Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
File: ZiEKIeTkbpksh_aziCYLb8xi77c.mft (raw, json)
Hash identifier: ogF1cc87xJn9c40FUXto35Y/s/u/Xa8kXkzT9Y0rHvU=
Subject key identifier: 6F:39:46:BF:1A:00:93:7C:66:9F:ED:4B:8D:7F:3A:AB:25:B1:DD:80
Authority key identifier: 66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
Certificate issuer: /CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Certificate serial: 01A06D948D8F40897371C25239A4C5149497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:00:47 +0000
Manifest this update: Fri 04 Sep 2026 18:00:47 +0000
Manifest next update: Sat 05 Sep 2026 18:00:47 +0000
Files and hashes: 1: 7hxycR97F6II7DC0Vj37aerZ5oQ.roa (hash: KZSoHAwVwfiAoSXeYAVjqNq4+GGagnZ4C5DwWpPA1wQ=)
2: ZiEKIeTkbpksh_aziCYLb8xi77c.crl (hash: LrXPO0cqHn/D61krSTHvktTcfRkX0Jqhm3PgfK4EERk=)
3: qxo3ePZzVemzYTrsxmbd-aDG0xQ.roa (hash: Ts2ye0fisSWfvRXQ8xO3p21sDayxpAX1ycZX2DBkKX8=)
4: uYVzId5kHuAZNJSNCwDKcMz7_xY.roa (hash: c9bVVqZsVrLii9K2d4d5uBshO4e4alJujzyjDVg0Pr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:8d:8f:40:89:73:71:c2:52:39:a4:c5:14:94:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Validity
Not Before: Sep 4 18:00:47 2026 GMT
Not After : Sep 5 18:00:47 2026 GMT
Subject: CN=6f3946bf1a00937c669fed4b8d7f3aab25b1dd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:fe:51:56:f7:4f:7a:5d:d3:e8:d0:95:9e:
5a:9b:88:32:60:d7:ea:e4:f4:90:d6:a4:f4:d0:3c:
6f:f0:b3:24:65:fb:c8:a2:57:ab:c0:5b:39:50:00:
fe:6a:66:d8:13:d9:e6:7e:4f:56:29:61:36:ae:7c:
80:57:49:3a:0d:f5:d1:7d:1f:56:ae:2e:63:eb:77:
99:f9:14:ee:7e:5c:2b:8f:54:2b:e5:c1:99:50:63:
72:07:43:6b:28:c1:b6:d4:ac:49:44:dd:09:17:d9:
e7:38:4a:0b:5a:7d:5d:84:c5:a7:0c:b4:ac:54:d4:
98:75:6d:de:3f:fb:9c:e8:9a:ff:50:b5:c1:33:b4:
46:d6:49:56:54:c7:1f:5e:a4:2f:be:09:85:48:95:
4a:96:59:ad:0c:70:ee:6f:fb:d5:d6:86:2f:d3:87:
92:80:b3:60:e1:3a:f3:f6:e6:61:5c:32:20:dc:c2:
40:84:1b:4f:0c:e6:72:2a:91:94:a9:30:25:8c:e1:
1d:f4:e6:a4:a3:71:11:b9:a3:0f:71:d8:99:f0:bc:
2a:08:60:0e:ef:a0:32:a4:4c:b0:b4:e7:d9:91:88:
cd:0c:8a:b3:82:fb:ee:67:39:85:f2:18:2a:a9:bb:
3e:61:f9:89:df:3f:90:70:c6:77:4f:7f:5f:74:dc:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:39:46:BF:1A:00:93:7C:66:9F:ED:4B:8D:7F:3A:AB:25:B1:DD:80
X509v3 Authority Key Identifier:
keyid:66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e5:dc:81:07:2e:3c:70:96:02:3f:47:c3:ed:8f:b9:ea:82:
ad:0c:82:53:2f:59:7b:03:11:43:be:1d:a4:1a:c0:c4:3c:dc:
2f:12:74:3c:d3:95:c8:83:cc:0a:59:9b:9f:95:0f:53:8f:92:
84:01:37:b7:b5:d8:5f:01:75:44:ff:07:cd:9b:28:fd:2c:0b:
cf:7d:a7:79:69:36:33:6e:30:09:1c:a1:41:b5:7a:e9:b3:36:
bd:92:da:43:61:0f:1b:cc:ff:3e:8f:2b:24:cb:bd:46:c2:60:
6b:49:85:ec:c8:05:dd:8a:de:5c:27:41:0b:a0:93:58:2b:a1:
4d:a7:9e:b3:62:fa:bf:5f:ce:5a:e0:d3:8d:68:bf:43:3c:06:
8f:d6:52:61:d5:c7:51:84:97:d4:b6:a8:61:07:d6:42:a3:82:
21:55:03:97:f3:d2:a0:27:b3:f7:30:0b:be:d3:3e:a8:33:4a:
10:9c:3b:3f:0f:26:f2:a4:49:7f:fa:3e:6c:dd:37:07:b9:f2:
65:0a:90:59:09:4d:2f:1a:2e:eb:7e:75:c5:ea:92:20:7f:20:
7c:7d:98:58:60:ba:6f:c0:f3:59:8d:e5:c2:1b:ab:13:11:4a:
4a:52:d3:aa:2b:b0:27:ad:ae:03:a7:99:ab:a8:7f:0a:88:b6:
c8:d6:ba:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:00 2026 by rpki-client