Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
File: ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft (raw, json)
Hash identifier: vYamchWugHt/0g55IS8mmmUiA5Uc5lhJ0V010aL5O2c=
Subject key identifier: 4B:75:AD:CB:61:D3:C5:C6:52:E8:AA:AE:8E:3B:47:1F:02:A2:1D:97
Authority key identifier: 64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
Certificate issuer: /CN=64262c8337e218bed316b70cc092dd0befe8195b
Certificate serial: 01A0E362AC3AD6A08371F21BB9C9EC7EC337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:01:29 +0000
Manifest this update: Sun 27 Sep 2026 15:01:29 +0000
Manifest next update: Mon 28 Sep 2026 15:01:29 +0000
Files and hashes: 1: 1L45PsyuvIYIg2ZJpaZ1kexqtD8.roa (hash: gzQs+2Sri4/i+ZuiKLzc6oYRR4Wmc7We38Tn2yPF6nU=)
2: KCG2jhdDWc9bOUDAuVYJDwPA_IM.roa (hash: XSPZXPjtWmH3tsooKgIJCC9hK4ebdbO48OGaE0GPJDQ=)
3: Ykafli2nuvHvr2ZZrxVKMXpHSUQ.roa (hash: ZVqCkdThQ+Dxa4j8Ohcu5jpE4zpamft8rts1/91ztKk=)
4: ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl (hash: 7HXtAR8baZxVDV0zc3AFM03PnpGMnKXdjtbUebDQKDI=)
5: boyjYBR7CeYYqBubps31ePeRjKg.roa (hash: 44PfnVaKtdz7BnqSwnT3jqIEnA/Gm5oPQKvw5imMG+E=)
6: jwSgudfTgoD0rYPgWs2QdsgCaFY.roa (hash: T7RwlJl15rnyYrYfOU8otSAOkH0fOifwVGS8FpasWE8=)
7: kTamAiL6qOOf57nIraLXQq7irIk.roa (hash: djhCgJi8JfOsutJAAl8lRxYE0HKm1fCZVH28XEIjiKY=)
8: lZHIjG7NZwuEiIUXn9PLMVcVIzA.roa (hash: PwjbCusxHYbPcriuRl5QcW2dN5wg11/a1p9YKj/rRnQ=)
9: pOkq5deJnN6boK6s5xEuzkj_cGg.roa (hash: J7cGVPgbOqr7KYHw8zUxLmdbPeKxga24cigIY5mS8rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:ac:3a:d6:a0:83:71:f2:1b:b9:c9:ec:7e:c3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64262c8337e218bed316b70cc092dd0befe8195b
Validity
Not Before: Sep 27 15:01:29 2026 GMT
Not After : Sep 28 15:01:29 2026 GMT
Subject: CN=4b75adcb61d3c5c652e8aaae8e3b471f02a21d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:70:b5:f8:09:8b:6f:14:87:fd:f5:c5:69:
93:a7:a2:12:b9:55:0e:8e:3b:84:c9:45:3b:77:8e:
52:5b:53:a9:3b:53:e1:3d:fd:f0:94:d6:ed:b7:40:
bf:07:78:51:c9:04:0c:14:a6:21:f3:f1:94:a5:a9:
7f:52:54:c7:a6:b2:64:48:33:b3:23:85:22:60:e8:
0e:89:57:59:46:08:74:23:d0:55:d9:1d:71:89:7c:
16:36:55:f5:5b:e4:48:f9:36:63:6d:8f:f9:eb:32:
8c:32:dc:d0:4c:60:b5:ad:53:63:cb:65:00:b2:b7:
e6:3e:f0:f0:b8:dc:06:de:11:69:e8:14:d5:5f:bf:
61:b5:88:0a:8c:02:bd:4a:fb:e9:01:49:83:98:5d:
e3:58:e4:ae:4e:48:60:7b:81:d7:d3:a4:f1:d9:63:
c7:7e:43:3e:43:73:17:c5:da:a6:39:c2:84:5b:0f:
4a:b1:b3:5c:17:a5:73:02:fa:32:21:74:18:9e:69:
14:9f:b6:5d:1f:88:77:78:c0:52:7c:fb:25:13:5e:
ab:e7:6b:77:1c:8b:50:ba:c3:5f:aa:ae:da:dd:9e:
6f:63:dc:96:b6:93:ca:e3:69:6a:e3:7d:58:92:9e:
29:60:b8:dd:7a:fd:1a:bf:f8:09:6e:4e:89:20:c8:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:75:AD:CB:61:D3:C5:C6:52:E8:AA:AE:8E:3B:47:1F:02:A2:1D:97
X509v3 Authority Key Identifier:
keyid:64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e6:fb:98:e8:bd:f5:5e:43:64:73:45:a7:c9:0d:9e:98:fa:
e5:b5:20:d7:0e:6b:9d:e5:27:e2:bd:1c:bd:c3:7d:ef:69:82:
60:4f:1f:9a:22:d9:d4:f9:33:df:fa:b9:8c:2e:ee:29:45:79:
0b:d7:17:07:0e:f2:2b:47:c3:f0:1e:8c:79:29:b7:92:5a:a3:
d7:59:23:6c:f2:15:a2:7a:d1:9a:29:57:86:89:68:5d:ae:83:
b4:8c:8f:67:2a:95:a8:77:7d:96:c4:f2:6e:fb:e4:0f:c0:12:
5b:02:31:98:94:8c:55:a4:96:9b:8c:47:f4:24:6f:f7:28:dd:
ed:7d:3c:7c:5f:fc:05:27:91:e9:22:7b:cd:4e:c8:74:51:ed:
9c:a1:f9:a8:69:96:4e:81:2e:b6:f6:ff:e2:79:9f:fc:b5:25:
d6:44:5b:42:12:1b:d6:53:ac:02:d5:d3:e1:0c:3f:c4:38:f4:
7c:a2:06:84:73:7f:77:24:25:58:86:da:1a:90:82:ae:ae:56:
d0:e7:ae:db:f9:15:a7:15:8a:ef:cc:7f:75:6f:43:ef:b7:2d:
8b:cd:22:d6:c8:b7:87:aa:71:77:cb:72:66:b5:0e:b1:db:9e:
c2:cb:d0:96:b2:18:a1:5b:87:6f:37:95:15:16:c5:a7:cd:7c:
3d:40:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:38:34 2026 by rpki-client