Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
File: ZRUuTmwkXAP-zfpIv5E5bL7-168.mft (raw, json)
Hash identifier: lDDJlBPy0OV3LXVVGa1PfK/W2r1YA7s/+uQCVKG+Rww=
Subject key identifier: BC:6B:F6:FE:C1:ED:5A:5D:03:DA:E5:52:62:09:27:4C:3B:AD:BD:41
Authority key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Certificate issuer: /CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Certificate serial: 01A06C4BBE2D8CD90EE06899F702B712B84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
Manifest number: 0202
Signing time: Fri 04 Sep 2026 12:01:38 +0000
Manifest this update: Fri 04 Sep 2026 12:01:38 +0000
Manifest next update: Sat 05 Sep 2026 12:01:38 +0000
Files and hashes: 1: ZRUuTmwkXAP-zfpIv5E5bL7-168.crl (hash: UmCzuqpAIfvrRmnQTnLMDROr1PsZ8zLr3Y6nx2G/+o0=)
2: zNqty2MMMtiYifN34tRpIOVX9sQ.roa (hash: yLB5f8Ek8IZkDyn4YFbsPyCUS3Yue+tSUM0kBMSr3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:4b:be:2d:8c:d9:0e:e0:68:99:f7:02:b7:12:b8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Validity
Not Before: Sep 4 12:01:38 2026 GMT
Not After : Sep 5 12:01:38 2026 GMT
Subject: CN=bc6bf6fec1ed5a5d03dae5526209274c3badbd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:c1:61:0f:00:91:a1:00:1b:7b:ec:93:fa:
3d:55:a1:b8:27:74:c9:9a:41:15:46:fd:19:a4:7f:
b9:98:d6:5c:d3:9a:2d:b0:c1:d2:94:73:52:70:2d:
53:4f:6f:e6:27:52:48:5c:53:7d:6f:c2:5d:2e:2f:
3f:6f:02:c1:1b:ee:67:8a:61:c7:ec:4f:83:58:4e:
41:ce:cf:93:bb:13:d7:06:ce:1c:f1:b6:2a:9d:45:
43:94:a1:ea:17:70:d6:ed:e8:38:57:8e:38:6c:0e:
9f:d4:42:70:78:00:05:d8:28:d7:15:98:aa:af:c9:
ea:46:7a:52:c5:e0:7d:c6:34:e7:3e:57:10:31:92:
e3:5b:d8:e9:65:46:93:fb:44:ee:f5:c8:45:91:19:
11:2c:02:79:06:80:36:71:7e:5a:6c:93:0f:3b:28:
83:eb:a7:34:d8:f0:ea:61:9f:b4:7a:e8:06:0b:e1:
33:ee:6f:b4:ad:c1:82:c6:5d:70:90:f3:a9:21:cc:
a0:f1:d6:4a:75:9c:b9:db:16:93:f4:cd:d6:48:1d:
14:12:63:72:22:13:35:a6:ea:f7:d8:6f:8d:7a:96:
98:02:ca:29:87:62:a9:21:d2:77:f9:c2:b8:fa:92:
15:43:5d:72:ef:f7:53:2f:d1:a9:82:2e:f5:97:c6:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6B:F6:FE:C1:ED:5A:5D:03:DA:E5:52:62:09:27:4C:3B:AD:BD:41
X509v3 Authority Key Identifier:
keyid:65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1c:f3:1b:ac:65:41:43:7a:2c:3c:82:7b:bd:d1:56:41:28:
36:ba:0a:78:33:fb:03:6c:7b:2e:bf:99:ce:5c:c1:20:15:20:
0d:eb:d3:c6:ad:d3:44:0e:cb:08:af:ba:eb:11:0e:1a:c5:e5:
b0:42:6b:32:77:7e:13:73:f2:92:d4:95:1c:25:5b:db:04:04:
c6:5d:e8:4b:12:79:47:aa:79:35:ee:74:db:24:01:2b:77:28:
03:52:6b:4e:8c:fc:a2:c0:e2:aa:a9:24:09:60:2a:0d:a8:ad:
92:20:f4:fa:39:cd:e9:5c:c5:ee:31:59:c7:3c:84:05:87:6c:
f1:8d:39:a5:cd:69:6d:ed:f0:15:57:6f:a0:9a:10:14:c1:ed:
f7:38:c5:a4:f5:31:be:f3:80:77:3b:a3:8b:a3:80:f6:18:7c:
1a:bd:3c:50:5b:70:27:e3:ce:fb:ef:57:ad:d0:ad:d2:97:90:
2d:12:ba:22:d4:80:1c:4c:eb:5e:2a:bc:5d:29:af:c6:f2:e4:
7b:4b:25:3e:8f:f7:cf:df:cb:f9:2f:c2:f0:60:97:7d:b5:05:
77:39:2e:d4:30:3b:9e:62:1a:08:f7:7b:3b:2d:f8:58:d9:c9:
0e:f6:f2:71:e6:38:f0:e6:cb:77:71:88:0e:c6:14:b3:88:0f:
be:1d:a4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:12:52 2026 by rpki-client