Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
File: _zVCuU4Ii793ruGzOUIxUtrvXg0.mft (raw, json)
Hash identifier: PcrUUqvNtFRDtB0CWu435Hr/esj6ejSsMO3PpglUHHM=
Subject key identifier: 6E:F9:85:58:22:84:60:CD:AB:A7:A5:C8:9C:8F:BF:90:1D:9A:18:89
Authority key identifier: FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
Certificate issuer: /CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Certificate serial: 01A03B27B207839C2D3CDF1A80FC5A4A38BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
Manifest number: 012B
Signing time: Tue 25 Aug 2026 23:00:52 +0000
Manifest this update: Tue 25 Aug 2026 23:00:52 +0000
Manifest next update: Wed 26 Aug 2026 23:00:52 +0000
Files and hashes: 1: LXC_nzvi4Cb7lHD4Py9XKzLtC38.roa (hash: M58JQtuK6LdfZlu8eoP3dvPBwwWOzHNzghjNI4pN5m4=)
2: _zVCuU4Ii793ruGzOUIxUtrvXg0.crl (hash: ICpR/t8/QsHGQ+N0aufAt2UFE0+4Z3eiJQit6aZCPEQ=)
3: mGBvIwQwu2rqSEgMM78Outc8oKI.asa (hash: OAcgoQTH6aR8Gafn8lP+RELlUaY4N3e0LLrENbEm6VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:27:b2:07:83:9c:2d:3c:df:1a:80:fc:5a:4a:38:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Validity
Not Before: Aug 25 23:00:52 2026 GMT
Not After : Aug 26 23:00:52 2026 GMT
Subject: CN=6ef98558228460cdaba7a5c89c8fbf901d9a1889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:77:6a:d4:aa:9d:2e:39:ca:d0:6d:53:8f:
78:bf:51:07:ff:03:94:29:02:9d:07:5f:72:23:5c:
46:4b:8b:38:61:67:2e:0b:9f:cf:47:e3:79:ff:e7:
90:cc:ed:de:f9:bd:31:9d:60:3a:e1:88:65:45:9f:
ac:e5:86:d6:66:df:74:13:33:e3:7a:8e:84:34:8b:
2e:7c:79:dc:7a:b7:d7:90:d4:e7:57:cf:4a:db:d3:
c6:e0:a4:78:07:a2:e9:de:2e:a9:45:0d:77:ba:9c:
54:29:8d:ef:f0:64:06:05:ae:de:ce:1b:cf:af:ff:
e8:c5:e3:79:d3:e6:b6:33:91:fc:1c:b6:84:d1:5e:
8c:51:d3:07:ed:ba:cf:8a:2b:52:74:50:18:51:f3:
d9:a3:f4:06:9b:2e:cd:32:ef:a3:5e:8f:5a:58:9b:
8e:35:31:33:54:a2:63:5a:d9:c0:fa:94:af:42:96:
6f:41:2e:51:4d:90:fb:50:03:24:12:18:39:bf:5b:
10:06:54:84:34:db:ca:f8:1b:76:ba:2e:4f:e0:0c:
24:c8:11:13:9a:87:fd:9c:d2:b4:8e:89:49:c5:14:
53:40:09:41:69:44:ac:cf:92:86:84:76:33:2d:12:
c1:d4:e0:f1:90:eb:a9:d9:38:07:cf:01:43:84:d7:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F9:85:58:22:84:60:CD:AB:A7:A5:C8:9C:8F:BF:90:1D:9A:18:89
X509v3 Authority Key Identifier:
keyid:FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3d:60:95:00:c5:43:9e:02:d7:5e:01:e9:35:6f:1c:c3:5f:
4f:43:df:51:61:0b:f3:68:9d:d8:85:f6:ec:79:a8:3e:74:0b:
d2:6e:c9:58:5d:6d:08:55:1b:15:1b:93:eb:19:22:c0:17:79:
3d:7b:30:1e:4b:d9:0e:fa:c4:6d:d2:d7:7a:e6:f7:d6:d8:81:
cb:04:ce:77:76:28:de:7a:f0:53:1e:ba:74:08:31:ff:70:c0:
a4:7c:eb:4d:8d:6f:92:9d:1b:b6:ed:15:19:8d:6a:86:03:e5:
64:38:b0:a1:bb:e3:82:38:7b:ed:a1:ba:f3:0e:4d:c9:d8:5b:
8d:b7:1d:5b:2e:a0:5b:7d:7e:f3:da:52:41:d1:9a:0f:7a:36:
3c:38:18:cc:29:94:1f:7c:de:df:38:a0:81:8a:90:0c:af:f6:
41:3d:f4:24:cc:d2:e7:b7:6e:d7:9e:ff:f0:9d:68:6f:fd:f2:
b1:d2:05:83:12:27:39:03:7f:12:cb:03:b9:10:df:e3:d0:0c:
fd:af:fd:12:f5:43:42:f7:88:35:9c:95:fa:34:3d:ba:bc:93:
54:ae:5d:70:13:6b:66:09:0b:d6:90:28:a4:20:77:9d:41:20:
0b:e1:ca:b9:d4:04:c2:6c:51:21:2a:45:30:f0:38:94:eb:7e:
42:aa:df:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:35:13 2026 by rpki-client