Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: TXM0TgR+wL+P4dXYdkRz41Hf5As9Gd28JfdyWWncC8I=
Subject key identifier: 78:FA:57:52:13:BD:7F:93:60:F0:68:A1:DD:6D:9D:06:70:91:A2:05
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 01A0D5029450FBA08745C6B80CD09FBC9328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 20:01:51 +0000
Manifest this update: Thu 24 Sep 2026 20:01:51 +0000
Manifest next update: Fri 25 Sep 2026 20:01:51 +0000
Files and hashes: 1: D4uyY53Lmy1XuEBR8gb-mU5orsY.roa (hash: 8oSSSK/7hQ8ikVIjak5cGWlYgkzTSsHj01P8F5aOk0c=)
2: _-wZGwfKC4JuWvajehhHWsCMKV0.roa (hash: d+1R/IWP3rQJYixIA4F2RI4IuR3jIDKC1rUEN0I2u8s=)
3: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: N3qqH9xdza4UWFz6+I2Vksy7cOcIk1HITibntm6N4aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:94:50:fb:a0:87:45:c6:b8:0c:d0:9f:bc:93:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Sep 24 20:01:51 2026 GMT
Not After : Sep 25 20:01:51 2026 GMT
Subject: CN=78fa575213bd7f9360f068a1dd6d9d067091a205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:dc:af:bd:65:f5:6f:80:f8:85:66:b9:b2:
cd:2a:eb:de:1b:ca:9e:e8:18:83:c7:84:80:fa:2b:
ed:d5:08:e8:ed:72:d1:13:a7:6b:18:82:30:56:29:
d8:41:ac:b7:7d:93:1f:90:5b:d3:5a:6c:40:bd:c1:
de:64:9b:7c:7a:8b:8d:c0:36:ad:1d:6b:10:3e:b6:
5d:be:9c:2e:c4:23:6d:43:31:5b:67:5e:f4:e1:ed:
72:c9:29:06:e6:a4:88:54:b0:2b:7c:70:35:cd:39:
cb:56:90:69:3d:fc:6b:b6:be:7d:08:ea:ae:69:b7:
03:dd:f5:c8:98:8d:5e:1f:a7:c8:65:a5:fc:30:2e:
4c:0a:18:17:26:ad:fc:3b:e4:7b:ef:cb:45:90:a5:
b6:48:71:c0:05:b3:34:a4:97:c1:3b:99:49:60:c0:
f5:2e:73:c1:f3:84:43:5e:90:79:4f:5a:e8:2f:3d:
bd:fa:56:09:fb:cb:2d:29:4d:0d:f9:9f:86:11:50:
df:eb:4b:80:2e:f4:46:03:01:68:8d:4a:cb:43:27:
53:fd:04:5e:db:a7:e8:b9:a6:b8:b2:d7:19:70:a1:
5a:6b:ac:9f:62:35:1a:8b:4c:13:0d:a7:54:2a:af:
74:98:cd:b1:3b:c1:b7:2d:65:89:95:39:ee:24:07:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FA:57:52:13:BD:7F:93:60:F0:68:A1:DD:6D:9D:06:70:91:A2:05
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7b:f3:15:8a:07:bc:66:39:dd:2a:28:cc:c7:9b:70:ca:b2:
2a:48:cb:72:fb:2e:f4:0e:b0:fa:4f:d0:56:b9:93:6f:89:83:
e1:35:57:a6:2b:23:c9:6d:3c:dd:16:6b:f8:c4:ae:2c:02:11:
09:e6:f1:fd:4d:9b:5b:e6:0d:b7:67:00:15:a6:6f:80:24:20:
e2:24:f6:5f:c7:08:46:7a:d3:33:49:71:0c:e2:ab:c3:23:1c:
1b:7b:88:c6:f1:b8:c0:a1:cc:85:93:bc:58:cc:f0:bc:c1:96:
9a:1f:5d:21:24:1c:32:2b:f3:12:e7:b2:12:40:1e:74:31:9e:
84:d8:9c:b3:e9:35:58:48:f7:ec:37:80:e7:c3:bb:52:55:00:
92:8d:21:51:a5:be:6c:2e:fb:37:c9:6d:41:11:50:6c:44:75:
aa:50:59:6f:16:f9:1c:3d:cb:7b:e6:d4:1e:5d:aa:02:c4:b3:
73:5f:7e:cc:22:48:c0:19:2f:7c:ec:32:0a:8c:fd:cb:2f:18:
ea:33:b0:87:f4:a8:85:8f:ff:95:bb:18:76:4c:3c:64:20:3e:
9a:58:1e:ed:59:1d:ea:84:5d:7b:69:b4:64:b0:43:6a:5d:e3:
3c:16:2d:a8:5b:47:c9:7a:1d:48:fa:05:9d:9c:7e:b0:15:31:
27:c3:9f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:09:32 2026 by rpki-client