Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.mft
File: zgKxRiLD7gOVCucSP1f05t5IJ1o.mft (raw, json)
Hash identifier: clOXrK9Z51Youv0eIFg/u5rTnBOn0YZV2bCiugQlQCo=
Subject key identifier: 4A:B3:7E:B5:84:65:8B:8F:05:95:AD:2D:E0:45:4A:A8:9F:AF:CE:EE
Authority key identifier: CE:02:B1:46:22:C3:EE:03:95:0A:E7:12:3F:57:F4:E6:DE:48:27:5A
Certificate issuer: /CN=ce02b14622c3ee03950ae7123f57f4e6de48275a
Certificate serial: 01A08A8C5C5373F7D4167C5F1F6202081660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgKxRiLD7gOVCucSP1f05t5IJ1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:49 +0000
Manifest this update: Thu 10 Sep 2026 09:00:49 +0000
Manifest next update: Fri 11 Sep 2026 09:00:49 +0000
Files and hashes: 1: Lw2dKcD-BJDDcwvv_ZkEs2nszhM.roa (hash: 0OJI/EzD/n3ipktQrZsvOEjmO2nCJlICQHLxRKAtWw4=)
2: OM0HzHsrMZ29JyaGfdBe1f1AmqU.roa (hash: q96qYiUtNKDfInNeYYE/bDuvgA7MdaU6WyzLOvLJMS8=)
3: zgKxRiLD7gOVCucSP1f05t5IJ1o.crl (hash: lCk3zBg3+fZgEAyg4emxQE4lWpguhnPC+Kza2bHQQvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgKxRiLD7gOVCucSP1f05t5IJ1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:5c:53:73:f7:d4:16:7c:5f:1f:62:02:08:16:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce02b14622c3ee03950ae7123f57f4e6de48275a
Validity
Not Before: Sep 10 09:00:49 2026 GMT
Not After : Sep 11 09:00:49 2026 GMT
Subject: CN=4ab37eb584658b8f0595ad2de0454aa89fafceee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:4d:ed:32:13:c1:fd:ba:d2:0d:18:b8:61:
cd:9a:83:84:00:15:34:a5:e8:d6:ef:56:84:41:9d:
61:c4:bb:40:be:bd:1b:ae:fb:b8:c2:fc:0a:4e:8e:
4e:28:e1:18:06:7c:4e:10:fe:43:e7:8b:6d:fa:07:
2a:16:1b:37:2d:24:07:4e:b3:40:f9:13:5f:99:a8:
37:6d:88:71:fd:e3:23:01:4a:b2:59:d6:b6:51:4b:
6c:0b:8f:ad:28:da:5e:1e:44:57:b7:43:29:2e:75:
6a:33:86:7d:5d:92:17:0f:b4:33:c3:6e:5f:5a:93:
b8:7b:73:33:5c:c4:77:9c:a4:37:eb:30:96:eb:38:
dd:d2:b7:5a:1f:a0:85:f8:e5:4d:b6:7a:de:91:f4:
78:48:80:85:78:6b:8b:7f:e0:d4:b1:0c:96:d3:b6:
07:f0:a2:fe:ee:e9:fd:53:9e:4b:e9:bd:6f:df:77:
79:19:72:3a:6d:32:2e:86:ff:d6:0b:58:6b:22:be:
42:35:11:bc:43:d1:d7:48:19:11:38:e2:21:7c:a1:
5c:4b:32:d4:44:f5:18:f3:18:af:91:2c:e2:0b:47:
0c:51:b4:c2:1d:aa:5a:bc:b3:7f:9f:31:ee:c3:d8:
91:b5:6e:2a:77:e5:bc:48:d1:dc:81:37:22:b8:18:
8b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B3:7E:B5:84:65:8B:8F:05:95:AD:2D:E0:45:4A:A8:9F:AF:CE:EE
X509v3 Authority Key Identifier:
keyid:CE:02:B1:46:22:C3:EE:03:95:0A:E7:12:3F:57:F4:E6:DE:48:27:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgKxRiLD7gOVCucSP1f05t5IJ1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c1:6d:16:91:00:f3:9b:93:3f:94:2b:76:54:d6:3c:00:7e:
f1:bd:1e:ac:ac:ad:37:a6:98:17:d0:33:d9:86:dd:14:1e:c5:
b9:1e:fa:55:a0:04:2a:eb:af:e1:eb:bb:65:0e:56:e3:03:36:
b4:4f:6a:e6:d5:fe:6b:1d:0e:1b:26:45:20:4f:24:b2:d5:81:
ba:2f:61:a0:16:e9:a1:6c:85:44:94:f7:fe:29:31:85:23:8c:
77:59:6b:38:11:a1:ce:6b:c9:5e:68:a1:83:34:e3:d9:b2:43:
f3:54:a5:1e:8f:ba:67:8b:f6:d3:f8:b3:dc:ef:99:43:7d:4c:
98:e4:53:2b:3e:fa:84:f6:02:82:21:c4:47:12:64:a1:99:d0:
f1:f4:9d:85:a1:ff:61:74:35:c8:d7:24:c2:1b:d9:65:20:88:
30:f0:ed:c5:e8:c5:93:98:29:35:a7:7f:84:22:a0:eb:d9:01:
cc:94:8a:9c:e8:a1:c9:03:9b:a6:27:9f:e7:cc:75:9e:74:b4:
1f:c5:64:92:01:26:e0:72:9b:cf:70:4b:07:7d:4b:76:e2:a8:
8c:e5:c0:cb:90:45:da:af:23:03:84:ea:ea:df:07:12:00:d0:
cf:00:27:5c:98:ad:a1:ef:0f:2d:fa:98:ba:0f:90:75:df:56:
86:a7:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:48:19 2026 by rpki-client