Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
File: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft (raw, json)
Hash identifier: na7qnB9OULSks2LXPKTilqoVqSh9Het7RiFB+S1Vecw=
Subject key identifier: 54:5F:A6:84:6C:D9:73:14:77:EF:C4:7D:02:A1:A8:6E:CC:11:81:7E
Authority key identifier: D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
Certificate issuer: /CN=d191557a20d3299613c702e9993e9d59c39b4708
Certificate serial: 01A06E712B0FF3C606CF4A797D008B99DBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
Manifest number: A4
Signing time: Fri 04 Sep 2026 22:01:45 +0000
Manifest this update: Fri 04 Sep 2026 22:01:45 +0000
Manifest next update: Sat 05 Sep 2026 22:01:45 +0000
Files and hashes: 1: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl (hash: pGFnseQHoAxwJoKy2nUpMYYTIl37N5iKV5P1T28G+/A=)
2: sxcdm8hMPFs7hwfFtctneyGAbtY.roa (hash: qSfMKSLLYHXoos50NdW6B+8JG0v//N7ZW2DTOD6cmAA=)
3: zKunQbH1Pi1kuPKcXi66B2kK2GE.roa (hash: IW2iL6xlGt6vOJU5K2L4rfi0KiuOBllyiIH+ctseSa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:2b:0f:f3:c6:06:cf:4a:79:7d:00:8b:99:db:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d191557a20d3299613c702e9993e9d59c39b4708
Validity
Not Before: Sep 4 22:01:45 2026 GMT
Not After : Sep 5 22:01:45 2026 GMT
Subject: CN=545fa6846cd9731477efc47d02a1a86ecc11817e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:27:56:43:fa:c7:86:56:58:69:a9:9b:5d:
10:e5:24:46:7f:76:82:a2:2e:9c:db:ef:e7:d9:75:
5e:12:ea:c7:f8:c9:76:72:b9:09:1d:2e:11:5d:21:
f4:f2:6f:d4:9e:a4:fa:a8:63:5d:fa:32:a2:5b:18:
e1:b8:28:0e:69:f4:b0:68:98:55:12:9d:1f:37:9b:
55:95:5b:44:c2:a1:d8:7a:eb:6b:9f:97:ac:6b:02:
35:a4:78:39:46:d5:00:58:df:72:b4:27:53:b0:fa:
fc:13:e3:5e:20:9e:59:09:84:17:ae:23:94:9b:56:
11:cb:66:4d:a0:ed:14:61:d5:a0:90:1f:af:67:7a:
3a:55:01:ec:4b:46:45:8f:ca:7c:69:98:81:da:c8:
ec:da:95:7e:b1:2d:54:ad:0c:11:dd:13:dd:cc:65:
68:01:f7:39:74:d4:e8:dd:56:53:04:a7:05:4d:c7:
a0:3b:a6:82:7d:d3:fa:9a:32:38:0a:a8:42:9b:33:
3d:9f:82:b0:1c:7a:6d:b8:54:26:ff:9a:b3:ff:69:
bb:3c:2f:0a:2f:de:90:d9:f4:cb:0b:1b:76:47:30:
b5:57:3a:60:23:56:1a:8c:7d:81:8d:6e:d6:b7:21:
3f:58:b9:4b:9b:71:92:23:99:a1:cf:ac:40:99:d9:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:A6:84:6C:D9:73:14:77:EF:C4:7D:02:A1:A8:6E:CC:11:81:7E
X509v3 Authority Key Identifier:
keyid:D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:46:49:bc:69:3a:8c:10:7e:8f:24:e0:7a:d8:fb:8c:ef:8b:
0a:b3:6c:9a:9d:ea:e9:53:e6:cc:28:4f:9e:e0:12:2c:b1:6c:
e3:bd:2b:4b:65:6d:71:20:01:5e:85:a9:b6:35:e2:51:9a:c6:
59:eb:87:8b:b3:07:e8:29:7d:6e:a9:dd:16:f9:42:0d:db:d3:
ee:db:02:48:27:c1:9f:82:bf:e2:01:67:8f:6d:c8:cb:e2:4f:
7d:59:ce:f9:46:db:92:62:44:29:f2:1f:34:fc:7b:68:a1:22:
e1:3b:8f:0d:5b:db:a9:17:ba:9f:34:34:64:f4:4f:b5:29:25:
95:e0:9a:26:d7:b0:12:2a:26:27:ff:71:33:fe:d3:13:7b:93:
7e:c5:db:2c:f9:1f:7c:13:eb:ea:91:c0:6d:45:a8:64:ca:b0:
10:e7:d5:98:bc:d9:91:a1:1a:df:eb:0f:97:40:ee:af:62:03:
60:14:35:27:a7:3f:42:00:42:46:be:50:cc:b0:1a:5e:ab:09:
93:bf:4a:fc:56:45:a8:ac:6b:c7:ca:9c:ff:b4:4c:e5:ad:9b:
eb:85:71:23:5c:c7:18:84:31:27:62:41:59:ef:16:9a:dd:7c:
40:03:78:ba:3a:fe:1e:28:22:f0:87:c1:4f:ba:9a:56:de:0f:
2b:88:b4:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBucSsP88YGz0p5fQCLmdvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTE1NTdhMjBkMzI5OTYxM2M3MDJlOTk5M2U5ZDU5YzM5
YjQ3MDgwHhcNMjYwOTA0MjIwMTQ1WhcNMjYwOTA1MjIwMTQ1WjAzMTEwLwYDVQQD
Eyg1NDVmYTY4NDZjZDk3MzE0NzdlZmM0N2QwMmExYTg2ZWNjMTE4MTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquUnVkP6x4ZWWGmpm10Q5SRGf3aC
oi6c2+/n2XVeEurH+Ml2crkJHS4RXSH08m/UnqT6qGNd+jKiWxjhuCgOafSwaJhV
Ep0fN5tVlVtEwqHYeutrn5esawI1pHg5RtUAWN9ytCdTsPr8E+NeIJ5ZCYQXriOU
m1YRy2ZNoO0UYdWgkB+vZ3o6VQHsS0ZFj8p8aZiB2sjs2pV+sS1UrQwR3RPdzGVo
Afc5dNTo3VZTBKcFTcegO6aCfdP6mjI4CqhCmzM9n4KwHHptuFQm/5qz/2m7PC8K
L96Q2fTLCxt2RzC1VzpgI1YajH2BjW7WtyE/WLlLm3GSI5mhz6xAmdnFJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRfpoRs2XMUd+/EfQKhqG7MEYF+MB8GA1UdIwQY
MBaAFNGRVXog0ymWE8cC6Zk+nVnDm0cIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpGVmVpRFRLWllUeHdMcG1UNmRXY09iUndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80MzljYjctNGEzNi00MjVlLWEwODQt
ZGNmOGFlOTI0OTkzLzEvMFpGVmVpRFRLWllUeHdMcG1UNmRXY09iUndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80MzljYjctNGEzNi00MjVlLWEwODQtZGNmOGFlOTI0OTkz
LzEvMFpGVmVpRFRLWllUeHdMcG1UNmRXY09iUndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEZJvGk6
jBB+jyTgetj7jO+LCrNsmp3q6VPmzChPnuASLLFs470rS2VtcSABXoWptjXiUZrG
WeuHi7MH6Cl9bqndFvlCDdvT7tsCSCfBn4K/4gFnj23Iy+JPfVnO+UbbkmJEKfIf
NPx7aKEi4TuPDVvbqRe6nzQ0ZPRPtSklleCaJtewEiomJ/9xM/7TE3uTfsXbLPkf
fBPr6pHAbUWoZMqwEOfVmLzZkaEa3+sPl0Dur2IDYBQ1J6c/QgBCRr5QzLAaXqsJ
k79K/FZFqKxrx8qc/7RM5a2b64VxI1zHGIQxJ2JBWe8Wmt18QAN4ujr+Higi8IfB
T7qaVt4PK4i0Uw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:54:48 2026 by rpki-client