Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
File: z3gtKHK556EKkaJ_MHAg2pSESCc.mft (raw, json)
Hash identifier: ntsH/l1kcifDQRPYtqJzQyRgawpojL+dMUL3T49/TtI=
Subject key identifier: 92:06:21:0D:55:04:82:41:83:3C:81:26:86:5A:BC:45:36:4E:6C:FB
Authority key identifier: CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
Certificate issuer: /CN=cf782d2872b9e7a10a91a27f307020da94844827
Certificate serial: 01A08D8D4EF769B54DE12AFA1791EE2164AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
Manifest number: A1
Signing time: Thu 10 Sep 2026 23:00:43 +0000
Manifest this update: Thu 10 Sep 2026 23:00:43 +0000
Manifest next update: Fri 11 Sep 2026 23:00:43 +0000
Files and hashes: 1: MoIvUz5lwZlbNrx3nyA_TUl_A00.roa (hash: FOMLayHG7KjKY5RaWNXk9EZf9JkS/3bo0DSwODGb+Ak=)
2: z3gtKHK556EKkaJ_MHAg2pSESCc.crl (hash: Gm+Qf+3yKvnNXAon8hCcCj5OL7pZzc8Z4gf8EJ0Tn/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:4e:f7:69:b5:4d:e1:2a:fa:17:91:ee:21:64:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf782d2872b9e7a10a91a27f307020da94844827
Validity
Not Before: Sep 10 23:00:43 2026 GMT
Not After : Sep 11 23:00:43 2026 GMT
Subject: CN=9206210d55048241833c8126865abc45364e6cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:4a:ea:14:b5:e9:4d:90:a4:60:4d:99:40:
a7:d2:f7:ec:85:ed:25:48:b8:86:cb:2e:c3:f1:ad:
8a:5c:f8:1b:8f:37:ec:28:cd:27:a4:28:9f:81:c5:
20:d6:64:67:8e:b4:9b:eb:00:5a:0f:30:12:f4:23:
77:f4:b1:ee:76:80:45:12:25:61:bb:9a:67:47:8c:
ac:13:36:22:d7:95:c6:16:b7:f8:3b:ed:76:61:79:
05:2f:b4:3b:17:f0:c8:25:02:7c:45:22:d9:7a:4e:
be:ac:0f:b8:68:55:87:60:4a:ef:a1:cd:91:03:3b:
20:5c:aa:38:02:2b:43:27:1a:c3:ef:4e:35:67:61:
1c:67:8c:40:41:77:a5:b9:44:04:71:7f:9e:55:37:
a9:44:d0:6e:18:aa:33:82:0c:09:25:d6:0b:39:3c:
95:da:e4:08:64:1e:7e:59:54:a2:6b:72:a3:9b:99:
1b:5d:bd:bd:6f:a9:5b:02:77:29:61:47:59:47:02:
40:89:22:3f:74:6a:14:00:0f:10:cc:13:6a:0a:a0:
69:97:33:1d:42:75:44:b8:24:d1:36:3b:eb:e3:65:
d1:ee:c0:4c:df:d9:27:f9:cc:23:2a:e6:2b:58:05:
d1:1b:be:be:6e:46:6e:1e:60:72:25:37:64:e8:e5:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:06:21:0D:55:04:82:41:83:3C:81:26:86:5A:BC:45:36:4E:6C:FB
X509v3 Authority Key Identifier:
keyid:CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9e:2d:d9:57:8a:de:89:05:03:a4:88:33:cf:77:e5:09:ab:
1f:7d:b4:b2:b1:fd:90:b3:3e:c8:ac:89:cb:4b:64:8f:a0:fa:
62:62:0a:6d:e4:c8:3f:e8:b3:d7:a5:33:53:7e:53:9f:4a:22:
97:39:51:06:38:e5:b4:a3:b9:15:b7:44:5d:77:35:98:af:50:
df:1a:1b:57:5d:09:17:07:96:5c:50:7c:8b:b2:5b:89:f0:db:
a9:4f:58:fb:cb:87:96:ce:90:a9:b3:e3:e5:5e:ed:7c:6f:6e:
06:21:57:70:97:66:a0:a5:53:e9:19:3e:2d:f3:46:ea:cc:79:
20:35:81:c4:42:ef:26:2b:28:3e:2f:26:47:9e:3d:92:73:53:
7a:0f:e5:f1:0d:5e:c3:58:2c:6a:9b:6a:48:5f:d1:ad:4e:78:
be:4a:22:62:2c:3b:b1:1d:bf:59:b9:59:a5:1e:45:e7:da:a2:
12:c7:da:b0:27:1b:aa:70:0d:e1:e4:c3:c1:8e:34:01:1d:0a:
78:1e:d7:a7:24:8d:1e:20:16:44:09:8b:cf:26:c2:ad:eb:b4:
26:28:c7:c2:e3:59:2e:bc:54:63:b9:ee:f3:78:f6:a9:78:c7:
09:d7:f1:cd:ab:01:28:61:93:6f:e4:c8:46:ac:18:d3:4a:f1:
4f:f8:2e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:25:30 2026 by rpki-client