Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier: 6n07D3BJq3WPlma0pP6oz0jH1O7fZivbM4RwQTo6zqs=
Subject key identifier: 43:25:61:C1:99:61:99:2A:20:8C:75:0A:0D:3D:C7:B2:E4:13:AF:D7
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial: 01A08B68CA55276DD799B6D72CBFF3E5112A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number: 0F9D
Signing time: Thu 10 Sep 2026 13:01:35 +0000
Manifest this update: Thu 10 Sep 2026 13:01:35 +0000
Manifest next update: Fri 11 Sep 2026 13:01:35 +0000
Files and hashes: 1: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: R6/fPwTqeTlozrQFqBG4qlh9N5ZL4UMjRLqDuIlKL5A=)
2: eX-mxCe4aOVRvqfABXD3XD44-Q0.roa (hash: WteYUUqDb29xXfLR9yOCxZhFZTrxf/JEk97tf2HnzV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:ca:55:27:6d:d7:99:b6:d7:2c:bf:f3:e5:11:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Validity
Not Before: Sep 10 13:01:35 2026 GMT
Not After : Sep 11 13:01:35 2026 GMT
Subject: CN=432561c19961992a208c750a0d3dc7b2e413afd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:4a:d1:d0:8f:d5:86:39:96:39:95:ca:4b:
01:f0:61:da:0b:c3:59:20:a1:7e:b6:66:1f:2b:1d:
55:a4:ae:94:50:1f:cb:6c:6d:8b:ea:0d:90:8d:2e:
fb:0b:85:ba:f9:81:f4:a9:e0:3d:b7:bb:6e:be:c4:
30:db:a5:6e:f2:21:62:a2:d9:03:0f:35:e3:ae:f7:
40:25:99:64:a5:5a:42:0a:36:c5:cf:73:10:22:65:
79:21:e4:f0:3c:60:4b:3f:bc:33:19:b8:da:8e:47:
a6:48:be:37:ea:34:41:3f:1b:90:67:1c:e0:47:cc:
96:cf:59:d6:3c:d6:70:69:94:65:fe:64:9b:39:de:
c8:e6:83:77:a1:c6:5b:46:72:b2:fd:ff:3b:a8:c4:
83:e5:cb:c1:3c:d2:d3:32:db:64:06:e0:55:a7:3c:
09:f9:a6:52:5b:e8:87:79:5a:21:75:b4:f4:3d:c4:
4a:25:69:24:a7:8e:09:e9:51:72:db:62:8f:22:28:
8a:00:57:a0:e4:f4:ee:63:31:6f:12:89:b7:9a:c6:
7e:1e:55:99:4e:2a:c3:d5:85:60:69:19:5c:89:bc:
32:c3:14:7e:f2:c0:a6:86:68:43:3a:99:a3:15:64:
21:93:3f:94:d7:3f:38:ee:21:56:fc:e0:5c:1b:7d:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:25:61:C1:99:61:99:2A:20:8C:75:0A:0D:3D:C7:B2:E4:13:AF:D7
X509v3 Authority Key Identifier:
keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:81:82:9d:6e:5a:05:b5:d2:0d:fc:86:44:9a:50:d1:cf:33:
10:6e:da:71:e3:8f:17:55:d4:ac:54:bf:b3:a7:a7:e7:0a:99:
90:0c:96:55:b4:9b:e3:6e:22:ba:21:e2:8e:5a:75:52:4b:09:
d3:e0:5e:79:ca:17:84:1a:b5:ba:f0:4e:96:e8:5b:de:9a:62:
8f:08:02:3f:c9:35:97:99:b0:7d:a7:1b:b1:3c:16:aa:9f:39:
1e:50:5c:f4:c6:6a:69:3b:f7:25:e9:17:2b:e0:60:13:77:e4:
7a:1f:97:91:f6:7d:2d:9b:74:aa:3d:0e:79:9c:c9:28:1e:27:
32:a2:6d:4d:ee:58:e5:cb:7e:61:c7:90:15:01:da:d2:7d:60:
a8:68:b3:73:b3:db:95:4b:d4:14:78:e4:f7:5a:3e:28:9f:d9:
b6:77:c9:9b:5d:db:0d:04:76:3a:1a:3f:02:9b:81:d5:d5:3e:
44:0c:93:e4:a9:95:02:bf:91:f7:6e:56:03:10:f1:65:00:f3:
1a:3c:71:ea:9e:08:f9:85:59:21:42:10:69:03:91:89:f0:13:
dc:31:6c:aa:c7:37:35:13:09:9d:35:79:a6:1b:a3:a2:2f:c6:
8e:74:40:c5:a4:d1:d9:92:42:41:4d:43:d3:c6:55:c1:0b:b7:
46:8c:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:55 2026 by rpki-client