Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
File: zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft (raw, json)
Hash identifier: 4cTwNKl0vixG2SycyvXBbjlpe+A+vDRqPcM1Fgz4koQ=
Subject key identifier: 49:43:57:70:D6:33:FB:EE:A1:6C:69:78:CA:99:FB:8E:57:6C:54:4B
Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84
Certificate serial: 01A08AC3A8D1CA585FCBD80EE03B89D04CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
Manifest number: 19E1
Signing time: Thu 10 Sep 2026 10:01:13 +0000
Manifest this update: Thu 10 Sep 2026 10:01:13 +0000
Manifest next update: Fri 11 Sep 2026 10:01:13 +0000
Files and hashes: 1: nWemIk_PUFibWyxsMCHuSPNqyxE.roa (hash: LfDaK0qO1xTJjSEUv9R58HxO4b8gyazqBrXpwSZbnWE=)
2: zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl (hash: LVEvLgRR20Nqm/CxOTSfa02sVS2pnVSGkkLfbZuPOiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:a8:d1:ca:58:5f:cb:d8:0e:e0:3b:89:d0:4c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8df88054060df685bba9739123e8342d479e84
Validity
Not Before: Sep 10 10:01:13 2026 GMT
Not After : Sep 11 10:01:13 2026 GMT
Subject: CN=49435770d633fbeea16c6978ca99fb8e576c544b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:2d:d5:f2:1b:8b:19:a2:85:d2:6b:21:72:
c6:c4:69:10:39:2e:c1:fb:f0:24:7a:4a:5b:93:c3:
c8:32:c4:ec:74:08:f8:8a:97:55:38:fb:bf:3f:49:
6d:51:df:56:19:2e:78:ad:3a:a1:75:a5:5b:64:c6:
a9:de:c8:7c:cd:b1:b2:e2:bb:54:1e:43:fb:44:93:
0f:8e:1d:ce:6f:ad:4b:82:56:59:df:e4:90:6c:c5:
32:fd:f2:4a:2b:42:66:3d:f0:d8:80:63:86:f0:35:
1c:ed:a2:82:5a:c5:3f:a3:18:b1:cf:fc:d8:71:5c:
04:ae:9a:3f:00:a4:75:5d:0f:79:8d:2f:45:1c:f7:
f3:f9:5b:b1:5e:0d:07:85:ef:bc:aa:dc:f8:95:8f:
70:43:6a:6b:39:3c:ec:82:80:15:28:ab:e5:2c:bd:
a3:9a:2b:a9:e3:46:8c:32:35:53:d7:42:59:7d:e0:
d6:d6:ec:13:c5:93:a4:77:8f:da:63:d5:11:61:9b:
ff:08:86:9a:85:b5:ee:3d:36:ad:4d:50:42:c2:a8:
bb:b2:90:85:ab:dc:9c:3c:1c:c1:27:10:86:c8:29:
1c:2a:af:3d:88:31:41:f1:02:ac:27:a2:30:8f:92:
bd:af:e9:48:23:85:63:ea:66:b6:1e:38:42:95:12:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:43:57:70:D6:33:FB:EE:A1:6C:69:78:CA:99:FB:8E:57:6C:54:4B
X509v3 Authority Key Identifier:
keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:70:28:af:a2:9e:6d:0a:41:53:03:37:23:05:cb:42:96:05:
57:bc:ac:78:3a:ab:2b:e1:d3:a7:d3:58:8e:f9:39:da:b1:a1:
f5:d4:78:22:07:81:a5:d7:c3:8f:bc:7b:56:15:a5:a6:3b:78:
b9:ef:f2:de:43:2c:95:c7:65:58:b8:7a:de:e2:83:49:a6:7d:
67:35:16:ea:29:e1:6b:02:81:ae:de:68:04:44:25:b9:9a:27:
0e:07:02:cb:45:db:ab:c5:5d:8a:cf:2c:36:a8:36:a5:26:cd:
78:cf:0c:c7:04:e2:5d:59:37:5a:0c:38:bc:2c:d7:0e:d2:cd:
bf:2f:00:a8:43:03:55:b2:f4:f5:1e:83:7c:22:2f:5e:cd:63:
24:2f:61:e2:4d:c6:19:a3:e1:57:5a:67:27:19:2e:59:38:53:
0e:5d:27:80:ea:87:f3:8d:5a:d7:d4:ab:48:34:6c:77:a0:6d:
95:5b:46:bb:0c:73:f7:e8:39:40:6f:e1:e6:20:60:8b:b6:d8:
54:96:6e:0c:ae:c3:fc:0d:1e:bd:f2:75:ba:85:79:3d:30:d4:
4c:0e:cd:05:b1:5e:97:c1:a4:11:c2:fe:af:a6:3e:c5:c6:9b:
ad:a2:a7:e8:90:71:a5:dc:5e:9b:d3:17:02:6c:ab:0b:94:b5:
0d:42:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:12 2026 by rpki-client