Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: SoyY/ORQ8sfIqs+W41V52/XLZgSX0mnOvrmt92sEObk=
Subject key identifier: 20:05:A7:EF:8A:DB:4F:AB:28:BF:CF:03:AE:E4:AA:4E:25:A9:B5:6F
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 01A08C7B6062EE94D8CED073169D9E7A2C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 19DB
Signing time: Thu 10 Sep 2026 18:01:30 +0000
Manifest this update: Thu 10 Sep 2026 18:01:30 +0000
Manifest next update: Fri 11 Sep 2026 18:01:30 +0000
Files and hashes: 1: dZjxO1t1y7iTrJ-KRqPRE_p1jMA.roa (hash: B1GSi5keg2Ocppx2D4kG/XL7mz409lb5KLKl79R0HCE=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: vm9OLa9MdNhl/sH865evwQIiZp+X7cbEM0b3/8uw3xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:60:62:ee:94:d8:ce:d0:73:16:9d:9e:7a:2c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Sep 10 18:01:30 2026 GMT
Not After : Sep 11 18:01:30 2026 GMT
Subject: CN=2005a7ef8adb4fab28bfcf03aee4aa4e25a9b56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:08:e1:a6:f0:1a:ee:70:ff:00:a8:7a:7e:
c3:62:78:d5:ef:26:97:af:46:de:6c:96:08:a9:20:
05:b2:47:c3:ef:af:7e:81:c6:a9:5d:4d:18:09:30:
96:a7:0f:24:20:53:a6:65:21:91:97:f4:44:83:3a:
83:21:f5:22:49:7c:4d:10:33:73:8b:66:7c:59:87:
6b:c0:2d:80:dc:39:27:a7:f7:ef:8d:9e:21:b0:ce:
04:37:47:70:43:1d:03:c1:4d:5c:c0:38:d3:78:5b:
77:38:d0:f9:b6:f4:c6:be:d8:22:29:c3:42:f6:4e:
bc:41:38:4b:6f:c9:2b:38:0d:44:a0:33:c5:45:9f:
06:8a:44:a8:fb:e5:d9:97:50:43:a9:b3:51:34:c3:
31:5f:9e:d8:41:44:47:ef:b5:14:84:11:9d:b0:a0:
28:77:27:44:e4:d8:65:ad:60:b7:7d:b6:c4:d3:bf:
68:6f:21:03:5d:32:bb:ef:7a:67:d2:49:b5:ba:60:
d4:33:23:d4:42:11:85:bb:ac:16:5b:47:3b:70:c1:
4e:07:9c:9d:fd:e4:b6:1b:72:ad:87:a6:7d:54:1f:
78:c3:be:24:2d:60:92:8c:09:f8:a1:f9:ec:bf:e3:
0f:ad:22:9c:5c:e6:b3:aa:a4:f2:13:a5:79:ad:8b:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:05:A7:EF:8A:DB:4F:AB:28:BF:CF:03:AE:E4:AA:4E:25:A9:B5:6F
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1b:02:f5:78:84:96:51:8c:e3:94:7d:ca:c9:64:8c:74:e7:
59:f5:3f:30:e7:46:d1:60:f6:64:e8:cd:8a:c1:04:78:76:6e:
e5:af:e5:26:ca:83:e0:d3:3d:ee:c4:a1:cf:cd:48:34:5b:98:
95:d8:15:32:40:2a:36:f2:a3:67:ed:d6:22:12:f2:7f:a1:69:
a2:d4:a2:cc:4d:e4:f6:19:ef:4a:01:a0:d8:26:0a:45:29:a9:
de:60:d4:20:9a:a0:0c:4d:02:82:9c:17:17:ce:95:c6:3c:35:
c7:cf:e4:f5:42:af:b3:2e:8b:c6:8b:dc:99:cd:6c:3d:0b:f1:
b5:93:7f:99:4c:fc:9e:c0:8c:8d:b4:0a:12:69:fc:f3:5c:fb:
67:ae:0b:0d:bd:28:2b:fe:4f:b2:e8:18:23:56:93:c1:68:03:
d5:d7:51:b7:85:e6:cc:29:a2:18:6e:f2:dd:46:8b:e3:07:83:
c5:26:79:90:69:1a:27:92:35:c1:38:a0:fc:33:84:42:79:01:
23:25:ee:96:df:d8:4a:2b:6c:45:ef:84:96:6e:49:ea:43:b8:
f9:b8:c2:a9:a5:e4:0b:b4:4f:88:68:56:01:1e:d7:04:17:8a:
9f:49:32:63:58:7f:c1:3f:e1:72:48:83:29:52:8b:40:5f:da:
0a:5d:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:14:00 2026 by rpki-client