Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json)
Hash identifier: E83zX5ECcCwkv2hmO1lBxbcw33/BtB99EYZyeg3BKNs=
Subject key identifier: DF:A9:76:B9:C6:15:B8:A5:BE:4C:B6:E2:AA:EF:71:A3:04:39:67:44
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 01A0F2D5FC9F9EB12C8E3038F2942E3D3FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
Manifest number: 1213
Signing time: Wed 30 Sep 2026 15:01:45 +0000
Manifest this update: Wed 30 Sep 2026 15:01:45 +0000
Manifest next update: Thu 01 Oct 2026 15:01:45 +0000
Files and hashes: 1: IN4aftU4mxLp5KA49YCP9vHKTic.asa (hash: 3oIJ+Tz8iLDJDKYlcLRCqkZSodGIL5xewYbZeBiTC/4=)
2: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: I9KoFXrNJyYOApP8Oq+ef9kAinD6S8ep67+R3HvMMWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 15:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d5:fc:9f:9e:b1:2c:8e:30:38:f2:94:2e:3d:3f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: Sep 30 15:01:45 2026 GMT
Not After : Oct 1 15:01:45 2026 GMT
Subject: CN=dfa976b9c615b8a5be4cb6e2aaef71a304396744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:a5:9b:68:ba:f9:a4:44:92:5b:cf:2a:0e:
d9:aa:47:ff:72:45:2d:88:7e:7b:8f:1e:8f:43:3e:
c9:d3:43:f7:e8:e8:e3:a1:80:90:1d:68:a7:34:68:
88:3a:71:6e:f2:c9:d4:6f:d5:8c:db:79:7f:ec:d6:
55:49:62:09:6b:13:ce:dd:47:bb:23:d7:c2:53:2f:
a9:5c:a9:00:90:3a:d8:39:36:c5:42:45:dc:e6:d7:
38:fe:c3:90:5c:55:9c:66:cc:ed:4f:9c:01:a0:bb:
2c:db:b0:aa:85:02:a9:39:08:f9:fa:25:41:9c:0d:
ae:69:d7:67:8c:a1:dd:ab:d1:1b:25:23:2d:e3:ba:
76:15:d3:d6:30:4d:3e:5b:4a:c1:16:5f:29:f4:d8:
6d:88:65:79:35:b2:c6:6d:d7:12:3a:33:d8:3c:fc:
6d:2d:e2:03:66:a4:7d:31:e0:1f:8c:71:1c:dd:71:
92:7d:78:03:a4:ea:ec:8e:96:f5:87:5c:22:85:b9:
bc:71:de:c6:5a:74:60:06:93:4e:87:2b:b8:a2:0d:
46:13:55:7d:5f:7d:3c:32:78:bb:3a:2e:e9:45:59:
5b:e5:a8:91:0b:b5:88:b7:d1:03:c0:d3:29:7a:65:
0e:48:df:37:c3:a1:f4:96:80:8d:fc:1d:b0:c7:51:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A9:76:B9:C6:15:B8:A5:BE:4C:B6:E2:AA:EF:71:A3:04:39:67:44
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:98:5f:fa:c3:24:6c:c5:04:1f:63:e0:07:6d:5b:b0:59:5a:
37:4e:ee:f9:c9:7f:11:6f:9d:f8:1b:7b:d2:6c:4e:e3:46:88:
8e:ee:de:70:f4:95:5d:27:4e:33:33:70:b3:7a:03:f7:29:a4:
91:30:7c:53:4c:53:89:65:24:d4:79:92:b9:27:2f:ac:b1:48:
53:f7:f7:53:d7:3b:6d:db:a2:b1:95:b9:24:eb:06:73:7b:79:
35:23:21:b5:90:3b:d3:3c:81:ff:fd:28:2c:11:9b:21:b0:7b:
d6:cf:9c:7c:d1:d2:59:bb:6e:b2:ba:77:e9:c4:bf:37:3f:3f:
cc:66:da:78:65:e0:6e:b2:77:cf:38:5d:8c:69:60:50:2e:6c:
d7:92:03:7b:77:98:9c:a3:e6:86:dc:7a:08:51:50:6b:10:d9:
3a:3d:64:82:91:fb:56:55:95:ba:fa:5f:93:f1:09:94:15:17:
f2:b7:09:3c:87:40:76:38:d2:57:f2:76:f3:34:b8:0c:a5:1d:
38:a6:2c:a2:f4:51:ca:21:ea:93:9b:45:7c:03:9c:8e:dc:0b:
45:40:29:59:b9:13:53:fd:eb:25:58:fb:78:e3:7b:a4:b3:b5:
98:4a:7c:82:1d:45:68:13:68:90:8d:af:50:03:64:8e:bc:df:
99:4f:75:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:43:26 2026 by rpki-client