Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: WH0zu7B6bPwuMKucQtGFRx3EJ8BtUmaUFCLUBfa6RJ8=
Subject key identifier: 16:2F:D3:64:64:7A:C8:88:B8:DE:1C:10:C5:32:8E:F4:66:F6:BA:9E
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 01A1238ACDCEC800D6062C3CD4111C8BBB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 02EA
Signing time: Sat 10 Oct 2026 02:01:01 +0000
Manifest this update: Sat 10 Oct 2026 02:01:01 +0000
Manifest next update: Sun 11 Oct 2026 02:01:01 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: iTfEj5XO8KLn52p0lxQ8jrlSTffroatLmvG914u04zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:8a:cd:ce:c8:00:d6:06:2c:3c:d4:11:1c:8b:bb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Oct 10 02:01:01 2026 GMT
Not After : Oct 11 02:01:01 2026 GMT
Subject: CN=162fd364647ac888b8de1c10c5328ef466f6ba9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:ea:f4:52:90:12:6f:80:60:ab:48:93:03:
5f:f7:d0:b8:23:27:11:3a:cc:78:38:4a:9d:e0:4b:
af:e6:b0:52:a1:8a:81:77:67:dc:65:9e:d1:05:5b:
02:53:ec:c1:40:03:8f:a9:88:28:9e:89:e2:fc:5c:
b0:66:ee:28:a8:c4:c6:d4:e0:58:3f:af:55:cf:9a:
49:8c:25:ff:07:55:b4:ef:21:7c:d1:0f:9f:a7:51:
cb:11:a7:8a:53:c0:e8:82:04:78:bf:be:77:1b:69:
36:80:0e:f2:24:9b:36:d7:52:9a:3b:a5:c7:9d:a9:
92:fd:a4:01:32:58:ac:99:3b:a8:8e:80:e4:e0:95:
5f:c9:55:8a:04:5a:7b:b3:f4:9c:30:03:8c:77:13:
cc:4c:f2:84:33:3d:5e:14:7e:cf:32:c8:f4:8e:8f:
1e:01:cb:31:db:1b:de:ee:ae:35:3e:01:56:ba:a9:
35:3a:34:66:f2:4f:44:e6:67:8a:ea:02:1b:e4:7f:
4e:e6:9a:60:5b:25:ec:56:6d:8c:67:c9:9f:62:d8:
a6:ad:c3:a7:11:95:c9:cd:a2:54:ff:f0:f1:53:6b:
91:29:35:5b:7e:84:40:0a:3f:29:6f:31:73:42:a9:
31:ff:7a:b1:0b:4b:9c:86:6d:ef:5c:63:fa:ef:2a:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:D3:64:64:7A:C8:88:B8:DE:1C:10:C5:32:8E:F4:66:F6:BA:9E
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d3:5e:5b:3f:5a:4b:f7:29:08:40:c9:40:da:8c:fc:ef:fb:
e1:cd:c7:ce:c0:b6:2e:7f:65:3a:f1:3d:24:e8:e2:10:28:b3:
42:f7:a7:47:97:d5:24:47:a6:7d:8e:d5:0d:10:46:51:0c:00:
6e:9a:f7:62:6f:98:79:d8:8e:a9:19:2c:b0:cb:71:43:f3:67:
28:45:dc:4c:93:34:ed:ef:c7:4d:b9:9f:25:73:d8:4e:88:e2:
e0:c1:2b:06:5e:f4:38:fa:9e:a2:69:73:22:55:77:21:79:2f:
e2:e5:a6:dd:fe:b4:5a:6f:5b:14:cf:48:a0:3b:40:05:e6:11:
62:3a:f6:31:36:27:4e:d2:7e:0d:c0:ce:b0:01:bb:f2:b4:86:
94:b0:68:6b:a6:b0:b5:b4:fb:a1:43:60:ac:41:09:18:db:2d:
e8:c9:c5:32:c8:13:46:30:32:60:51:47:8b:4b:47:83:eb:7e:
20:e5:3b:ec:c1:ad:15:6c:07:0d:69:64:5d:01:ca:c8:40:34:
4b:22:3d:31:4a:68:e7:fc:9d:86:90:42:b7:64:44:1f:b7:26:
cf:e8:86:c7:29:27:75:84:5a:1c:3c:d8:e1:1e:ce:0c:0e:7e:
44:95:bc:31:22:34:48:93:ea:ad:bb:38:8d:7f:55:4e:0d:eb:
1a:81:61:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:14:16 2026 by rpki-client