Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: OXNFtDVKvrX6kA8D1X2SiDhuXODI0dw3FotSTYnT57o=
Subject key identifier: F4:A0:04:ED:E2:4A:D2:D7:3E:BB:D3:5A:A0:24:08:03:D3:B3:A0:8A
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 01A0D83BF84BD32ADD429D93D2349D68CB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0A84
Signing time: Fri 25 Sep 2026 11:03:23 +0000
Manifest this update: Fri 25 Sep 2026 11:03:23 +0000
Manifest next update: Sat 26 Sep 2026 11:03:23 +0000
Files and hashes: 1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: x7EKUKS7oqYFWMY8SRNSAF08GqWZ5RQ1O9F4o4ZASXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:f8:4b:d3:2a:dd:42:9d:93:d2:34:9d:68:cb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Sep 25 11:03:23 2026 GMT
Not After : Sep 26 11:03:23 2026 GMT
Subject: CN=f4a004ede24ad2d73ebbd35aa0240803d3b3a08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:6d:9a:53:43:86:7a:3e:2c:9c:e5:bd:31:
f4:f9:4d:a5:6a:87:7a:e3:18:23:31:e1:28:b3:8d:
de:1c:3a:de:1f:30:ae:a4:24:bf:a4:34:ef:4f:e8:
c0:51:29:cf:f6:91:34:42:b7:57:ed:9a:5d:86:bb:
1c:46:1a:c3:07:75:91:59:4f:24:e8:16:55:3d:96:
41:37:ef:ca:01:43:53:92:d0:fd:64:1f:11:80:6f:
ff:5f:b2:78:0a:88:4c:41:e3:82:50:65:dd:c3:5b:
b3:87:de:0d:25:0f:5c:3c:04:36:96:66:6d:e9:b0:
02:32:77:be:58:73:2d:12:d2:a7:97:7f:a0:7c:26:
f2:7f:19:58:c6:aa:72:58:df:2e:21:1f:a5:c9:94:
f5:87:44:34:af:9a:95:16:97:78:c6:d7:56:61:35:
d7:5b:f3:5a:80:b8:c3:da:8c:4f:cd:7a:94:97:0f:
1f:53:09:98:ec:28:33:e0:51:8e:d6:fa:1b:41:88:
d1:8c:b4:e2:f0:f4:e4:e7:eb:ef:84:f0:25:1b:b6:
c0:22:a2:94:6c:45:6c:e8:f6:60:82:35:02:d8:10:
a8:ec:be:e9:6d:90:75:32:16:1a:de:04:04:83:13:
45:a1:7b:67:c5:46:e9:25:a8:e9:f5:ad:d7:23:68:
27:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A0:04:ED:E2:4A:D2:D7:3E:BB:D3:5A:A0:24:08:03:D3:B3:A0:8A
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e4:6f:7f:cb:6f:a2:6b:f3:25:27:79:64:90:27:26:89:43:
d2:20:84:4a:5f:4c:0e:ab:5d:7e:bd:96:0b:1a:26:fb:51:5b:
59:b8:82:23:4d:a5:91:96:79:1f:70:36:3a:74:3b:4f:bb:64:
9e:93:69:07:8c:1f:11:1b:4c:8b:1c:25:d8:cc:68:d3:f6:a9:
21:6d:92:08:ab:ac:ba:73:98:24:11:a9:66:20:c1:07:a7:94:
64:e1:d5:7d:3f:25:6f:a8:24:4d:20:40:13:99:6f:c6:37:36:
6d:43:19:17:24:ee:dd:43:8a:d0:8e:ff:73:f6:3c:3e:17:ea:
97:77:65:ae:97:64:59:c1:dd:45:ec:72:22:16:a6:d7:b4:f8:
c7:56:39:39:c4:90:a4:64:4f:d4:08:ed:0a:d3:47:1f:1b:45:
8a:ff:90:d6:da:65:a5:e6:41:81:fe:1f:13:47:a7:3f:94:5e:
21:3e:1e:4d:03:cb:a1:55:fe:08:61:78:95:c9:d7:a4:c2:04:
99:5c:82:9f:e2:49:bf:e8:28:21:52:ad:a9:b6:f9:46:78:4c:
3c:b6:0f:76:14:5a:02:77:ce:00:0b:65:eb:12:ce:83:2b:6e:
ff:13:15:63:57:ad:4b:30:8e:0e:a3:91:94:c2:60:80:04:76:
28:13:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:37:26 2026 by rpki-client