Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: 2qROXiO0v3UzDUpxuZ0UR5t5O3NooAPhq2bSp/Na9PU=
Subject key identifier: D2:E8:93:66:57:D7:2F:DB:9A:EF:C1:71:44:6E:08:E7:05:96:B7:24
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 01A104A485ABBDBE18A5BA3EDB0C21A573FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 0A37
Signing time: Sun 04 Oct 2026 02:00:53 +0000
Manifest this update: Sun 04 Oct 2026 02:00:53 +0000
Manifest next update: Mon 05 Oct 2026 02:00:53 +0000
Files and hashes: 1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: t/W4hIPDFWaCeCDg8cqt5yUD3WhbcubOZ+pZXYDVE8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a4:85:ab:bd:be:18:a5:ba:3e:db:0c:21:a5:73:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Oct 4 02:00:53 2026 GMT
Not After : Oct 5 02:00:53 2026 GMT
Subject: CN=d2e8936657d72fdb9aefc171446e08e70596b724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:93:84:99:c2:d7:a4:44:fd:f5:47:4d:f1:
6c:19:7f:c6:46:0f:b9:26:06:6f:bf:68:fc:d1:01:
32:22:d2:fe:ed:96:89:67:3e:40:c3:f7:52:d7:d2:
47:87:e9:37:2d:7e:b7:0e:66:1a:c5:53:f6:2b:df:
1f:51:22:dd:e4:6e:9b:be:2a:0f:e8:38:9e:58:59:
2f:25:3a:e0:d8:a3:bf:cf:5e:09:3a:8f:db:c5:88:
33:38:f6:9c:13:1b:68:b4:95:be:b2:74:10:ea:31:
5f:5d:ba:40:42:42:24:11:b6:77:e8:da:0e:9a:24:
9f:c6:90:60:c0:64:e5:bb:22:b6:9e:30:4b:85:dc:
9c:9c:7e:c7:01:b9:41:95:3b:f6:2e:74:d9:5c:87:
37:9a:58:e4:9d:e9:19:59:f6:2e:11:5e:e7:ca:dc:
4c:47:bb:8d:df:59:f8:21:bb:2e:3a:22:43:64:a1:
31:db:95:b9:2f:99:12:55:bb:77:9a:88:2e:36:bc:
f8:6b:9f:c5:2a:39:e8:a5:d3:86:32:1e:24:4a:f0:
26:ff:e0:0e:9b:a6:6a:1e:f8:17:89:20:47:12:c4:
76:f9:29:69:86:fb:c0:66:a8:3e:ab:9e:d7:0d:cb:
3c:34:6b:60:d3:9a:8e:23:d1:e8:3d:cd:5c:cc:3a:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E8:93:66:57:D7:2F:DB:9A:EF:C1:71:44:6E:08:E7:05:96:B7:24
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8b:08:ca:b3:15:56:87:1a:bd:d0:5c:3f:96:79:55:ca:3b:
06:8a:0b:52:75:d5:d7:76:fd:82:0e:90:57:74:e6:cf:2d:a5:
e5:e4:87:41:5e:98:20:ac:58:af:88:66:da:29:29:7e:21:72:
d0:42:1a:52:b0:de:0a:09:23:c6:44:e0:22:49:b2:12:9f:e1:
e4:73:fe:fb:f6:31:44:07:9c:62:e5:67:a8:01:03:fd:50:78:
c7:5c:c4:b7:1a:27:66:d2:ff:02:89:ec:44:71:ea:a3:1d:4d:
e5:d8:3b:7c:13:61:b3:27:9f:19:f0:a8:83:26:9a:e3:d1:b2:
2d:9c:e2:8c:9f:69:31:9e:52:78:92:8b:48:14:54:82:55:12:
7c:8d:1a:6c:7f:cb:40:83:6b:bd:5d:3f:d7:1f:90:4d:db:c7:
7f:fb:76:38:bd:6f:03:85:b8:29:7a:6c:bb:f6:6c:c1:07:c9:
09:81:2f:a6:7a:3c:5f:92:3f:7c:87:dd:bb:69:1e:79:ba:57:
e5:eb:da:95:bd:19:e4:df:54:24:74:cd:4b:c5:66:35:3b:0d:
35:67:0c:f6:85:4e:ef:15:d2:61:06:42:96:87:43:87:df:b4:
26:c2:4b:8e:17:56:70:b0:24:6f:0d:bd:b6:a4:bc:29:75:83:
02:e7:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:48:45 2026 by rpki-client