Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
File: ZRHOXi9Tt7uMrI854pTomkWyACk.mft (raw, json)
Hash identifier: oHU/Y848MzsPPlT4vSAoskylfZNJrPcaKn5uL1le0nE=
Subject key identifier: 2C:24:0F:6A:3A:EB:A0:31:F3:D4:BF:48:42:F9:EC:99:A6:79:7D:DA
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial: 01A08A55D45E13E1A9F83A923D0942BF442A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 08:01:15 +0000
Manifest this update: Thu 10 Sep 2026 08:01:15 +0000
Manifest next update: Fri 11 Sep 2026 08:01:15 +0000
Files and hashes: 1: 7a3jx1e7OA1EvpScFrXmNMe5y_M.roa (hash: tYNpUtLbZOwbXL/8gGlkXA0JhxkITkZz7z+FpesOG/s=)
2: LO7eXF6OcCBWRqiHSI58WfsNfTc.roa (hash: kS9qCezSVg1pWa1B2LuRlgPBMoX60MqXPWVZsOzHZq8=)
3: ZRHOXi9Tt7uMrI854pTomkWyACk.crl (hash: mRn6WHXeZ31yzAdqlx4Y01Na2T5ePXZ2SdXjWvBq0vo=)
4: osWiuCxFKK7p5wtHqJimdeaWv-0.roa (hash: uNL2gHPQqgqmPM9/9Y5/YfTqQyz7bRjGXXYyc1z5tGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:d4:5e:13:e1:a9:f8:3a:92:3d:09:42:bf:44:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Validity
Not Before: Sep 10 08:01:15 2026 GMT
Not After : Sep 11 08:01:15 2026 GMT
Subject: CN=2c240f6a3aeba031f3d4bf4842f9ec99a6797dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:37:66:f6:65:6e:36:d5:66:9f:f9:76:86:
fd:b4:0e:7e:90:2e:41:34:47:33:0d:cc:67:b1:21:
70:1d:8a:5a:9e:11:22:04:2a:68:27:e5:ad:46:db:
cb:9e:6f:6f:4d:95:53:7c:ff:3f:b7:98:78:ae:a0:
6d:70:73:2e:bb:36:ac:f1:c2:28:7a:19:41:09:c5:
5f:c3:6a:9d:48:54:56:03:cb:89:31:c1:04:42:ec:
65:4e:c0:14:e1:44:e2:58:cb:a3:d4:31:56:3f:c2:
81:33:62:01:18:1d:e8:66:e9:05:97:b8:ab:1e:b7:
9b:cd:5f:23:38:ce:68:5f:98:81:a9:02:c0:ad:80:
aa:32:2c:ea:24:ae:a0:b8:e2:9e:9a:92:e8:e2:7d:
88:44:b9:74:8f:fd:57:ca:58:e5:47:7f:72:f4:b9:
ad:ea:42:02:e7:17:94:66:22:44:2a:f6:bb:0c:ff:
d8:b6:2f:1a:68:14:16:fe:92:8d:c3:78:a6:7f:d8:
ec:ab:c4:4c:ff:8c:08:19:f8:0a:a4:09:65:50:0a:
aa:0a:e7:6a:cc:0c:e8:44:55:af:8f:5a:2a:b8:79:
8e:fe:95:45:1c:91:31:7e:24:4f:35:07:de:4d:0b:
28:ef:1e:ec:8c:11:06:f0:d1:83:91:2e:9d:34:68:
74:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:24:0F:6A:3A:EB:A0:31:F3:D4:BF:48:42:F9:EC:99:A6:79:7D:DA
X509v3 Authority Key Identifier:
keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:79:d1:6a:15:78:58:c9:74:a8:d9:8a:23:6e:93:cc:2b:f2:
97:cc:ca:83:15:03:f8:90:1a:2a:63:c4:65:41:e5:0e:a6:fa:
4c:00:f9:de:d2:44:31:94:a5:07:8a:b7:c6:11:52:47:b9:5e:
ef:6d:06:e9:21:fb:fa:01:09:10:01:63:af:e0:b2:e0:6d:3c:
97:88:ea:9b:fe:f4:05:65:d9:3a:c7:51:f8:bb:26:4c:d4:0f:
72:ff:43:f5:d4:00:a8:d1:52:50:0a:93:58:37:52:a2:32:aa:
17:d7:6c:b0:31:ef:6a:72:2a:21:24:7f:f3:f4:3b:6f:fe:03:
2c:06:a6:7f:64:2a:fe:d2:bb:af:82:71:f3:13:8f:c7:c5:8e:
47:1d:4e:44:6e:d8:32:68:05:33:1b:73:09:e6:96:e4:33:1e:
12:e6:dc:5d:ef:80:e6:2f:36:82:6a:2f:19:4a:e9:c7:05:5e:
f5:d2:66:f1:ac:87:50:9a:ce:0e:6c:5a:d5:65:3b:05:bb:32:
62:08:f6:95:4b:7a:38:08:64:f5:27:a3:e8:49:cc:ad:e3:c5:
12:eb:17:16:f7:6f:34:4c:b7:f3:56:a3:cf:21:fa:95:b3:29:
90:2c:25:8d:bc:75:fd:d3:f8:1a:e7:02:c6:d9:dc:60:9f:24:
27:95:ae:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:16:01 2026 by rpki-client