Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: aW/bCNt6xddYc7AW0uKA0NO9KsqqrkzXCuqMOY1bB9w=
Subject key identifier: A9:27:53:BE:6E:41:AC:C1:D4:D9:DC:4B:CE:83:58:E5:48:C6:15:23
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 01A08B67F5326BA506A6AE21BEE47A7BF983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 1488
Signing time: Thu 10 Sep 2026 13:00:41 +0000
Manifest this update: Thu 10 Sep 2026 13:00:41 +0000
Manifest next update: Fri 11 Sep 2026 13:00:41 +0000
Files and hashes: 1: SWC8q5CH8zumHrflzVp4e7i8dGY.roa (hash: z98d01QAmvPs9qVeEUxQJcsgJEzGZb8FADftU7i+UZw=)
2: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: f26TrXrwnBXB4khSD+mT/iWV7PMs7ywNmxpEtFWcaug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:f5:32:6b:a5:06:a6:ae:21:be:e4:7a:7b:f9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Sep 10 13:00:41 2026 GMT
Not After : Sep 11 13:00:41 2026 GMT
Subject: CN=a92753be6e41acc1d4d9dc4bce8358e548c61523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:68:84:91:7d:30:05:11:e3:ca:89:cc:0c:
82:67:a3:26:74:39:57:d1:7e:44:6d:80:d0:5f:21:
22:02:a8:04:1d:5c:2f:80:25:1a:77:c1:51:d6:3b:
aa:d6:1c:a0:57:09:83:8e:bd:3a:12:48:4e:f4:94:
d6:e9:ac:b2:86:7f:d5:2a:bc:bf:b6:cb:53:0e:df:
ca:37:44:d4:3e:a0:44:4d:1e:9b:bb:bc:f8:ef:db:
4e:b2:ff:0d:09:b0:92:9e:07:68:6d:eb:e5:ad:8e:
ab:58:f3:cd:07:39:90:59:e4:e8:e1:7a:57:0d:3b:
00:8e:68:cb:f3:5a:d2:01:d2:bd:ea:85:92:bc:a0:
a8:2a:9e:d8:66:2b:ce:f3:b4:7e:a0:18:b0:93:20:
16:af:62:97:0a:8a:d3:5d:b2:34:d8:83:8f:23:c2:
27:82:ea:2c:40:2e:3b:d5:d1:69:7f:fa:f8:23:16:
1a:78:6b:76:51:32:b1:5e:dd:e9:c1:b3:e4:35:bd:
a1:d3:34:88:e0:54:cd:0f:de:ef:0d:a6:5f:81:9f:
00:3b:53:2f:95:87:47:0f:38:d7:8e:26:80:a9:15:
c2:be:31:08:90:96:14:8b:5b:7e:65:97:ab:9c:25:
34:61:d4:21:86:ef:1e:e7:d5:5f:f8:75:2d:1c:cc:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:27:53:BE:6E:41:AC:C1:D4:D9:DC:4B:CE:83:58:E5:48:C6:15:23
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2a:94:87:dd:c3:f0:df:f7:16:c7:47:80:f0:16:07:40:c1:
9d:36:7f:f0:9b:e8:00:2f:e3:f0:66:ca:a3:96:eb:21:15:87:
4e:26:cc:fe:2c:2c:d8:88:8f:de:27:b0:b6:71:f5:1a:79:8d:
aa:ba:3d:60:1c:98:c1:69:4f:cf:d8:0d:e2:5e:3a:ca:b3:cb:
48:ac:b0:b1:d0:80:20:0c:28:f4:cf:a6:ab:0e:a2:c5:39:a4:
ef:c1:ff:57:31:37:7a:72:ae:87:33:d6:2c:e0:8c:51:32:ce:
18:92:cb:3a:a4:23:c3:9c:a1:90:40:50:39:eb:5a:fd:95:a1:
1e:6d:99:54:0f:8d:1f:f0:09:16:c8:b2:7f:13:b2:b4:67:a9:
cf:be:c5:b1:b3:f0:4b:1a:ef:ee:55:5e:da:d3:4e:34:d0:2d:
17:79:cd:54:3e:39:51:82:0d:31:9e:e6:4c:68:72:64:1c:1e:
11:4f:37:49:0b:16:00:1d:9a:51:eb:91:b2:f3:63:50:b7:e5:
1c:d7:33:7e:4d:6c:12:f0:f1:0c:d7:d4:a2:51:bb:02:17:28:
f2:fd:f9:3a:22:a0:f3:c6:e2:15:da:f8:13:6f:e9:f9:57:5a:
80:5f:b3:a7:4f:86:72:33:b8:53:49:9b:00:bc:49:90:89:e3:
8f:8a:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:10 2026 by rpki-client