Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: 48pIGiQXEuCc/7Vsts6KfmajP2iyCyiyEsFDr2mEbRY=
Subject key identifier: 51:03:7E:6B:18:BC:05:D7:E7:6F:34:A4:B3:96:1B:40:70:5F:07:F2
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 01A06E709000E9F0EF9E05D71E27DBF0E269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 10C9
Signing time: Fri 04 Sep 2026 22:01:05 +0000
Manifest this update: Fri 04 Sep 2026 22:01:05 +0000
Manifest next update: Sat 05 Sep 2026 22:01:05 +0000
Files and hashes: 1: B0xeJ6OlptEzuwHkDKb2uLt1U_4.roa (hash: 0mnm00N6t5GT0+PQLMuChkiPF3X09nPjo6FNCsIiX9w=)
2: DHWxwhm5BstgQrswTpmXlNRqB68.roa (hash: U4MLvKfxIOpMtW85VWgOrj7JclXnEEYGlYHrxV44rNY=)
3: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: l7QrslWLlZkIeaSasSn0hIY9XaPVWAXqDagOwCdSKFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:90:00:e9:f0:ef:9e:05:d7:1e:27:db:f0:e2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Sep 4 22:01:05 2026 GMT
Not After : Sep 5 22:01:05 2026 GMT
Subject: CN=51037e6b18bc05d7e76f34a4b3961b40705f07f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:e3:03:ff:e3:89:82:26:71:07:36:65:d7:
ea:e5:78:f6:09:e2:6a:0a:07:f4:91:10:e4:fd:bb:
32:29:40:34:48:19:2b:09:e1:ba:1e:86:ea:2c:4b:
45:a3:13:df:71:48:fa:ed:2a:8c:78:3c:58:c5:06:
31:fe:b5:ea:ce:8c:86:5b:eb:4b:a6:ac:20:1c:16:
7b:a0:bc:b0:c8:47:0f:7f:8b:5b:30:2c:f7:64:fe:
94:89:a3:88:6d:eb:e5:ac:75:64:18:bb:99:34:67:
d0:54:16:98:de:60:91:df:76:93:94:a7:03:42:6a:
37:37:aa:c3:3e:f2:0c:85:fa:c4:40:f8:5e:cd:e9:
b2:e5:89:ed:35:d6:30:70:f8:f0:dd:10:b1:06:6f:
b0:0b:9a:89:0f:7d:c5:be:f8:79:a0:3d:29:8c:e7:
7b:b7:57:e8:0f:f6:fa:e3:87:01:16:67:62:89:33:
ad:9d:9e:f9:f0:33:f5:80:c7:b9:a3:ff:d9:76:a8:
d6:05:34:b8:5d:ed:82:0b:08:39:cd:70:57:48:d1:
8e:29:74:51:3c:37:6f:3a:78:e5:95:1a:7e:40:fd:
89:23:d7:e6:6d:00:85:3a:30:a2:a2:b0:66:9e:9e:
30:d9:fe:25:b8:50:c7:74:ab:d3:c7:76:c1:a8:59:
02:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:03:7E:6B:18:BC:05:D7:E7:6F:34:A4:B3:96:1B:40:70:5F:07:F2
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c4:21:09:30:ae:65:80:26:85:4a:1b:68:c1:c4:84:6d:42:
fc:0a:bf:c4:b2:c9:30:66:99:72:a5:c5:0b:a9:76:6d:a0:50:
28:e1:6d:95:7e:8c:66:9d:ee:6c:7b:2a:7b:a6:63:e7:d3:99:
f3:17:81:51:4b:92:83:14:c4:7f:b4:3a:f8:f4:94:ae:9a:51:
03:86:e1:15:a9:4d:9f:03:be:6c:29:d8:a3:a5:d9:30:44:4b:
56:87:f7:77:78:e7:91:6b:91:01:e1:60:58:9b:96:f3:c8:20:
93:89:2b:d4:5a:57:de:ce:97:46:c2:c2:3f:79:30:69:93:7a:
8e:3c:71:17:0b:4a:16:89:3d:4d:4e:92:79:4a:5a:a2:20:58:
f0:88:81:97:0d:21:80:3b:11:48:b7:4f:d4:5f:90:95:59:89:
51:4a:cf:e9:7c:64:05:a2:3b:db:6d:38:e1:46:ff:ac:ee:a2:
c9:42:fb:48:e7:e4:16:26:27:c4:ed:49:54:53:21:3b:80:db:
70:30:75:60:a8:6e:cc:8f:7c:e7:e2:df:68:ec:4c:ef:39:6b:
0f:9a:43:c1:ce:f7:2a:e7:46:36:04:73:af:c5:30:52:4f:72:
23:fb:ee:77:70:69:27:d8:31:7d:39:9e:19:38:54:9e:34:d9:
18:11:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:10:04 2026 by rpki-client