Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: YRnEU0IGjWBlFOsWQD9zBLP+1o4/0Xd22J6NVEGtnUY=
Subject key identifier: 4E:98:F4:FE:90:36:4A:4A:7F:0C:DC:62:40:75:AC:E4:77:23:85:D4
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 01A06D27356D088A600CEC7DE3348CF93CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 1A4C
Signing time: Fri 04 Sep 2026 16:01:21 +0000
Manifest this update: Fri 04 Sep 2026 16:01:21 +0000
Manifest next update: Sat 05 Sep 2026 16:01:21 +0000
Files and hashes: 1: F_Dk1EXyZalcSUrQVrmmhufc-3c.roa (hash: Bud8p3xLXlXOrM2nbGi5ghblIRWjV7KfIKq7F8d9FoQ=)
2: P8VBM2Vt78MH0hTsTsDYoN1DCwo.roa (hash: BNrt6BqKbc/fkjdmpvHEP4BZdwanUa88eWbx1Ysrn8g=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: L8IXr2DeabwpgpPNbjzzuH6n8RlI2jQ8H/Ku+lFsHz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:27:35:6d:08:8a:60:0c:ec:7d:e3:34:8c:f9:3c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Sep 4 16:01:21 2026 GMT
Not After : Sep 5 16:01:21 2026 GMT
Subject: CN=4e98f4fe90364a4a7f0cdc624075ace4772385d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:a2:cc:6b:68:f0:4c:5a:f2:e7:5a:ec:6b:
94:a7:76:ce:a2:26:ad:d9:51:cb:6d:05:a7:6c:31:
6a:f6:68:b4:ce:37:1c:ad:41:f6:47:6e:7e:17:46:
6a:b4:4d:12:84:ce:05:c3:2e:d2:3d:93:af:f5:d3:
fe:98:27:ca:9f:53:34:77:7a:43:f6:6c:0f:24:a9:
ca:b1:fc:d2:71:47:4e:4e:da:2d:66:bf:e1:dc:9e:
79:aa:1c:06:53:4e:52:9f:43:c3:91:e1:cb:82:04:
2d:f0:1e:4f:9d:f3:3c:d6:4e:65:44:de:da:26:40:
28:90:43:98:c9:3f:ae:0b:0b:05:e2:98:a0:d8:ec:
b3:e7:18:fc:37:5a:b7:c4:b5:b4:e5:2e:27:bf:ad:
c3:66:d9:4a:4b:df:17:a9:a1:b2:c5:3d:00:7b:55:
aa:6d:87:58:0a:63:0e:9d:a4:32:78:8d:7c:de:fe:
72:ff:14:f5:e2:63:8d:3f:37:fb:7f:5b:5c:aa:78:
d8:c7:c3:0e:8e:ec:a9:04:f4:04:82:cf:f0:95:e7:
a2:14:1e:2b:ad:e1:7f:9e:3f:a3:00:97:59:8d:d3:
44:be:63:ab:aa:50:9c:7d:ff:07:60:7f:c9:b5:1c:
bf:9b:a9:43:61:50:0b:92:80:ce:be:66:43:6d:d9:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:98:F4:FE:90:36:4A:4A:7F:0C:DC:62:40:75:AC:E4:77:23:85:D4
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7a:64:04:87:24:f4:47:5f:ad:01:62:df:46:2f:73:06:dd:
3f:b5:0f:dd:2b:3e:3e:66:1a:81:a0:62:42:c6:8e:61:e5:52:
b0:b9:1a:2e:27:4f:a0:66:45:e7:d4:7d:06:d3:d4:96:8b:a2:
7c:b2:0e:08:52:ca:75:60:63:4a:0d:e3:bb:93:5a:87:b2:d7:
70:cf:3b:95:27:9f:75:bc:e6:ef:32:a0:4c:07:ed:7a:f4:52:
80:70:10:49:2a:12:94:7c:59:a2:87:0c:22:8d:80:2d:ec:dc:
48:36:80:7d:ca:a5:8d:08:c3:99:77:30:b9:58:bb:67:0e:8b:
8a:e3:1f:7a:ac:a1:76:07:04:79:de:a5:7f:71:8c:2f:a4:43:
64:98:1d:e1:1d:71:e9:f1:3f:14:2b:b1:9e:5d:a0:28:28:3d:
f2:0a:96:56:a7:a3:ce:b0:c0:cf:fa:f6:bc:95:d0:d1:81:39:
a4:05:38:69:2e:e8:9a:dc:f9:db:75:f0:14:99:0f:c0:06:7d:
8d:7d:25:81:bd:65:f0:03:a1:62:42:e0:ff:a3:32:ae:fc:11:
37:9f:e5:31:fd:50:90:fc:72:fa:8d:ee:89:65:8e:ab:38:b5:
ca:03:87:0b:ef:94:7a:98:11:ee:28:74:2e:13:6a:8c:35:8b:
0b:ed:e2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:20:24 2026 by rpki-client