Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
File: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json)
Hash identifier: uq3IJYwBW+7UsOc8n1qweKLVHZQgI6A3MU6N+CtUw1A=
Subject key identifier: D7:5C:FF:88:6B:F3:AA:7A:47:3A:D4:B9:2C:1B:26:38:C8:81:3E:5A
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Certificate issuer: /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial: 01A0EB1C2BA784FE6AA6D1587C7C7D7CDFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
Manifest number: 09FC
Signing time: Tue 29 Sep 2026 03:01:26 +0000
Manifest this update: Tue 29 Sep 2026 03:01:26 +0000
Manifest next update: Wed 30 Sep 2026 03:01:26 +0000
Files and hashes: 1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: AKadAlQ2IsGDla65hp303qrA+1PYTHye0Q50YDamJnE=)
2: io0GvTpo_VyMUyPyaPwaY5qhYQs.roa (hash: o71eBkqnQim23+RZGUgawhsMcbHLdUbBzsu6ep4SKt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:2b:a7:84:fe:6a:a6:d1:58:7c:7c:7d:7c:df:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Validity
Not Before: Sep 29 03:01:26 2026 GMT
Not After : Sep 30 03:01:26 2026 GMT
Subject: CN=d75cff886bf3aa7a473ad4b92c1b2638c8813e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0d:fe:21:fe:64:35:72:ec:f6:d8:8a:76:7e:
1f:dd:d0:63:8e:8a:53:f6:a9:26:f7:84:c3:ec:25:
69:20:81:7d:38:4c:c7:a6:81:0a:f8:95:9a:37:2b:
1c:47:29:2d:3c:6f:b9:6c:b7:1e:68:a0:3d:09:69:
00:39:5a:c4:21:3d:6d:d5:39:f2:36:85:37:3b:bc:
3f:51:65:c8:37:bd:e8:35:eb:43:63:5c:bb:7c:8e:
85:87:62:4d:84:1d:7a:fd:6c:48:d1:9d:0e:e5:60:
75:99:87:ed:a8:6a:cd:36:9c:35:db:ec:77:5e:1d:
39:19:69:c2:5f:af:88:05:f0:44:d5:af:3c:a7:83:
ec:67:7a:cb:0e:6b:98:c8:ed:d4:98:d2:58:31:27:
58:71:2a:5b:f5:71:15:c5:84:dd:69:d5:b5:86:82:
ed:52:b9:fa:ca:d4:01:a3:e9:85:90:63:4a:3c:48:
5b:fb:df:5c:09:31:67:5f:19:71:a3:b6:ea:eb:8d:
8f:d8:32:8c:db:fa:64:ab:0a:d8:93:8e:17:37:b4:
22:f4:ce:57:dc:1e:9e:f4:61:03:7e:d2:72:3f:1c:
da:c6:29:da:30:48:b2:5f:ea:2e:8c:f4:34:25:8f:
a8:77:86:d3:88:c1:fe:91:7d:a6:a7:51:e2:90:b2:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5C:FF:88:6B:F3:AA:7A:47:3A:D4:B9:2C:1B:26:38:C8:81:3E:5A
X509v3 Authority Key Identifier:
keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d8:87:aa:30:19:96:b0:ab:09:4c:e8:03:da:9b:6a:46:73:
85:97:06:49:8d:cd:4c:b7:54:2c:5e:c4:d6:db:33:99:76:42:
72:3f:73:df:70:49:17:05:b0:f9:11:e3:b7:1a:b8:c5:ff:4a:
8c:79:3f:b9:b7:a4:52:1c:db:eb:56:b0:7f:4d:0a:1e:f3:02:
39:fd:cf:5b:69:12:9a:31:4c:33:0c:ce:ca:38:7e:c2:1f:fb:
06:d9:a5:40:c6:b8:96:d1:0f:f9:55:ee:0c:49:2c:60:99:ae:
60:51:fb:65:ba:39:ac:a0:17:4e:34:ab:04:a8:3c:b5:b7:08:
7c:cc:21:17:ee:1c:64:70:11:46:45:d8:a4:a4:5c:96:34:e8:
29:72:00:35:ed:a2:b7:f4:3b:c1:b7:67:c6:85:13:f3:37:80:
1d:3b:a0:74:16:c9:18:e2:f2:66:cd:34:8d:0e:fc:f5:d9:6b:
38:88:4b:8a:cc:fb:71:7b:b0:30:64:1e:ae:82:40:3f:f9:b4:
6e:78:c5:bd:c5:23:80:36:ec:ee:c2:d4:a3:16:40:0d:7e:69:
d4:30:44:9c:d6:ce:66:b8:24:24:77:81:5b:74:0e:a6:dc:26:
be:06:44:40:5e:33:e8:68:62:29:54:32:cc:77:0b:d3:76:38:
2c:31:7f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 07:03:56 2026 by rpki-client