Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: QE6lzQ92fpHUAxFHvhsNcjbm1bbtrQJLmmRYT0i8KXM=
Subject key identifier: 25:0C:BB:5E:22:C3:4D:C4:95:A4:DB:9E:D6:62:D5:09:EF:25:CA:E2
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 01A0EA409D0125E229EDF02C813865A84834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 089B
Signing time: Mon 28 Sep 2026 23:01:37 +0000
Manifest this update: Mon 28 Sep 2026 23:01:37 +0000
Manifest next update: Tue 29 Sep 2026 23:01:37 +0000
Files and hashes: 1: hS5Y9HzX910k9UpkCXgXK-DSHdc.asa (hash: 3kQjrGqXqHnzL6l9Be46QjhfSNn8qYwPe+6rsfQM6lE=)
2: sQDcvzwfINZL1YKhOjuNrTumwws.roa (hash: 1SADRpnWZPKf4KWSJGPvG1rU1NGMXTSVZgSGEdq16/Q=)
3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: ZmurSKUuzvtFIzUdJT25gSfuVMBStW1xnmD0YEGsj7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:9d:01:25:e2:29:ed:f0:2c:81:38:65:a8:48:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Sep 28 23:01:37 2026 GMT
Not After : Sep 29 23:01:37 2026 GMT
Subject: CN=250cbb5e22c34dc495a4db9ed662d509ef25cae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:2b:3c:c3:96:ca:32:3a:7f:b8:5b:95:66:
ba:7e:3f:60:40:99:47:0c:9f:af:64:63:f4:fa:b3:
cd:c9:40:a0:54:c4:40:50:12:d3:12:b0:82:94:3b:
64:ca:18:73:84:52:34:04:da:22:33:0d:a6:6e:08:
22:2b:2a:c4:ba:89:b8:21:2f:33:ca:3f:0c:17:62:
50:61:07:2f:21:42:1d:71:68:26:cc:ef:ac:6b:8f:
74:c8:8e:d5:32:b0:57:af:5f:2f:d3:ca:31:fc:62:
67:4c:c1:57:23:37:9b:4c:ff:8c:03:3c:63:b5:df:
29:e3:3d:4b:26:a0:32:ac:9a:64:b3:00:10:f8:ba:
f7:97:96:d4:58:d6:d5:0e:e7:8b:c9:bc:7b:87:0a:
39:d8:9b:fc:80:28:30:72:07:20:60:d3:a5:b9:7f:
ce:fa:31:c6:d7:aa:76:49:1a:e9:a8:3e:c2:8c:36:
dc:b2:59:73:c2:7c:12:2a:ed:8a:a3:49:a5:f5:e2:
46:99:ea:4a:84:c8:1a:8c:9b:25:aa:19:18:f3:d5:
89:5b:4f:bc:2b:44:5b:57:54:85:9e:1e:45:02:bc:
ed:7d:9e:07:d6:59:26:57:5d:5d:e3:28:0f:f2:c3:
48:0b:02:0a:70:7f:c1:a0:1d:5d:59:ed:58:4b:02:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0C:BB:5E:22:C3:4D:C4:95:A4:DB:9E:D6:62:D5:09:EF:25:CA:E2
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:20:f1:40:ce:d4:e9:53:7b:d1:62:cb:9b:e1:e1:6b:49:32:
b4:6e:ca:7b:07:62:3b:f2:75:86:de:75:3e:4a:8a:60:bc:32:
e3:f0:3f:f9:3f:1c:ac:93:42:54:f1:6c:98:df:eb:79:d3:8c:
81:43:8e:fa:c8:8d:92:b6:eb:05:1f:d6:ad:f1:f7:27:e3:da:
0e:ae:69:46:5e:7a:63:40:1c:ea:7b:8a:d8:e2:9f:7a:38:7b:
f2:53:d7:ba:59:42:34:c6:cc:79:ca:f8:22:46:fb:94:ec:2a:
64:90:44:31:8d:23:67:59:8a:9b:67:65:57:d4:e6:30:22:cd:
4a:69:f7:6d:54:37:04:7b:a6:3a:87:a2:1a:2a:03:f2:54:30:
94:0a:45:59:be:a3:ee:51:90:e8:48:2f:72:25:7d:a4:50:1f:
f8:5b:d3:16:c0:4b:69:12:63:43:8a:bb:5d:3f:18:7d:e2:ce:
76:32:1f:bb:d3:f8:6d:b6:8d:e4:59:0b:ac:f3:bc:2f:57:f6:
9e:90:00:d0:fb:47:16:d4:ff:93:4e:74:a9:9f:db:be:a9:63:
03:e1:b5:4e:41:8c:e4:82:ab:a4:c4:ed:97:68:b7:d0:f2:17:
96:9a:3a:e8:5b:f7:ce:10:71:d7:d9:43:28:79:c9:e1:11:ae:
54:06:cc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:13:21 2026 by rpki-client