Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
File: ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft (raw, json)
Hash identifier: hxSbzHtpjQXY825skvzl/n38FUUDqC1oLMnU5JvKN/U=
Subject key identifier: 52:1F:29:8D:A2:42:0E:CF:E8:DD:E7:F5:94:4A:96:B3:5A:6D:F4:DF
Authority key identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
Certificate issuer: /CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Certificate serial: 01A0E8893F5FDA8AB7526DE9371B768F9EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
Manifest number: 052E
Signing time: Mon 28 Sep 2026 15:01:43 +0000
Manifest this update: Mon 28 Sep 2026 15:01:43 +0000
Manifest next update: Tue 29 Sep 2026 15:01:43 +0000
Files and hashes: 1: 4khbVFEEtELbVKjdX-EOY4D-84o.asa (hash: jJbuP4gphJUD/kkuEq/w+9/whek2vyfSwhJa4fmVm8Y=)
2: OpiyEA7jLNoth377L3JQZRW22EA.asa (hash: r8ONgzWitytpplKZRKdun1LH8tmOWmyteR7//LNHOZ8=)
3: TBDRW3pZmuh3LqJB0SgJxwzZcn8.asa (hash: hzhoB7Z5vY10r4VrziTI+hp0NwmrNuDhAq362RHDbhc=)
4: ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl (hash: OK6kuB1BmZiwGQOrHe71a7O0O6SGtYQadGU/Sndpyro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:3f:5f:da:8a:b7:52:6d:e9:37:1b:76:8f:9e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Validity
Not Before: Sep 28 15:01:43 2026 GMT
Not After : Sep 29 15:01:43 2026 GMT
Subject: CN=521f298da2420ecfe8dde7f5944a96b35a6df4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:01:47:ec:bb:be:a5:2f:8c:b4:d0:11:c2:
0c:40:79:66:e4:57:b5:a2:c3:99:41:04:5c:2b:7b:
37:ed:3f:70:c9:e0:87:52:b3:47:b7:80:6b:23:90:
4e:17:f6:13:fa:36:7a:e6:4e:67:ab:b8:23:a9:5f:
e6:ce:30:2c:95:1c:3f:ed:2b:63:48:5b:94:c3:20:
a3:ce:ee:9a:2c:dc:35:0b:fe:c3:f6:42:3c:19:98:
6a:7e:c9:a5:21:55:57:98:69:42:3a:64:d7:32:1b:
bf:03:0d:f1:63:00:f2:a5:b0:51:d2:2f:85:49:d5:
83:20:3c:98:ca:87:99:6f:90:16:2b:70:93:8b:c3:
5f:89:54:10:b4:fc:c0:77:e1:02:65:46:54:f5:40:
cf:27:03:d6:d4:bd:3c:61:ff:ee:c6:2a:9e:89:a0:
4c:ad:f4:ec:cb:98:a7:bd:39:85:71:ed:0f:ef:e9:
09:45:a2:22:8d:7c:58:cc:a4:a4:d9:15:1b:bd:33:
89:45:5b:64:9d:fd:50:ee:9a:14:3e:84:ec:9c:f7:
96:47:ef:68:97:6d:48:83:aa:5d:d8:7f:cb:5c:12:
57:8a:24:9f:dd:76:8e:1c:dc:26:ff:2b:5b:ba:ca:
53:39:af:21:03:83:b9:12:8a:c2:85:72:6f:b2:02:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1F:29:8D:A2:42:0E:CF:E8:DD:E7:F5:94:4A:96:B3:5A:6D:F4:DF
X509v3 Authority Key Identifier:
keyid:65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:78:37:43:c3:c2:71:1f:7b:29:b1:1b:9f:f1:0b:2d:a1:cf:
31:c9:80:e3:f0:04:08:14:7f:47:ed:d6:c2:19:02:2b:91:cf:
7d:76:ae:00:eb:4e:6c:3e:2a:20:cf:d1:f0:a7:83:ef:f7:aa:
5b:14:74:28:c6:9c:a1:e5:d8:1a:3c:96:42:27:49:21:63:cc:
9e:48:96:38:10:ba:6b:0a:db:69:64:19:9c:d8:e6:a0:00:a4:
3b:b9:3f:b8:83:d5:65:3b:fe:c5:12:f4:9c:43:86:53:27:8b:
26:11:5c:48:6e:ca:5f:88:be:3c:55:05:04:bd:5e:7c:ea:98:
6e:9c:4f:64:78:7c:d9:3c:30:65:95:71:e0:25:fc:af:d8:b5:
cf:08:cd:90:0a:b2:f6:af:d9:d2:51:72:9f:92:13:d9:20:65:
f1:3c:cd:c1:fb:70:3f:8b:03:25:92:f3:27:43:11:28:bd:13:
53:a2:0b:47:a2:0d:0b:9b:60:15:9e:b9:19:cf:13:06:34:49:
de:75:3d:84:cb:a7:17:02:d3:90:47:c3:c0:8c:24:0c:6c:34:
1e:3a:01:87:46:82:18:fc:c1:7b:12:ed:e3:37:83:cd:be:62:
f8:dc:83:72:f1:6f:71:fa:06:55:09:2c:13:8b:17:a9:0b:a0:
cb:d5:b0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:29:44 2026 by rpki-client