Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File: zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier: EW7/kQ4Rsim99s/+MvfizVbhKsJKNiSt87VBDQ1Fxg4=
Subject key identifier: 3A:09:95:2F:DC:FC:05:83:3E:DA:D9:0B:E2:0A:E8:CF:5A:32:33:45
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial: 01A00326D41AC9B3A64C737BD9AA13440AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number: 1A01
Signing time: Sat 15 Aug 2026 02:01:11 +0000
Manifest this update: Sat 15 Aug 2026 02:01:11 +0000
Manifest next update: Sun 16 Aug 2026 02:01:11 +0000
Files and hashes: 1: hP6LOiB-JXjzIxcAoNUeheYCC_w.roa (hash: Am0rp7j+BYvMadHXe785VdV8wLgqVi6auP8kJTGDcRE=)
2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: aosWfghdLJpkHmba1T+gx3Nks7NzXMaXDlZXOgDPcU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:d4:1a:c9:b3:a6:4c:73:7b:d9:aa:13:44:0a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Validity
Not Before: Aug 15 02:01:11 2026 GMT
Not After : Aug 16 02:01:11 2026 GMT
Subject: CN=3a09952fdcfc05833edad90be20ae8cf5a323345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:e3:6f:89:d1:da:17:b6:14:42:d2:4b:1a:
3b:d4:8d:dd:a3:75:e0:71:10:0e:7a:52:56:a1:b1:
f5:60:4a:98:04:fa:69:c6:70:35:8f:27:f7:cd:eb:
d3:d6:9c:a9:60:92:48:a3:dc:ae:a1:54:aa:4d:88:
e7:51:80:59:a3:ea:8a:49:ce:da:6e:31:6a:0a:c2:
66:a7:1f:e6:a7:e1:c8:29:6f:b5:f4:5a:3f:42:30:
d7:ba:4d:00:37:e0:82:81:cd:d0:ba:02:9b:48:bb:
05:11:cb:b4:1d:1a:b2:2a:3c:56:dd:29:e7:16:c7:
8a:99:44:9f:14:b2:95:09:d1:40:ee:5a:25:3b:ac:
87:a6:6a:fc:2d:d9:3e:8e:7b:b3:54:be:30:6d:fe:
3f:78:36:c8:bb:24:68:c9:e7:c7:7a:8e:2b:32:8d:
9b:ce:17:6e:2a:5f:e2:78:40:15:8a:2b:33:56:71:
99:64:c0:9a:48:ed:50:8c:53:a4:f2:0b:0d:66:18:
e0:92:7f:95:ce:07:76:06:fc:b1:2c:14:66:11:0e:
12:3f:b9:da:f8:8e:5f:7e:95:2a:21:73:10:2d:59:
c3:fc:9f:40:06:98:72:7d:8e:f5:9b:03:a6:b4:a8:
0d:81:54:62:80:fd:8b:d0:59:07:11:88:d8:20:31:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:09:95:2F:DC:FC:05:83:3E:DA:D9:0B:E2:0A:E8:CF:5A:32:33:45
X509v3 Authority Key Identifier:
keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d4:8f:c8:3d:be:5e:ee:d0:8a:64:1f:59:19:0e:c0:d0:eb:
db:04:7f:c7:de:61:7c:1f:3a:d5:37:40:98:43:dc:7c:e5:f6:
c6:f8:6b:44:2c:98:f2:6f:7e:ba:23:f0:41:70:4c:37:10:18:
45:f6:39:24:c2:a1:99:32:27:0b:83:d7:e6:ea:b2:57:7e:8c:
57:56:94:94:f7:60:87:ff:b6:6a:d4:f0:96:ba:49:b5:fb:51:
3b:a6:88:67:bc:ce:12:a6:dd:cd:cb:59:26:ab:56:ff:de:31:
c8:35:f4:a9:36:96:a1:01:6c:2d:62:75:12:3a:25:d3:1a:6a:
bb:69:16:f2:bd:fa:50:67:19:25:7b:3f:bb:1c:fa:35:7d:4f:
f3:d9:c9:1b:5c:19:de:ac:22:55:6e:fa:1e:c2:7d:2a:e4:7c:
1b:3f:9c:ea:7d:0b:98:5b:f4:87:db:c6:26:22:b7:b0:ea:b0:
d0:c0:41:2f:aa:53:04:ad:18:26:53:d9:6a:29:84:9b:aa:85:
ca:8e:36:d6:ba:e7:eb:67:38:91:61:06:ad:16:7b:e4:00:58:
fb:ad:51:58:98:ed:d1:6b:4b:69:a7:11:72:1c:81:55:76:a8:
6a:eb:d5:3c:d0:ac:fe:1f:a4:e5:8f:41:da:f6:68:c2:2d:2b:
9b:a4:47:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:54:33 2026 by rpki-client