Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File: ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier: 2rwm5ndw4WYT/tstcVLSvk2zXX8yquzqqO0euAXHnIw=
Subject key identifier: BE:E1:0F:5F:6E:46:3E:85:09:9A:30:79:5E:AD:D1:28:B9:68:C8:2B
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer: /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial: 01A08A1E9D8AC30F7E4D2A38B5349F608C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number: 0B86
Signing time: Thu 10 Sep 2026 07:00:57 +0000
Manifest this update: Thu 10 Sep 2026 07:00:57 +0000
Manifest next update: Fri 11 Sep 2026 07:00:57 +0000
Files and hashes: 1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: 5AI0TXsMTaI3Oe0MiWkuA0t+htR9J+Q+RVVI+WGq6fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:9d:8a:c3:0f:7e:4d:2a:38:b5:34:9f:60:8c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
Validity
Not Before: Sep 10 07:00:57 2026 GMT
Not After : Sep 11 07:00:57 2026 GMT
Subject: CN=bee10f5f6e463e85099a30795eadd128b968c82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:3e:2e:77:e7:14:6e:47:7a:18:ad:1e:b4:
fd:45:05:af:f8:ff:7f:ce:91:97:6f:5a:7f:e7:f8:
9a:5b:e8:b2:2c:3e:14:1d:a2:d5:da:c3:70:2e:a8:
3d:ad:79:13:ba:80:e7:21:4f:65:eb:89:b4:e9:ff:
31:86:3f:b5:ee:3b:0d:7e:79:2a:4e:a8:03:48:bb:
48:e2:3c:1e:38:e1:ac:8b:dc:32:0d:25:a0:a1:7c:
60:fc:69:00:27:d9:3d:3a:e2:12:d2:a7:6c:0c:2f:
39:ed:be:ce:31:c0:22:1f:e3:0d:cf:f3:a6:fd:41:
21:96:be:e8:c2:46:23:cd:c4:72:36:f7:fb:1f:53:
f1:6e:3f:06:15:d3:03:38:e6:f8:fb:82:30:9b:f7:
f8:eb:78:55:21:f8:50:76:9a:4d:7d:cb:f3:5d:d3:
2d:63:1d:cc:eb:5e:3f:16:23:db:be:b5:b0:12:be:
e9:0d:39:9a:9b:c8:db:e5:fd:f7:6a:58:7e:0c:89:
c5:99:08:01:91:bb:fc:2a:ef:fd:23:94:fa:d9:d7:
2d:83:12:a1:31:7b:1c:eb:1b:66:2b:4f:2d:31:56:
b0:c6:37:bf:16:4c:b9:fd:eb:2a:e3:f3:ae:02:06:
55:16:3f:32:34:5c:b4:2d:0e:56:f1:39:6f:e2:1b:
b6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E1:0F:5F:6E:46:3E:85:09:9A:30:79:5E:AD:D1:28:B9:68:C8:2B
X509v3 Authority Key Identifier:
keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f3:37:a9:08:02:5b:4e:93:10:7e:87:80:66:95:32:ee:14:
19:de:f9:11:51:cf:4d:e2:0d:95:3a:dc:f3:1d:66:5b:ce:92:
14:b5:ac:81:4f:b2:37:70:dc:2d:07:f7:34:51:76:e9:78:19:
ae:5a:f4:f9:d9:da:a4:63:2f:18:e2:9c:9d:19:80:2f:97:09:
b5:02:10:f8:04:5f:27:7f:5a:1e:0b:bc:42:e3:6b:57:b3:48:
ec:dc:b3:67:15:77:e5:bf:76:9e:52:59:a3:eb:a6:89:e8:6d:
32:ab:fb:33:a3:61:09:c7:1d:0d:7f:56:20:8d:1e:fb:82:2c:
4e:e8:c9:05:cc:36:e0:ba:47:3a:2a:a2:cf:bf:b1:78:8a:6b:
f7:73:43:05:10:7b:c6:8e:fe:8b:16:2a:f8:45:9e:f4:25:ce:
2b:6f:81:24:33:34:b3:fd:bd:c3:0d:4e:67:10:e9:9b:e1:b3:
fc:99:80:eb:a7:a9:cf:ee:b1:4c:d2:86:c5:3b:f0:9e:69:0f:
d2:9d:6d:1e:87:b8:1d:d2:72:86:b5:4a:ab:37:05:a5:07:5c:
63:b9:0a:be:70:6f:ab:47:26:9f:40:7f:ff:53:da:51:4c:05:
96:ad:ec:b4:c0:a0:18:5f:1f:28:10:8d:c2:7b:e8:a7:81:41:
c3:e0:84:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:54:16 2026 by rpki-client