Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: ebUL9YPc8OS08KtmsGJnHMlGxd4AHXsrQKltOFD0tp4=
Subject key identifier: 09:71:81:99:10:10:77:B0:C5:3C:2F:9D:32:30:68:31:7F:B1:67:D1
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 01A08E326063EEF5630C3B11C83C5715F66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 0AC7
Signing time: Fri 11 Sep 2026 02:01:01 +0000
Manifest this update: Fri 11 Sep 2026 02:01:01 +0000
Manifest next update: Sat 12 Sep 2026 02:01:01 +0000
Files and hashes: 1: 7BgGMhfrcQqzufLm6BOZyNmcrP4.roa (hash: Ez1hXHY/SyH5UhM0EJmIkgA9tRyMxJtbCALr5l1nz1Y=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: yzSMlC4qv6CeMZla+e7mxTK4+iV7iB3WCXCl45h6Snc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:60:63:ee:f5:63:0c:3b:11:c8:3c:57:15:f6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Sep 11 02:01:01 2026 GMT
Not After : Sep 12 02:01:01 2026 GMT
Subject: CN=09718199101077b0c53c2f9d323068317fb167d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:56:cc:55:e4:8b:13:55:81:8f:25:1d:56:
bf:78:ef:98:2a:66:ff:4e:cd:e6:1a:4f:70:9e:fa:
12:3c:2b:b4:67:22:fd:4e:5c:c2:6b:05:16:96:02:
43:f3:05:39:99:3d:bc:72:80:71:29:d3:1a:84:fa:
26:a1:2e:40:96:95:3b:fb:0b:a9:f4:9c:50:94:7a:
c6:0d:a0:a8:0d:14:68:09:ce:20:88:c6:c6:88:5b:
e4:89:c6:10:09:5e:be:c9:07:a4:5d:61:57:66:7e:
d9:52:7f:a7:f7:fd:29:0a:74:08:8f:54:2b:fd:48:
f2:c6:7a:d9:71:c7:e4:f9:bf:4b:20:73:ad:d1:12:
9c:c9:03:a1:95:63:39:7d:46:dc:9c:01:ff:f7:bd:
28:89:78:ec:8b:e2:13:f6:20:30:03:54:9e:f0:bd:
83:52:71:33:d6:03:67:81:e2:cc:d7:40:47:f6:da:
e0:8c:21:27:65:50:9e:11:48:5c:50:32:c7:e5:7b:
30:58:d2:f1:ee:b6:1a:be:8d:fc:d9:c5:20:13:11:
ec:60:1b:4e:ec:b1:b2:fb:51:99:77:f5:85:65:c4:
c5:ae:48:73:fb:da:95:a1:46:ba:28:74:f7:f1:c5:
01:db:6a:5e:cb:ab:ff:b1:59:de:b9:25:fc:5a:84:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:71:81:99:10:10:77:B0:C5:3C:2F:9D:32:30:68:31:7F:B1:67:D1
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:80:55:85:d9:61:89:ea:4c:de:66:fd:36:2a:19:ce:db:50:
1f:65:08:e4:4d:43:80:89:12:24:70:ed:64:7a:6d:7c:70:55:
ec:59:01:91:71:83:2c:99:78:b7:25:3d:01:e6:4e:1e:0c:be:
15:28:c4:b8:39:be:1d:62:d2:cd:9e:1c:24:d1:dd:db:ab:5e:
aa:55:e0:f9:79:37:f1:af:56:24:72:3d:a5:f7:30:bd:77:95:
88:8d:ae:f8:05:40:e3:ae:80:fa:be:dd:43:55:9b:f0:02:d3:
d1:27:0c:c3:f0:a8:80:c7:01:de:06:1f:c1:89:06:e7:5f:1b:
a1:2a:98:ba:fc:30:15:cd:e9:f6:e1:b9:36:24:80:af:91:a9:
cc:43:55:78:1f:5e:8e:b4:40:ab:f4:f7:61:99:3c:33:61:cc:
05:d7:ad:03:ce:0a:c4:5a:f9:ad:e7:18:58:aa:c8:b6:8a:4d:
ca:38:7c:19:f5:8e:86:5b:47:e9:a9:61:29:58:29:c9:9c:b7:
b7:b1:b2:4b:10:e8:b1:66:a1:b9:4e:d7:3d:f7:30:4b:9d:9a:
a8:2f:f4:55:7b:5f:d9:30:3e:96:cb:ab:6d:06:78:02:15:e3:
b8:5b:d3:b9:e8:ef:74:c2:e7:7a:10:d3:20:c2:8c:09:22:a5:
46:10:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:59:18 2026 by rpki-client