Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier: EcOq2FXlA5HeHn1tz3jvkLRQ+V6aGHbYi3k8WsDS7oM=
Subject key identifier: F4:3A:37:E0:B6:56:AC:AF:A2:0A:8E:B1:75:8F:E4:EA:48:31:B8:D4
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 01A08CE8C2A800F8CAA7F9B71DAF02239164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number: 1323
Signing time: Thu 10 Sep 2026 20:00:59 +0000
Manifest this update: Thu 10 Sep 2026 20:00:59 +0000
Manifest next update: Fri 11 Sep 2026 20:00:59 +0000
Files and hashes: 1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: /+M/4AdXb6HHQgJ5FoEJ1MNeECrvn460rzXffTexKPc=)
3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:c2:a8:00:f8:ca:a7:f9:b7:1d:af:02:23:91:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Sep 10 20:00:59 2026 GMT
Not After : Sep 11 20:00:59 2026 GMT
Subject: CN=f43a37e0b656acafa20a8eb1758fe4ea4831b8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:0c:5b:47:69:d5:8d:85:ae:6f:c6:f3:e0:
95:6f:51:f0:42:6f:35:3f:92:57:fb:85:d2:ae:b8:
aa:e8:b2:a6:d3:bb:72:13:68:0e:71:7e:64:df:56:
d3:f0:8d:42:26:f7:cf:49:da:5b:a2:3f:2d:59:dc:
0d:fe:b0:51:f3:14:07:e1:da:7e:5a:9a:e5:f2:96:
09:fc:ab:9d:fd:5f:9e:ed:cc:87:8e:c2:bf:10:6f:
43:70:a2:80:5a:16:09:d7:a5:82:30:0f:42:a4:b9:
f1:be:88:4e:e2:38:18:20:56:b3:1b:bc:5d:04:23:
ac:1c:7f:0d:b4:04:92:5a:1d:d3:1a:c8:94:5d:23:
aa:9a:f4:f6:8e:59:e9:15:22:64:36:b6:06:d7:41:
39:ca:dd:db:3a:8e:4b:e8:b5:8c:89:85:e3:f0:a4:
66:36:e3:96:d3:08:ae:d9:98:26:eb:94:b8:f8:cc:
ba:6b:cf:17:2f:d2:30:7c:f3:e4:36:2c:79:31:93:
48:a8:08:1b:70:22:bb:1b:e6:b0:47:82:93:20:1c:
0f:aa:2b:56:b3:c9:e7:38:95:6e:f8:d4:d4:e1:84:
86:5f:7e:56:86:29:b9:ad:00:2c:03:88:18:20:50:
eb:07:4b:86:50:49:64:d6:c7:b0:ed:f8:3f:58:a8:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:37:E0:B6:56:AC:AF:A2:0A:8E:B1:75:8F:E4:EA:48:31:B8:D4
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8d:92:61:ba:55:f9:2a:83:5e:88:1f:a4:e1:66:73:1d:47:
9a:39:17:26:bc:71:3a:cd:52:c7:d7:83:0e:5b:1e:4c:5f:41:
d8:4e:50:45:45:75:f7:52:71:64:d5:78:f7:3c:bf:0f:8e:61:
d6:f9:c7:5b:ef:35:39:6b:50:6c:53:7b:f7:f9:72:7d:ef:fb:
ee:a8:9c:ca:65:3b:9a:7f:b7:a9:1e:47:b9:d5:9b:a7:3c:dd:
bb:22:2b:84:17:67:41:79:ee:62:71:54:53:1b:ed:35:79:97:
dd:f5:41:36:c8:f2:87:7f:9c:67:59:48:13:38:ec:30:5a:6b:
bd:c9:24:35:a8:09:49:fe:ff:d2:79:0d:80:f8:a6:c9:ef:43:
75:eb:b9:15:5f:7b:cc:29:3d:f4:4d:c5:9a:85:92:4f:c8:f0:
3d:95:a1:20:6a:f7:10:61:67:59:ec:9b:cc:11:2e:1e:0f:8c:
66:2b:b9:de:95:f3:09:51:85:ac:fc:4e:04:7b:9d:25:07:14:
e7:55:ba:40:1f:3c:9a:c6:89:14:cf:ef:29:72:1c:cb:66:54:
d7:7b:66:f2:36:91:7e:c9:cb:85:30:8c:24:0a:78:a8:5c:36:
43:68:0d:3b:4f:4e:f1:9c:73:6f:99:f2:bf:bd:45:83:94:72:
9b:92:db:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:14 2026 by rpki-client