Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
File: zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft (raw, json)
Hash identifier: UxvXj0dAahKEEu7AG6by0r86dlXcqU4N1EK1xl22y28=
Subject key identifier: B1:72:7F:C0:86:A5:45:5E:25:DE:52:9C:CB:63:8C:78:D1:98:09:E7
Authority key identifier: CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
Certificate issuer: /CN=cddce12ae50e80a4534d80f786a824497b26fadb
Certificate serial: 01A08D1FDBF5D2CA2EA8A0F1A93F267999C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
Manifest number: 0149
Signing time: Thu 10 Sep 2026 21:01:10 +0000
Manifest this update: Thu 10 Sep 2026 21:01:10 +0000
Manifest next update: Fri 11 Sep 2026 21:01:10 +0000
Files and hashes: 1: pYYR9UI_sLtKcyNmvvaeAyGho10.roa (hash: Visrk6MwePbwviSVCYu3l4j6eSQ3jEUFOOu9154zYk0=)
2: zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl (hash: QLZyQfsoWT6c/ZjkR06nLpLCf4+EUhooF4QL5t7wcwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:db:f5:d2:ca:2e:a8:a0:f1:a9:3f:26:79:99:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddce12ae50e80a4534d80f786a824497b26fadb
Validity
Not Before: Sep 10 21:01:10 2026 GMT
Not After : Sep 11 21:01:10 2026 GMT
Subject: CN=b1727fc086a5455e25de529ccb638c78d19809e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:99:d0:e7:35:c9:0e:2c:ca:d7:6c:26:59:
e0:a1:8e:0d:b1:42:d1:16:1d:b7:f6:e5:4d:90:59:
1c:a4:00:2d:ab:0b:15:f2:f4:62:e1:e7:ce:d9:63:
55:19:c5:d2:3d:fc:a8:28:37:22:ee:ab:0f:8a:50:
3c:a4:1a:5a:2a:af:d9:69:05:e3:61:59:06:8f:f1:
ac:64:75:ee:41:31:14:bb:f9:0b:cf:37:de:d5:1c:
31:09:1b:2d:02:70:54:06:97:72:35:d3:a4:14:63:
4b:d7:e6:cf:58:eb:ff:8f:a8:63:40:f8:55:cf:80:
cc:50:2a:e1:fe:b6:68:92:dd:b8:07:bd:ec:b7:4c:
2d:53:e0:1e:d8:7e:c6:6f:10:62:6a:7a:3b:3b:97:
91:37:e5:9c:0a:81:25:4e:5e:72:6d:b0:96:e1:f3:
d9:e0:e9:f6:44:e6:93:81:9f:fa:b9:9c:39:30:9d:
5e:a0:16:fb:e1:f1:21:d8:47:97:0f:d0:44:a0:2d:
b7:45:bf:ab:63:e6:a8:80:19:40:2d:92:b6:84:54:
88:4c:02:cb:d4:84:fe:fd:1f:70:9c:2b:28:fe:5c:
e2:11:22:c0:78:06:e3:7f:35:7d:56:9a:c7:ff:3b:
b3:e5:4c:79:ea:80:40:fb:1f:de:5b:ad:74:4c:00:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:72:7F:C0:86:A5:45:5E:25:DE:52:9C:CB:63:8C:78:D1:98:09:E7
X509v3 Authority Key Identifier:
keyid:CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8c:0f:e4:1e:a6:88:95:c9:7c:b8:80:86:d6:34:44:d6:d6:
b5:0c:fb:38:33:0e:ab:35:b8:b4:60:48:9e:71:22:af:28:ea:
ff:6f:5d:d8:aa:59:aa:c7:43:35:ba:f5:49:92:e6:64:ef:a9:
7d:4b:11:a9:51:a5:0f:d1:b8:bc:da:d9:b3:d9:02:37:8b:5c:
1b:a2:d9:32:80:66:25:90:1f:7b:8f:c7:33:c6:77:53:6f:31:
88:d0:95:42:c6:e8:ae:e9:a5:ea:c2:2a:5b:fc:dd:26:e3:82:
1b:76:85:47:85:c1:33:1f:e0:2a:cc:81:d6:df:00:0a:ff:94:
7d:9b:e2:5d:6b:0a:58:96:8d:e8:a7:c9:a2:1b:1a:71:69:2f:
9a:2f:c4:d5:b6:d6:46:57:ec:9e:8e:42:eb:1d:04:a0:99:fb:
72:85:a6:2c:10:ec:0a:e5:ef:8d:9a:5e:d5:03:80:55:37:9c:
7a:b1:d7:50:0f:97:9d:24:00:ea:fb:6d:18:7c:bc:99:a5:13:
45:fe:b7:92:1b:f4:d3:3f:bb:33:63:31:6d:38:92:ae:92:f7:
6d:f7:a0:0c:1e:6f:ae:9d:62:ac:70:a3:ae:ed:b9:cb:b4:e0:
dd:40:15:ff:4c:7f:da:b0:76:a0:bd:d5:18:bb:fd:b3:f1:11:
23:47:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:59:27 2026 by rpki-client