
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File: zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier: DO/TGOJnX00wd6/io2vTqJHNwauHhaAaOxodnn/tGi0=
Subject key identifier: DD:20:9D:EC:08:AA:12:3A:1A:31:88:7D:B9:20:7B:9E:AB:EB:49:CA
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial: 01A08B682C40DEF799C80E6404A2791301D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 13:00:55 +0000
Manifest this update: Thu 10 Sep 2026 13:00:55 +0000
Manifest next update: Fri 11 Sep 2026 13:00:55 +0000
Files and hashes: 1: CXkKc_BGGlQDVJndPZpJEIKApLM.roa (hash: lB6WL5NHR05zZ3JJcK7U/WiKpx7SIVQpEQDB/XRsPv0=)
2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: tkT2BbhLJToz5LEfETEzb4fFxlLyI4T20pbcSBj7R90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:2c:40:de:f7:99:c8:0e:64:04:a2:79:13:01:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Validity
Not Before: Sep 10 13:00:55 2026 GMT
Not After : Sep 11 13:00:55 2026 GMT
Subject: CN=dd209dec08aa123a1a31887db9207b9eabeb49ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:57:2b:76:0b:dd:ad:c6:f2:86:74:eb:df:
5a:09:33:b3:18:8e:cd:e9:6b:7a:42:97:24:41:33:
c7:1f:d0:eb:55:33:c8:8c:ee:0c:ef:2f:23:01:fa:
d8:09:64:3a:be:13:ba:ca:a2:89:d7:e1:8d:68:6e:
84:ab:49:04:2b:6e:95:2d:f1:8e:6c:e2:03:39:87:
87:4f:7a:79:97:0e:c0:95:29:19:fb:a5:20:1b:d1:
b0:21:26:34:4e:fb:b3:14:6f:ce:f2:88:54:7a:27:
8b:68:a9:2b:df:a8:97:4d:71:3c:7a:b3:8a:fa:31:
56:e3:ab:10:6b:e6:5f:f3:1a:ac:93:7f:2f:83:64:
b5:03:11:70:31:2f:fd:21:84:f4:77:2f:df:00:40:
93:27:84:c4:35:8e:1d:94:f1:48:e5:4a:c9:41:8f:
cd:ea:f9:00:e5:dc:8b:76:3a:96:bc:99:79:f0:48:
54:cf:da:73:00:c5:99:fd:c8:0f:0f:76:5d:3f:bd:
4f:4d:32:d1:96:22:fe:14:63:ba:77:09:3a:19:0f:
17:5c:3b:11:61:f9:39:48:9a:f0:4e:3d:92:79:fa:
57:d8:39:29:a9:62:b6:d8:d3:4f:0b:83:78:5e:2c:
14:d0:4f:d2:0b:09:08:53:4b:b4:12:18:41:23:b0:
27:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:9D:EC:08:AA:12:3A:1A:31:88:7D:B9:20:7B:9E:AB:EB:49:CA
X509v3 Authority Key Identifier:
keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b3:6b:d6:bb:80:04:2e:93:39:a5:7c:9f:31:b1:72:29:bd:
9a:f3:57:8f:c9:70:b4:4c:9f:f7:24:c5:cc:49:14:5f:64:6c:
bd:da:e1:2d:bc:ac:f4:f2:70:9e:f6:3d:20:0b:a6:5d:d4:a0:
ac:0e:36:b4:58:3c:87:3b:bf:89:8c:0f:85:78:e2:0d:22:a5:
a5:64:c9:63:bd:d0:8b:df:5e:3b:62:fa:d4:79:af:a0:cd:b3:
45:64:56:12:0f:57:b7:8e:17:3d:bf:39:4d:3a:30:b1:88:6f:
e8:33:0b:d8:84:61:2e:84:2f:7d:2e:25:0f:25:9a:62:71:1f:
a8:64:9f:bf:07:2b:7d:3f:0f:03:d1:f6:32:a5:a5:87:22:75:
42:56:43:bd:83:c9:76:6c:32:8a:06:5f:91:d6:1d:1a:fe:bf:
e1:c1:c5:97:06:cd:01:e1:8d:9d:5c:86:42:ed:98:52:3e:72:
b5:35:4d:50:c3:96:e4:e6:09:bd:3b:75:d0:df:15:61:39:50:
cb:6e:b0:ce:a0:5f:5c:8c:05:c8:d6:64:20:f7:de:d4:38:58:
79:04:fc:cb:52:6c:5c:9f:5a:ad:6b:94:53:b9:7e:84:a2:d3:
6b:1b:19:6a:cf:df:58:39:cd:01:ca:1e:c1:4a:f6:b3:c6:6b:
df:fa:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:30:27 2026 by rpki-client