Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
File: pZDvI7RWydsg0wdCkysBf8VyTlY.mft (raw, json)
Hash identifier: 8CrLsmCcd908anMNcXKbNCjjAGvFznqC6wRNt/q8GPs=
Subject key identifier: 38:8D:B3:8E:C1:B5:DA:E2:AF:FE:5D:DF:98:04:A3:16:5D:90:94:2A
Authority key identifier: A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
Certificate issuer: /CN=a590ef23b456c9db20d30742932b017fc5724e56
Certificate serial: 01A08B68135FDCC0B21F37E86C2D38F76A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
Manifest number: 11FD
Signing time: Thu 10 Sep 2026 13:00:48 +0000
Manifest this update: Thu 10 Sep 2026 13:00:48 +0000
Manifest next update: Fri 11 Sep 2026 13:00:48 +0000
Files and hashes: 1: KbhQ6u1VdqVgoC_w__veaIi-7zs.roa (hash: usnYtgKElxMHtJ3gMNxaW5mRcQvldV2GcoR0WqVjLH0=)
2: pZDvI7RWydsg0wdCkysBf8VyTlY.crl (hash: mZgkEWHt8+TN2kGC9Edb30RrSr0+n6SJHGEmonDvd/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:13:5f:dc:c0:b2:1f:37:e8:6c:2d:38:f7:6a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590ef23b456c9db20d30742932b017fc5724e56
Validity
Not Before: Sep 10 13:00:48 2026 GMT
Not After : Sep 11 13:00:48 2026 GMT
Subject: CN=388db38ec1b5dae2affe5ddf9804a3165d90942a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:76:fb:42:e0:c6:70:51:76:15:fc:24:7c:85:
85:fe:61:18:52:05:96:4b:d7:73:68:19:46:cf:9e:
29:a0:29:2f:69:68:8e:2f:28:e3:ab:d3:c7:9d:80:
e0:5f:f3:df:b9:88:95:f3:de:5b:51:0e:8e:2d:24:
82:9e:67:69:86:8f:aa:cc:54:f4:d2:a9:47:2b:b1:
be:52:6b:86:b4:53:85:06:23:36:ec:75:ac:8c:ae:
04:a8:47:84:1b:4b:c5:71:bd:66:af:68:9a:de:b2:
f0:00:37:e0:b0:47:8c:5e:21:e7:9c:4d:cf:70:6f:
4d:ed:f3:3d:8a:d9:1f:ca:17:92:48:c9:ad:e9:c0:
4d:cd:ea:0c:89:7e:68:f1:ad:d8:cb:01:c7:6e:40:
3c:56:ab:f5:18:a9:9d:71:eb:ba:b9:5c:a7:b0:a8:
e1:8b:f1:f9:40:09:66:ac:63:6d:02:0e:f1:e4:00:
6f:cb:f8:29:30:21:3e:90:24:c7:20:60:8a:37:26:
8e:76:8e:24:cd:c1:e5:d6:05:5f:37:28:95:3f:5c:
ef:13:b4:75:df:7a:35:a5:fa:33:f0:98:95:ce:19:
6b:20:6f:1a:6b:1f:9d:4d:9d:e8:f8:20:fa:6f:a9:
68:dd:3f:18:c4:60:d6:0f:4b:f3:9e:32:a8:97:85:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8D:B3:8E:C1:B5:DA:E2:AF:FE:5D:DF:98:04:A3:16:5D:90:94:2A
X509v3 Authority Key Identifier:
keyid:A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:36:00:64:4d:78:59:a0:2c:a0:9d:f8:13:a4:1a:70:8b:2e:
f1:73:5c:81:0c:4f:40:a9:d5:7a:ea:90:40:22:fe:5b:6d:1b:
41:34:69:18:c7:6c:79:4b:b3:df:35:b8:b1:16:6a:0e:88:90:
e0:ef:19:d8:f2:5f:93:92:88:1e:f9:e1:16:16:40:9f:c7:7e:
8d:13:3c:7d:fe:c8:21:93:84:a0:f2:57:42:99:07:7f:56:a6:
b0:44:a5:70:cd:b0:5a:9f:82:a4:6c:fc:c1:d2:e3:52:c2:2e:
0c:09:05:f6:89:4a:0d:72:4e:8d:00:f1:d3:50:5a:f7:90:49:
1a:d8:aa:98:5a:d2:21:bf:3e:2d:8d:0e:f5:cd:f0:b0:e4:5d:
b6:17:81:28:b7:7d:ee:d0:2f:33:15:42:c9:6b:76:07:64:c7:
0b:76:9a:84:c5:8a:69:aa:55:a5:a6:1b:09:c1:06:36:4c:02:
cc:c4:2c:75:cb:42:1e:01:f2:90:2f:00:cc:3b:0b:f0:d6:1b:
53:6c:f9:48:17:6d:54:45:cf:18:d4:b4:d8:73:30:46:d8:d2:
8d:99:7b:3b:c4:f9:81:af:41:de:86:34:36:b8:1b:25:ea:b9:
bb:b7:1d:0c:83:5d:bf:02:2a:19:4c:41:d4:7c:8c:68:ae:06:
fb:44:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:32:25 2026 by rpki-client