Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: u8BPV/GmWZMRgWYVaxcyt9nWDcGaNEspfOhG9K6mu6A=
Subject key identifier: 90:74:CA:4C:CA:A8:B8:12:04:28:B2:F2:82:F0:4E:A8:78:D8:AD:6B
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 01A08942DCB77A8DC52114D588988C7A6C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 09ED
Signing time: Thu 10 Sep 2026 03:00:55 +0000
Manifest this update: Thu 10 Sep 2026 03:00:55 +0000
Manifest next update: Fri 11 Sep 2026 03:00:55 +0000
Files and hashes: 1: W37sGJ1Z1wl4UUbIKXQMtHltG0E.roa (hash: hXtR6w7vecs+GA3es0V1qVgIw93rkqQSf8/pd9Bww6I=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: GZc/2Cyy8Y8TmxZtIcPJNwh0kGYg4bG/4EiLdmTOy+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:42:dc:b7:7a:8d:c5:21:14:d5:88:98:8c:7a:6c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Sep 10 03:00:55 2026 GMT
Not After : Sep 11 03:00:55 2026 GMT
Subject: CN=9074ca4ccaa8b8120428b2f282f04ea878d8ad6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:44:a1:68:23:e9:f2:83:38:89:fe:2d:09:
f7:5d:b0:50:21:2f:e3:45:c9:ba:a7:cd:21:62:d3:
0f:e5:d7:75:77:6a:c7:06:06:7c:ea:c9:3f:c9:78:
3a:bf:19:1d:2f:40:02:76:d9:27:9b:e4:42:b1:9e:
e8:56:53:18:2b:86:23:4a:f1:57:51:f6:70:ca:15:
b3:20:70:d4:87:b8:ae:e2:67:b6:c7:81:ad:d8:8e:
a6:47:d7:77:66:a2:3d:54:17:a8:6c:72:6d:41:96:
2e:67:3e:26:77:f7:9c:3d:0e:ea:68:ef:3c:1b:bf:
fa:00:e4:d1:08:81:1e:7f:c4:60:ff:d8:0a:0c:bd:
0c:6e:7c:f1:fe:04:24:8c:7f:8e:88:7e:c2:0a:af:
24:d9:e4:16:c2:88:be:9b:5b:39:84:73:dc:b5:9d:
c4:ad:81:69:60:98:b7:55:e3:2e:01:17:4d:28:ab:
32:83:58:7b:36:20:93:2b:a2:ed:78:3c:43:f6:35:
82:af:f9:a4:a0:23:4d:1b:4e:1a:fe:a9:67:46:06:
20:2b:f3:ea:e8:56:bf:11:11:6f:93:a8:fa:5c:66:
19:01:cc:77:9b:f1:db:35:0d:ec:7e:24:e9:4a:85:
ca:6f:83:af:10:ab:e2:8f:97:cd:25:22:f1:ef:93:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:74:CA:4C:CA:A8:B8:12:04:28:B2:F2:82:F0:4E:A8:78:D8:AD:6B
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d1:02:69:e7:ba:af:ac:b2:18:92:25:d3:7f:0a:78:db:83:
9a:f3:44:a7:3f:3f:06:90:3b:81:92:68:12:d7:5f:e8:49:0a:
33:3b:cb:dc:4e:a0:45:b9:9b:b1:77:ce:ff:b9:77:ba:33:4a:
1c:42:e2:ae:7e:49:a5:b0:f3:9d:d6:02:0a:04:7a:3c:c1:0f:
57:65:07:8b:9a:52:61:2b:2c:11:85:55:8c:01:83:0d:8b:b1:
9d:a5:32:e3:85:32:ab:67:52:52:db:4b:5f:e0:fc:f2:74:84:
8e:08:93:de:3e:77:48:37:dd:d9:8f:5a:1e:5e:23:08:0a:75:
98:90:a8:d8:92:20:6a:04:fb:a9:cc:b4:3d:ab:81:c2:d7:6a:
f6:98:81:97:ac:64:ee:a6:15:b0:75:92:e1:55:8e:d6:13:1d:
27:d8:c0:42:94:04:59:9b:15:72:2a:fc:e4:19:66:9f:76:ad:
10:e3:74:30:59:33:5a:ca:48:0d:5c:bd:a3:e4:cb:88:19:5e:
e7:a4:89:98:a6:bb:9b:71:f4:17:fc:68:95:11:fd:88:7d:f9:
4b:4c:06:2b:45:b4:ba:c7:b7:28:23:cf:63:1b:19:67:b6:d4:
25:60:83:bb:5f:12:22:6e:51:f8:e9:34:f5:d3:95:93:24:af:
e5:15:9d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:28:39 2026 by rpki-client