Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: Yjllcrj1oDALLKexzPn8TxtDrO1pS+CpPOHF83njYds=
Subject key identifier: E2:9E:99:94:C0:AC:53:DF:6C:9C:05:5A:52:B6:86:22:70:9D:5F:44
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 01A024D7239290000C63FDE4BC7A68D3CFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 1A2C
Signing time: Fri 21 Aug 2026 15:01:14 +0000
Manifest this update: Fri 21 Aug 2026 15:01:14 +0000
Manifest next update: Sat 22 Aug 2026 15:01:14 +0000
Files and hashes: 1: 1rZ9lvq4z5GUrK1ubBuPHqaf3k0.roa (hash: jv0midgpTJeUMCUfbjDUlxTZCO6xs8bC/AB49kze9Rk=)
2: JC6b9AAY2rwkq1FORl5Abxr-m1w.roa (hash: TFvVsSvQ0TaMuOye+x7ZRV34hFmw1XW7pj5/x7K+d10=)
3: c64_xwrokSnmr0o0Rxc1LXbWsks.roa (hash: D7VOIgGxMLMKLMuDjwZq55SJloCAKPMrVwWrZEo0Y/o=)
4: t23_omorbxNaeI1t-2_nVI-M9Bo.roa (hash: tkmuOhPWK63hgBOOCfU7J7aL82MJy/fu9mcuqv0UO0w=)
5: yTBqPRFUVfKdzLterimo113_dkQ.roa (hash: qNzAUGKwPF55HCrIzh2nSa4zmob6mdMkWCPw4jO7Mk4=)
6: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: xi19tvB5ugTyrPVa3m626i4PIFUGdAMQ6mVTl0f5cVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:d7:23:92:90:00:0c:63:fd:e4:bc:7a:68:d3:cf:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Aug 21 15:01:14 2026 GMT
Not After : Aug 22 15:01:14 2026 GMT
Subject: CN=e29e9994c0ac53df6c9c055a52b68622709d5f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:8c:1e:16:38:2d:04:95:5c:27:d2:eb:05:
07:c1:4e:c2:4e:28:d0:db:4c:d4:6f:ee:57:14:aa:
91:89:05:b5:9c:91:67:d6:13:db:4b:7e:74:f7:04:
bc:90:db:8d:2d:f1:66:27:11:06:74:b5:fa:99:c8:
25:4f:51:97:84:42:ae:5c:e4:84:d1:8c:a6:d3:c2:
de:d6:b6:59:5e:c3:c7:8f:3b:ca:8d:54:f6:4b:f2:
6c:27:e6:e2:3e:7e:9d:00:b1:47:fb:fd:49:1c:66:
49:1d:42:b9:1e:0b:a5:0f:2b:3e:36:07:5b:c3:58:
4e:e2:72:3a:59:55:cf:59:3e:ca:4d:20:83:95:6f:
82:6f:f6:08:34:08:60:b9:b7:64:32:4e:61:da:42:
42:45:48:ab:8f:e3:cf:4d:f4:02:a5:14:0d:c1:d1:
e7:c6:9f:0f:39:43:97:2a:2f:e8:c3:e1:3a:79:69:
01:38:1e:5e:ef:57:a9:e4:8a:a9:40:e9:26:f7:59:
e7:27:44:93:db:13:d8:98:02:78:3d:c9:88:ef:0d:
29:e0:5d:2a:0b:ad:32:02:42:ce:8b:b3:3f:e7:8c:
80:ed:4f:63:ab:9b:fa:24:79:ec:51:e9:c0:09:be:
09:a2:72:56:1e:7c:5e:40:f1:5c:db:cb:72:0c:70:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9E:99:94:C0:AC:53:DF:6C:9C:05:5A:52:B6:86:22:70:9D:5F:44
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b1:72:1f:92:d4:f5:c5:cb:20:a0:8d:31:e7:1e:35:b1:52:
f5:25:63:dc:4a:cb:29:cd:66:cf:1b:4a:28:c7:17:5b:29:fd:
b5:1c:eb:de:c6:dd:d8:50:bf:e5:fc:83:fd:4c:88:96:2c:bd:
a5:c1:5c:3b:69:0d:fe:84:3f:ab:c1:82:2f:e2:7d:fc:e8:a5:
d1:3f:f6:cf:d7:ea:fa:c7:3b:eb:52:9c:29:20:7a:cd:07:a1:
1f:27:b8:51:1f:35:5d:c8:c0:50:c4:d8:14:da:cf:7d:92:e6:
a7:5a:83:70:cd:6a:47:87:13:6d:42:96:ef:42:99:fe:c9:2a:
fc:74:4d:83:b5:12:82:8a:44:3e:dc:4c:fe:3b:61:90:67:4e:
eb:9c:3d:69:ac:74:0c:58:d9:ff:4c:5f:e3:7a:d4:c1:06:65:
29:15:37:ba:4f:f0:8e:ea:5c:ce:38:17:b9:16:9c:d8:48:6e:
8c:2a:b1:1c:4c:c6:13:7d:54:f4:32:ed:eb:98:e4:17:ba:4d:
d9:2d:70:1d:23:99:6e:bf:97:c8:c4:b5:ac:75:9c:99:3e:41:
c7:aa:63:1f:77:83:9a:ca:26:d6:a8:fd:16:8b:81:8f:fb:8a:
71:08:74:34:f8:1e:6e:ac:ef:4b:28:e7:71:0f:56:08:c5:35:
d0:03:73:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:09:49 2026 by rpki-client