Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: qNNcDe7u2lJ+unBg2m8Sfe6Pq6z10WmFDKHYIgzl548=
Subject key identifier: EB:3B:13:08:7B:29:85:34:5C:B0:96:2F:B9:44:90:E8:FD:8A:B5:73
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 01A03D4CCA7E8E3B69CECE3493ECD0F01308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1A2F
Signing time: Wed 26 Aug 2026 09:00:37 +0000
Manifest this update: Wed 26 Aug 2026 09:00:37 +0000
Manifest next update: Thu 27 Aug 2026 09:00:37 +0000
Files and hashes: 1: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (hash: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU=)
2: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: FlE24pNTocv8Xlt/QiBNU7how3Okdj7mm7ltgYI8Q2M=)
3: f56SXyzVaFxPipkSbWjQspBnG6k.asa (hash: kTkK/KuPdlPU1v4Iqn9nm0PLfpF6FLDnJnaGt4nEmLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:4c:ca:7e:8e:3b:69:ce:ce:34:93:ec:d0:f0:13:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Aug 26 09:00:37 2026 GMT
Not After : Aug 27 09:00:37 2026 GMT
Subject: CN=eb3b13087b2985345cb0962fb94490e8fd8ab573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:6e:a3:e0:d8:1a:f8:11:01:e5:75:2e:5b:
ef:a4:ff:74:19:52:fa:20:93:60:4f:fe:b3:59:17:
11:b0:f7:0f:3a:98:00:9e:95:20:0b:76:95:3b:31:
4c:c0:b0:ba:de:08:23:5d:76:19:25:e5:f6:07:a4:
ea:04:21:72:9a:de:52:15:b3:12:15:58:f2:41:b3:
ea:4c:98:e8:fd:d5:2a:b9:e8:52:37:67:7c:53:50:
fe:00:5d:25:55:93:e6:01:1a:c1:b7:96:a4:b0:b4:
c8:7e:1a:49:3b:c8:33:4c:30:ac:6c:cd:fa:e1:1d:
be:e1:55:24:2a:b2:38:99:0b:c0:e5:4b:ec:02:bd:
91:28:7e:3b:af:53:70:f6:1b:47:68:3b:96:0c:72:
45:17:9b:31:4a:d5:f5:4c:17:ab:71:4c:11:fd:85:
44:c5:cd:ed:7b:df:29:db:ae:9e:cf:30:d0:81:c8:
b4:47:42:54:e8:56:eb:9d:af:1b:fe:79:fc:c1:7c:
26:f0:34:60:35:94:e4:a2:70:06:c6:c5:48:34:21:
5e:da:70:26:36:64:9a:25:b7:b0:db:9e:48:75:dc:
24:99:90:e8:b8:96:cb:c7:53:7a:8c:84:8c:6e:04:
2a:3c:5c:6e:fc:90:f1:a4:b9:66:9b:be:35:cb:43:
32:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3B:13:08:7B:29:85:34:5C:B0:96:2F:B9:44:90:E8:FD:8A:B5:73
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:30:57:d2:69:26:53:ae:72:ff:de:7c:d8:2d:10:a3:b3:30:
d4:10:83:f3:a8:41:c1:b2:96:99:a8:06:cb:23:40:bd:1b:e6:
b0:08:31:3b:df:db:a2:e1:06:c8:a6:fc:be:b0:b2:f3:b9:3b:
1d:64:03:ca:4d:e4:c4:0a:2b:0a:5c:c8:d5:2c:21:64:c0:c6:
8d:9c:74:d2:a0:ae:90:05:56:da:c5:f2:60:15:95:53:e0:87:
7b:ee:de:19:7b:24:6d:5a:a1:b4:a9:69:59:c8:94:98:a4:7f:
74:4f:31:27:73:e4:e9:e9:f2:97:3f:aa:72:7e:85:44:82:65:
49:37:82:cc:23:11:74:b4:bc:22:46:70:f6:a0:b4:5f:e4:98:
ff:78:6f:5f:49:5b:ba:70:60:64:a3:fb:f3:b7:92:8f:43:60:
ea:0f:72:ca:c1:d7:49:45:9d:35:3c:c8:4a:98:f1:26:1d:75:
0c:22:d5:cf:56:53:d0:cf:bf:8f:f0:cc:cf:c5:cc:39:b2:62:
ff:21:5b:d3:0b:a1:6c:3a:4d:ca:61:0b:a0:e2:a2:69:6b:93:
6c:c1:91:a9:ce:8c:1f:ba:77:6e:77:ca:4d:10:10:99:d9:ba:
2f:8c:5d:b1:38:ba:7d:c9:35:3c:94:df:21:36:ae:1b:cc:75:
6e:1f:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:10:49 2026 by rpki-client