Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File: Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier: +4YKnk8g25PW4jf0WqSmgoSAZMK+GVUr+VzOkCuxIBo=
Subject key identifier: 42:53:F3:C6:62:40:01:19:9A:1B:67:92:AB:FB:61:D1:B0:73:7C:B7
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer: /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial: 01A11A86EAA5F871942AA852B2C09E5EF12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number: 1A97
Signing time: Thu 08 Oct 2026 08:00:11 +0000
Manifest this update: Thu 08 Oct 2026 08:00:11 +0000
Manifest next update: Fri 09 Oct 2026 08:00:11 +0000
Files and hashes: 1: 0R8Nyml_jNijyqA_Jia2Nz1Ew_0.roa (hash: j8m8dgU0c2ttdrUH0oHPxb+CqlN+qsjDTMJ+LPXhKnk=)
2: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: MDvbvZ1IfDa0NdZh0Zma9cYUpoKjxWQ7VR7ctdbFbeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:86:ea:a5:f8:71:94:2a:a8:52:b2:c0:9e:5e:f1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
Validity
Not Before: Oct 8 08:00:11 2026 GMT
Not After : Oct 9 08:00:11 2026 GMT
Subject: CN=4253f3c6624001199a1b6792abfb61d1b0737cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:92:dc:0b:77:e9:41:e4:b9:d1:30:4a:4d:
f6:15:9a:f0:bf:fc:d5:b4:19:58:67:d5:3c:cc:d8:
40:de:18:e3:10:c8:cb:14:a3:0d:c7:a7:4e:a1:a6:
4e:64:9a:8c:2c:4c:fe:fc:16:2c:9c:62:83:70:b8:
bc:72:b3:68:72:0b:1e:0c:50:86:d2:4e:23:9b:ed:
1b:33:dc:d0:0f:d2:4c:c8:83:f3:63:b7:89:c8:97:
82:d0:26:67:96:3a:d0:e6:3f:9a:0d:7f:a9:01:94:
b8:87:3b:21:89:a2:de:e5:46:40:f5:c0:92:08:a4:
ec:6c:a9:c2:12:f1:8d:46:05:d0:80:56:59:6b:b1:
36:9f:03:61:d0:71:5f:1c:70:84:21:8b:97:1d:8a:
06:49:94:24:c0:2b:0b:b3:e1:8a:9b:f8:f0:03:f2:
f9:a5:6c:44:e5:69:38:2c:59:c1:7a:95:05:5b:4e:
14:e2:b1:a2:4c:eb:d7:19:ea:9c:83:42:98:f7:dc:
f3:df:d1:82:2d:7f:60:51:fc:d2:cb:f1:ef:e7:7e:
83:7a:d4:6f:dc:85:0d:58:31:f0:59:b3:7d:5c:a1:
66:ac:e8:d1:ed:e5:5b:f1:a4:5d:55:1e:aa:c0:59:
8e:f8:cc:5e:8d:eb:a4:62:b7:da:74:fa:2c:a6:15:
3a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:53:F3:C6:62:40:01:19:9A:1B:67:92:AB:FB:61:D1:B0:73:7C:B7
X509v3 Authority Key Identifier:
keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:72:0c:5f:e0:f9:18:e4:45:3c:b6:cb:b3:4b:ef:b9:a6:ac:
7e:2e:fd:a4:4e:28:88:c7:5d:00:6d:98:e1:5b:ab:b1:8c:14:
f8:00:6f:32:11:a1:ec:b9:d9:2e:2d:7b:12:d7:67:6c:ce:08:
2b:a6:72:88:4d:cb:d5:47:1a:42:0d:b8:5d:1a:18:61:ae:fe:
12:86:c4:72:e1:11:89:40:97:00:b9:c2:49:27:53:71:6e:b3:
cb:8a:58:66:aa:55:ca:35:1c:71:cb:fc:0a:40:a7:57:3c:42:
7f:c3:05:4b:23:bc:06:d5:a1:25:b2:42:d5:15:a2:cc:f3:91:
fc:a1:35:a0:16:94:a5:fb:8b:ee:24:11:93:cb:39:83:6e:55:
73:90:ec:27:b4:6f:af:53:21:69:20:69:d9:96:71:85:a2:d5:
40:51:59:2a:43:ff:f3:1b:c5:d5:66:83:9b:52:aa:80:b0:27:
b7:db:fc:61:9d:68:14:6f:24:19:55:61:95:59:5d:b3:35:2c:
f4:00:39:b8:ad:8d:0f:c2:30:a8:89:4d:3e:11:34:f4:63:6e:
bc:53:5a:1e:76:25:dc:0a:bb:64:14:bd:56:65:a8:34:41:72:
6f:81:17:d7:fb:79:ed:da:89:56:f1:83:b2:83:e5:09:9a:a2:
9f:6d:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:23:33 2026 by rpki-client