Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: smROEU1anL0dtaKISBcjZRSEqUt7H4uwtQkstcHCv8A=
Subject key identifier: F7:D7:B7:0E:72:0E:3A:22:5A:BF:5F:AA:B7:01:16:44:C6:5A:32:88
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 01A0D6F0A02119CF93A21D91DBB311021C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 1ABB
Signing time: Fri 25 Sep 2026 05:01:28 +0000
Manifest this update: Fri 25 Sep 2026 05:01:28 +0000
Manifest next update: Sat 26 Sep 2026 05:01:28 +0000
Files and hashes: 1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=)
2: ZRWcaFP2lNAESYX_mW0VBxZBTAc.asa (hash: 3/7iwA3UKTDGkjOa2IbhOlBaTEtOKBbyoubltpbAgRk=)
3: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=)
4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: 5Tz7LTvMPVFwQTTDjpKB7Yo3Ii/4x9DTjndQTNk9zQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:a0:21:19:cf:93:a2:1d:91:db:b3:11:02:1c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Sep 25 05:01:28 2026 GMT
Not After : Sep 26 05:01:28 2026 GMT
Subject: CN=f7d7b70e720e3a225abf5faab7011644c65a3288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:eb:2a:84:90:da:eb:0c:1f:22:5b:c0:81:
41:0a:d7:e8:45:df:3b:60:57:5e:f5:a7:2c:10:3b:
ab:66:5b:50:8e:0a:06:03:13:3c:2c:9d:f9:08:f3:
23:a8:2c:49:88:69:02:20:f2:1c:88:26:38:84:04:
a8:65:ac:37:32:6d:ee:93:48:ac:12:1f:34:92:8c:
4f:7b:87:45:17:61:55:73:d1:3d:fe:c8:f7:5d:67:
db:77:10:a2:29:38:8a:5f:bb:57:0f:5e:59:9c:6e:
43:4e:57:c9:5c:bc:ab:f1:d4:7b:7f:f8:bd:5f:63:
2a:55:08:0d:b4:ab:d3:a2:b1:30:3d:f5:89:e8:24:
ce:00:96:2e:e5:47:aa:52:49:87:fb:a7:27:2e:b7:
c2:c2:fb:05:e1:15:33:33:7e:3e:88:b5:35:78:d2:
33:5a:dc:4e:09:61:53:92:1d:90:16:10:69:02:7b:
f5:2d:66:b8:32:06:5c:7c:e5:03:88:c9:0d:1f:cb:
9a:96:c1:03:9c:6b:33:05:d3:ce:6b:91:d4:37:23:
a3:7e:ca:87:23:1e:7d:44:44:36:14:4d:6c:f9:88:
b9:15:e2:6f:05:a5:7e:92:51:2a:e5:69:61:0a:be:
e8:d9:0b:e8:14:9f:c6:03:4e:37:5e:06:3f:75:c0:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D7:B7:0E:72:0E:3A:22:5A:BF:5F:AA:B7:01:16:44:C6:5A:32:88
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:52:75:e5:2b:df:97:58:dc:cf:e3:ab:1e:c6:16:3b:37:13:
2f:42:d6:0b:4a:9b:ab:91:c9:6a:47:db:83:58:d8:d9:bf:0f:
09:34:94:e7:08:ac:bc:1d:9e:a6:85:4a:5f:86:23:bb:1b:e5:
97:49:48:fc:22:19:89:0c:01:d3:56:9d:86:87:28:8e:0a:c1:
9b:cd:0a:4b:af:2a:ac:48:9d:b3:5a:eb:38:7c:85:69:e3:57:
27:ac:31:e1:0c:0d:e7:fb:9e:48:b9:d2:29:6e:f8:9e:00:2f:
3d:9e:b8:e8:c4:79:b1:d9:f9:74:1c:db:a9:2e:db:c2:55:1b:
96:1e:67:3c:ed:2a:a7:ae:45:ab:2c:ea:4a:c9:29:3a:77:7f:
b6:be:34:9a:88:4b:15:e9:53:aa:2c:7a:c0:85:9a:f7:5b:e3:
79:ac:e7:e5:5c:38:8e:8e:65:9b:96:43:1f:15:cb:93:bd:bd:
8c:b8:64:7d:2b:7e:81:f9:eb:c0:c4:e2:a6:db:a3:c5:ad:59:
92:7e:81:af:21:82:a1:f7:18:bf:0e:0c:4f:9c:4a:3d:53:f3:
8d:53:05:e0:7d:74:4b:da:7a:d2:bb:f7:cf:a6:2b:fa:14:54:
25:3a:07:74:14:60:f7:9b:25:86:f6:96:08:90:cd:48:74:ce:
80:4d:61:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:32:53 2026 by rpki-client