
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 01A0E02AA4AFF42BEF0F7D0B7872ABCB0619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 1068
Signing time: Sun 27 Sep 2026 00:01:25 +0000
Manifest this update: Sun 27 Sep 2026 00:01:25 +0000
Manifest next update: Mon 28 Sep 2026 00:01:25 +0000
Files and hashes: 1: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (hash: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: 9OE16O/XZXiwgynvf7cuNI8vXy6+7wGaupCjw/49Bgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:a4:af:f4:2b:ef:0f:7d:0b:78:72:ab:cb:06:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Sep 27 00:01:25 2026 GMT
Not After : Sep 28 00:01:25 2026 GMT
Subject: CN=adcf9c420804edf28794a4cce456ca2f957492f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1c:ea:97:9a:19:c7:a7:1d:49:18:53:c2:11:
54:d2:41:bf:a9:8d:97:43:25:75:8a:f7:87:2b:d9:
dc:97:c5:ca:53:25:d3:2c:55:58:5c:bc:50:bf:89:
f5:d2:a3:e0:2b:69:ff:0d:aa:f8:71:93:55:c6:ba:
31:57:49:59:f1:26:cb:4a:eb:c4:9a:dd:d6:a1:54:
bd:fa:e6:69:9c:04:48:8c:02:38:ed:a4:b4:ff:6b:
41:ab:58:29:25:64:06:60:13:5a:ad:83:6f:0d:35:
eb:5a:95:4a:9a:79:a7:76:d3:2e:24:93:2f:35:4e:
4d:6e:a8:03:92:38:c3:cf:76:7d:04:a6:12:51:3c:
f6:48:70:07:14:1f:c2:0a:60:0d:00:3b:1d:07:45:
c9:ca:26:85:e0:62:a5:9c:ea:73:6a:14:99:63:75:
fb:57:34:bd:c6:e9:3f:a0:08:f3:6a:f7:a1:a3:60:
e2:8d:bf:36:97:26:a8:82:4b:4b:19:ff:26:d6:78:
57:46:39:fc:22:37:91:48:a6:10:5c:d4:60:19:a1:
8a:a4:b5:fc:fd:13:45:b5:50:d0:8b:4d:0e:63:3f:
90:d4:11:62:2d:e4:ca:34:cb:d9:c2:73:c5:99:81:
83:6f:40:60:ec:58:9c:b9:ed:0a:9e:3d:eb:aa:52:
0d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CF:9C:42:08:04:ED:F2:87:94:A4:CC:E4:56:CA:2F:95:74:92:F0
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:14:d4:6d:e2:96:62:c5:42:82:e0:60:95:ca:4b:87:5f:60:
b2:4a:4d:3a:46:20:c6:33:02:11:44:88:7f:08:c2:64:2c:f5:
28:f0:96:11:cb:b6:e8:27:16:70:53:48:d8:31:48:9d:dc:0c:
ba:e9:92:5c:83:39:e9:86:c5:fd:36:db:48:96:53:bd:3a:59:
f3:58:8d:74:41:c7:96:85:0e:90:ff:b1:b4:e5:08:62:4a:e5:
d6:9a:1a:bc:94:97:8c:ea:32:0a:78:ae:43:9c:13:fc:c5:aa:
12:74:aa:bd:6c:52:e8:ce:cb:51:0e:08:6a:a4:df:22:96:0c:
ab:19:27:38:b1:b8:8d:5b:57:ca:81:3a:d8:2d:1f:91:d3:84:
8b:1b:a4:89:36:0f:6d:5a:74:eb:7b:37:40:46:ef:a8:db:9b:
d3:68:9f:d8:ad:75:29:80:dd:0e:f4:41:49:18:b0:e1:a8:a2:
dc:97:72:d9:4c:9d:ad:11:26:66:9b:74:8e:1e:e8:4b:39:bc:
3f:ff:c9:7c:01:1a:75:2a:6a:53:63:db:5e:e7:1c:ad:f4:e1:
2e:60:8b:47:dc:7e:5b:69:e7:6e:4b:4a:7f:8d:22:d7:1c:e4:
0c:e8:d4:91:2b:8e:d6:9b:5e:04:bd:61:84:55:8f:39:63:fd:
17:4e:4c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:14:57 2026 by rpki-client