Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
File: ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft (raw, json)
Hash identifier: 3UvOTHgWb8Mf70T8rTYPCsmpqlIVz3BRtrwbjG/UG08=
Subject key identifier: 25:76:2D:09:9D:37:3C:9A:F4:0D:42:30:4E:62:AA:E3:17:F4:52:79
Authority key identifier: 66:59:D0:20:7D:89:6B:18:28:29:22:AE:EF:6B:47:2B:78:8F:94:32
Certificate issuer: /CN=6659d0207d896b18282922aeef6b472b788f9432
Certificate serial: 01A0EDE6EB5E102979775532D0AAEB4DDDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
Manifest number: 43
Signing time: Tue 29 Sep 2026 16:02:08 +0000
Manifest this update: Tue 29 Sep 2026 16:02:08 +0000
Manifest next update: Wed 30 Sep 2026 16:02:08 +0000
Files and hashes: 1: IIpkiT0DsKtry5SfDibaOaf5Gmc.asa (hash: piz50WCwexz+zSmea8jYzJEYb2s6Vf251Ay/agIa33g=)
2: ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl (hash: FAwxYrAPPX02lgBsD3wIP0dyt3VYA1smSNkjvI+GZtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:eb:5e:10:29:79:77:55:32:d0:aa:eb:4d:dd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6659d0207d896b18282922aeef6b472b788f9432
Validity
Not Before: Sep 29 16:02:08 2026 GMT
Not After : Sep 30 16:02:08 2026 GMT
Subject: CN=25762d099d373c9af40d42304e62aae317f45279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:f5:91:f6:7e:a2:1f:84:7f:96:f0:74:f8:
4b:3c:c6:8b:4a:88:37:90:e9:4c:6d:28:1f:cb:eb:
a4:08:4a:b0:6a:e6:33:b5:c6:8b:22:63:96:6f:3c:
5c:6e:59:3e:d0:7e:6f:93:b8:05:db:7f:1c:77:b6:
9b:df:b2:19:9f:27:de:a7:dd:b7:79:0b:dd:f3:97:
65:f4:59:41:a4:e3:08:e3:00:ff:db:2b:91:c9:49:
4c:d4:09:df:f7:de:18:86:5a:ad:2e:b0:57:57:7f:
f6:c9:39:b9:15:96:29:82:a2:00:36:17:93:75:ea:
ad:01:56:3a:b0:47:95:f8:7c:78:64:e6:73:36:d1:
ac:79:05:e8:e1:bc:5f:20:73:1a:30:4f:ba:43:b5:
ac:e8:b4:4b:7f:16:5e:fb:6c:8f:e5:bc:46:ea:4d:
a6:df:2a:ed:67:cc:fb:53:d2:10:11:93:70:0e:b5:
bc:53:85:a1:5d:df:bc:ca:c3:01:d2:2a:58:c2:b8:
ae:cf:56:c7:c3:0d:51:5b:d3:cc:94:9d:ac:ec:23:
5f:87:dc:31:19:08:d3:b4:16:bf:a0:2d:01:ce:f8:
42:bc:d7:e7:48:82:2f:ca:60:2e:83:57:24:67:e3:
bf:34:b6:d2:40:ec:59:5e:0b:f8:d0:1b:30:a1:df:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:76:2D:09:9D:37:3C:9A:F4:0D:42:30:4E:62:AA:E3:17:F4:52:79
X509v3 Authority Key Identifier:
keyid:66:59:D0:20:7D:89:6B:18:28:29:22:AE:EF:6B:47:2B:78:8F:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bb:6d:1d:5a:0f:6c:d9:d1:16:7a:62:7d:86:95:dc:7e:eb:
13:2e:1d:3d:4f:9c:e4:ec:eb:69:0a:67:d3:7a:34:11:75:e8:
5e:fa:97:03:37:f9:ed:6f:a2:54:40:3d:a6:b5:41:e4:1e:6b:
c5:78:7b:f1:b0:51:51:b0:2d:b6:35:f3:99:52:5b:9e:6d:63:
3b:e3:3c:83:e8:ac:10:d0:93:cf:57:2a:92:a2:74:94:5b:c5:
5b:b1:a5:9c:ab:91:74:88:ad:37:f7:99:2c:0e:22:26:6e:41:
f0:fb:79:20:61:ec:f2:ef:52:43:b0:9b:03:8e:e9:1e:57:0e:
3f:79:6f:ce:d3:7d:64:23:34:ff:b1:6c:7b:17:18:e2:d0:2c:
03:e5:2d:4a:18:4f:98:03:d3:da:72:5e:f6:f2:8b:25:81:0b:
42:d2:9f:90:cc:86:38:bc:94:17:2b:15:da:3e:eb:e9:d4:1f:
50:78:10:7a:6c:bb:d7:ef:45:2d:f4:80:7f:3d:b3:4d:46:c1:
e7:75:92:8a:46:80:97:36:fd:f2:81:ae:40:a7:7f:40:8f:6c:
97:17:59:46:46:4a:b3:a1:eb:4d:6b:0e:19:91:86:25:b0:18:
ad:86:cb:ad:ff:1f:3c:51:c9:02:75:89:86:e1:47:74:c8:1c:
52:61:66:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:58:41 2026 by rpki-client