Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.mft
File: zo9K2SdnRIAuajoGJWzUdQwadVo.mft (raw, json)
Hash identifier: eIi9zZhbMpn4/C/6CjYUAKTdtzctHQp8Jas15E9MMD8=
Subject key identifier: 6C:4D:95:52:83:7D:CD:AC:72:7B:77:76:33:BB:61:F4:3D:5F:A2:68
Authority key identifier: CE:8F:4A:D9:27:67:44:80:2E:6A:3A:06:25:6C:D4:75:0C:1A:75:5A
Certificate issuer: /CN=ce8f4ad9276744802e6a3a06256cd4750c1a755a
Certificate serial: 01A15C675F17079E7254AE67E6AFA9FD9000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo9K2SdnRIAuajoGJWzUdQwadVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.mft
Manifest number: 0271
Signing time: Wed 21 Oct 2026 03:00:40 +0000
Manifest this update: Wed 21 Oct 2026 03:00:40 +0000
Manifest next update: Thu 22 Oct 2026 03:00:40 +0000
Files and hashes: 1: 1FNcsAGyhuV8cAYu6D15EmYy7fc.asa (hash: +x9K4k0oY166Jcbf2J0uAOSmAzY1RCBFg24X7oOR6T4=)
2: MXrKlHp2j8CNiQXyFme7qMn1oSw.roa (hash: K/tqPJnyc9iPnmAvPLHSuRK426Oc8HKnyS7m0/Cf1nc=)
3: kK7yK4QwpG2P5nNrENkyc48XIqQ.roa (hash: t4WTKP4OAHsudazCPki6NxrFz09Rt8T0WQRSZXhdph0=)
4: zo9K2SdnRIAuajoGJWzUdQwadVo.crl (hash: f1dSgM9umA/CDUTHKvIx8PBRO6p471ZRQAqFrq355x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo9K2SdnRIAuajoGJWzUdQwadVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:67:5f:17:07:9e:72:54:ae:67:e6:af:a9:fd:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8f4ad9276744802e6a3a06256cd4750c1a755a
Validity
Not Before: Oct 21 03:00:40 2026 GMT
Not After : Oct 22 03:00:40 2026 GMT
Subject: CN=6c4d9552837dcdac727b777633bb61f43d5fa268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:85:4e:1b:57:11:8f:97:fc:b0:9f:ac:ff:
2f:98:a8:ea:fa:dc:b9:f3:f4:47:d7:59:a4:5d:2e:
11:b6:da:ed:e8:62:40:f2:6e:1e:09:8e:82:74:73:
bb:dc:d7:dd:60:3d:c9:ba:d9:d5:5e:4d:00:52:3c:
e5:9a:4f:14:b0:71:29:c1:52:86:da:2a:68:b9:1e:
60:51:1e:bd:01:e5:4e:57:51:9f:07:f0:19:78:e3:
61:a3:9f:fb:7c:96:70:d1:aa:8f:c7:86:d3:82:39:
eb:af:6f:75:c0:44:2b:89:4a:ba:d4:e7:ef:3e:fb:
d0:a2:4e:80:d7:01:79:0c:d6:0d:3c:8c:52:8a:fb:
d5:66:46:4d:0c:7e:5e:db:6f:b1:5d:87:ca:cb:97:
8c:48:28:85:1a:2b:94:4a:47:75:ff:f6:17:f0:d5:
66:27:73:af:4f:29:3d:08:37:09:54:4d:82:f3:bc:
3f:e7:13:7c:74:c5:8c:29:40:dc:e6:7f:96:c0:06:
54:4a:c0:da:0e:7d:5a:e9:e4:aa:92:1e:ab:45:1e:
2d:b2:31:90:74:e7:94:75:39:25:15:3d:31:04:2e:
9a:98:00:57:7b:b0:e5:ae:af:50:13:a3:7c:33:b0:
e0:9e:63:3e:2f:4b:38:4b:22:1e:35:7c:f5:cd:0a:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4D:95:52:83:7D:CD:AC:72:7B:77:76:33:BB:61:F4:3D:5F:A2:68
X509v3 Authority Key Identifier:
keyid:CE:8F:4A:D9:27:67:44:80:2E:6A:3A:06:25:6C:D4:75:0C:1A:75:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo9K2SdnRIAuajoGJWzUdQwadVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:29:71:d7:2f:0e:59:ba:08:e8:73:03:87:92:b2:ea:b0:37:
a1:83:93:3b:58:aa:73:c4:f2:6e:3a:56:15:50:36:71:cc:42:
d8:0d:d5:06:14:7c:cd:43:02:19:f2:b1:08:68:76:45:a1:7a:
ed:53:00:dc:7e:a9:d6:a4:be:e8:8f:f1:36:e6:e7:a2:75:4d:
ee:76:7c:d2:b6:e0:08:32:f5:64:45:c3:bb:2b:61:b7:98:57:
ed:50:07:ee:0c:7f:4f:c7:40:60:b9:1b:55:54:54:68:18:11:
cf:10:bd:87:96:5d:f4:ea:45:2b:a0:d6:2b:62:a6:d6:cc:95:
9a:d7:a7:56:a9:68:73:99:f8:9e:8e:95:0c:9a:20:5c:24:e9:
8c:1c:d7:3a:a1:c5:e8:4e:7c:2c:0d:a0:64:a0:e1:5b:07:ce:
2c:7e:19:63:84:81:2f:f1:f3:f1:95:12:18:49:d4:4e:34:b8:
b3:e5:b5:04:a7:46:d2:fa:06:e3:5c:52:4a:a1:1d:09:1e:92:
96:44:25:8a:67:a5:95:3f:0c:04:21:f0:9c:4c:aa:ea:7b:29:
dc:1e:8f:d3:3e:8a:cb:60:6e:0c:63:b7:0c:ca:cc:dd:3f:e8:
56:94:34:5e:7b:dc:0c:3b:bc:8d:e8:74:05:31:67:39:28:c9:
d8:41:34:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:44:54 2026 by rpki-client