Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: JM/jHoarQMHlPw2nCxfVTaPfloDeS5Z8Oy9M4opQ5ZE=
Subject key identifier: 87:4B:B3:CE:31:E6:64:E0:C7:16:BF:52:E6:44:C1:F4:24:30:DF:A0
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 01A06FF1C64D25474224632E19AC3FE551C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 13B8
Signing time: Sat 05 Sep 2026 05:01:50 +0000
Manifest this update: Sat 05 Sep 2026 05:01:50 +0000
Manifest next update: Sun 06 Sep 2026 05:01:50 +0000
Files and hashes: 1: a0kN2gfK01wMuqhoW-MZjPAbstc.roa (hash: mmiujuewrIIcuNRFw3juwDDGpDhJAvUuobcjAggyfUE=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: /mBLiuVQjKKXfu4fg/1cnpW/P1YGxuRBOia2i/x6z0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:f1:c6:4d:25:47:42:24:63:2e:19:ac:3f:e5:51:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Sep 5 05:01:50 2026 GMT
Not After : Sep 6 05:01:50 2026 GMT
Subject: CN=874bb3ce31e664e0c716bf52e644c1f42430dfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a8:b4:60:1d:d8:5c:3d:1a:64:c9:99:7f:74:
ad:a7:a3:d0:29:ae:14:c2:71:4e:59:13:d2:03:19:
ac:71:a1:5c:ce:a9:a6:03:4f:7f:a1:5c:69:67:ef:
2f:95:99:ca:c9:ef:9c:c1:c6:37:e5:80:90:08:07:
32:62:55:89:e7:f8:c1:b2:88:7e:b7:90:9e:34:9f:
f5:68:f4:e1:53:c0:99:5b:24:e7:ab:e2:83:76:91:
27:b3:e4:4c:14:84:53:20:f2:c7:1f:9f:e5:26:47:
b7:8f:9d:4c:d1:f2:04:2d:44:8a:37:da:5f:92:10:
b2:91:9d:75:3b:f2:9a:c3:e3:9d:ef:68:c1:2e:bc:
0e:c2:4e:4f:5d:c3:94:17:00:cd:2f:03:d6:58:0b:
57:f5:9f:06:5c:25:f0:7e:1c:85:fa:b4:2b:ee:1b:
ae:cb:de:02:0d:ae:d6:6e:3d:27:ac:54:56:72:bf:
e9:36:93:6a:ae:29:69:fc:7a:b3:4f:08:d8:3d:66:
a2:5c:60:2c:d5:82:3a:a0:c7:71:25:b6:4c:f8:ba:
6f:d8:57:0f:d5:d1:fa:29:e1:a1:bf:13:58:32:1a:
4e:67:6f:8a:21:d1:90:3e:cf:1a:f1:c6:e3:e8:bb:
bf:17:bc:7a:77:04:6e:57:d8:65:35:72:ec:29:8b:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4B:B3:CE:31:E6:64:E0:C7:16:BF:52:E6:44:C1:F4:24:30:DF:A0
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:43:76:5b:e9:1e:68:6b:cf:8f:a9:5c:ff:d3:d4:51:dc:14:
c7:93:d2:34:94:e9:f9:e3:a1:bf:06:af:71:5e:af:03:5c:a6:
61:99:91:16:a8:37:f9:d4:a7:74:de:9d:70:39:c6:ba:d3:0b:
83:e7:ea:56:27:6f:b3:96:7d:da:9a:0e:71:4b:da:3f:4a:9a:
eb:03:82:4a:b3:36:e8:76:a1:b4:bb:16:de:e9:23:2d:0b:ba:
e2:2b:90:9c:d7:4d:f5:c1:cb:8c:93:42:94:3d:23:4b:84:0c:
5c:ea:12:3c:bd:e3:f0:11:c9:7d:ed:ee:b5:bf:ee:08:d8:7a:
61:ce:b8:09:2a:4a:4d:2f:29:1f:1d:b4:fd:6e:7b:f9:7e:1b:
c3:e7:ab:51:68:94:b6:01:61:42:b1:8b:31:30:26:57:4f:dd:
c3:5e:55:d2:3e:db:96:c3:e1:a5:aa:59:d0:a1:73:4f:06:d4:
ea:fe:5d:fb:69:d5:6f:a0:6d:1f:16:8d:95:ee:f8:55:32:dd:
27:3c:b6:ab:05:52:8f:7a:4e:60:0e:a6:11:82:b2:79:dd:a1:
15:a2:47:6a:52:c6:2f:a8:1d:b4:2e:84:78:1a:7f:d1:f9:13:
78:2d:6f:4c:dd:d2:73:68:8b:fa:e6:d9:13:5a:e6:9d:75:58:
be:84:29:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:45:51 2026 by rpki-client