
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
File: ZW5AemuZwPBSkyzHd_8N6bOhl04.mft (raw, json)
Hash identifier: czOf/juqPEd0Occr7tmlUoJnU4DEd+RPCoK8LEm8I/4=
Subject key identifier: A8:64:9B:74:76:96:3A:90:4B:80:2A:ED:3C:73:75:77:F9:EE:BE:ED
Authority key identifier: 65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
Certificate issuer: /CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Certificate serial: 01A071A8AFF5B66592E773E6341350D24559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
Manifest number: 1A3E
Signing time: Sat 05 Sep 2026 13:01:15 +0000
Manifest this update: Sat 05 Sep 2026 13:01:15 +0000
Manifest next update: Sun 06 Sep 2026 13:01:15 +0000
Files and hashes: 1: ZW5AemuZwPBSkyzHd_8N6bOhl04.crl (hash: 9IAQp4ZyqCPA+iVEB91C/rNPrjV7oOLULVYssSToXlM=)
2: kEykguVs5gOkKU_5k7qyvCofolk.roa (hash: Gn4QfNQldi0PRVW/G1ca80Zkj+YUJm6Oi9CFZjoOuKE=)
3: uNLIyd7V4HU3pDKXDcfQdjnF5vo.roa (hash: p5fGMUK7hRzmC1gWrFuB/aW3upLQMZlcdSjSJk6KWc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:a8:af:f5:b6:65:92:e7:73:e6:34:13:50:d2:45:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Validity
Not Before: Sep 5 13:01:15 2026 GMT
Not After : Sep 6 13:01:15 2026 GMT
Subject: CN=a8649b7476963a904b802aed3c737577f9eebeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:4a:34:9d:8d:d1:48:65:c8:4a:4d:91:4d:
88:5c:56:16:34:47:c0:df:a4:ea:42:70:f7:b1:b0:
25:d4:2f:f6:d3:7d:6e:c9:c8:c1:8a:4c:3a:e1:2a:
bc:4a:4e:39:9b:8d:74:4a:7c:57:52:ca:42:83:3b:
05:07:ee:83:0d:85:1d:55:54:8c:53:12:e9:8d:5a:
63:7c:4b:07:6a:60:a7:57:7e:6e:61:8e:c2:f8:77:
fa:b1:b8:ae:bf:20:48:e8:22:41:91:b7:fe:2a:48:
1d:ef:83:50:b8:c9:3f:3c:24:39:15:38:4c:7d:0c:
b9:d0:5f:fe:d1:84:71:e7:94:5c:89:df:5c:c2:24:
89:a9:1c:f4:a7:d9:58:ad:fd:09:ce:26:42:51:43:
78:75:53:42:93:e6:67:23:09:2b:de:bb:45:f7:26:
0c:7f:b4:ab:cb:2f:73:31:66:13:0a:e6:b1:f1:5e:
5a:1b:38:a4:ab:69:23:c6:f1:e9:af:65:9b:e6:9f:
50:03:3f:3c:cc:25:6e:e0:c7:47:0c:1d:20:af:03:
73:09:4d:e6:29:e7:5e:13:c3:e1:d0:12:cb:13:74:
61:b2:5c:28:d5:07:61:5c:43:40:ac:4b:f7:b6:59:
51:89:53:0c:50:50:ab:1d:c4:35:13:40:e5:7a:1d:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:64:9B:74:76:96:3A:90:4B:80:2A:ED:3C:73:75:77:F9:EE:BE:ED
X509v3 Authority Key Identifier:
keyid:65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:32:d5:45:26:8e:81:e4:81:cb:74:c3:b8:b9:ab:45:19:cb:
6c:62:83:3b:30:28:40:33:3c:46:cd:a6:83:3e:61:14:df:40:
fa:79:bd:49:fe:1d:1c:2b:e5:22:d0:68:b1:3e:e7:c2:28:8c:
3e:d9:23:2b:48:cf:84:ff:cf:5d:1d:54:59:8b:ee:ca:8b:ce:
f3:e5:8d:13:06:d5:cc:b9:a1:8c:0c:0a:f6:d6:00:4b:45:b8:
10:0e:94:a3:7e:e5:72:e4:25:78:8f:20:6a:21:3b:53:7b:8c:
5a:be:92:4a:ec:7b:7c:e4:dd:9a:ec:fa:5c:7d:13:82:92:c4:
63:a2:26:d4:ec:f9:46:38:12:10:74:fd:05:dc:1a:29:43:52:
b2:fb:a0:d7:ca:1c:bf:f8:62:55:71:c5:61:9d:17:46:a0:6f:
a3:4f:cf:e2:c2:4b:a7:66:47:ee:fe:63:c8:d9:8b:30:09:d5:
a6:6f:a2:b6:a3:7f:56:8b:4a:e0:ef:30:6f:51:0d:85:a3:48:
f7:ad:eb:e6:b8:08:ea:b2:9a:5f:33:98:91:19:fc:52:94:64:
b4:17:6f:c2:60:bd:32:cb:2d:b8:20:8c:e9:37:49:a8:ce:d0:
b2:7c:32:3e:9d:7d:33:90:96:21:e5:2e:b8:75:8e:b3:de:cf:
a5:dd:da:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:11:58 2026 by rpki-client