Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier: gbrzEkM+RwSN85IiOQ6CrZ041NtJMYG/Y925EwDJYbU=
Subject key identifier: 35:0E:51:68:60:4E:62:D5:EF:92:D7:C2:CF:1E:AB:42:BE:18:35:73
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial: 01A08BD5D50C92C17F5F100AB625FFCE0CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 15:00:41 +0000
Manifest this update: Thu 10 Sep 2026 15:00:41 +0000
Manifest next update: Fri 11 Sep 2026 15:00:41 +0000
Files and hashes: 1: EY3B-toGXUZtNKRbRIT1VD4kBHE.roa (hash: 3Wh78iI9ibfL8FY/7stYt19m1NshKZMf/srlWVz8NYk=)
2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: whXSyjQNwaXvBY+zSQuDmJ/vu2WxtMhkfFwWRWczoKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:d5:0c:92:c1:7f:5f:10:0a:b6:25:ff:ce:0c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Validity
Not Before: Sep 10 15:00:41 2026 GMT
Not After : Sep 11 15:00:41 2026 GMT
Subject: CN=350e5168604e62d5ef92d7c2cf1eab42be183573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:3b:af:a3:9c:22:60:81:d6:6b:34:1c:46:
9d:b0:ac:b5:15:a4:f2:1d:d4:10:fb:50:40:3c:c2:
9e:50:cb:6d:7b:41:b7:8f:59:3f:97:19:ec:21:29:
64:77:7b:94:29:e4:70:b8:6e:42:7b:fe:51:fb:d6:
5c:e6:33:b2:44:32:a9:8d:53:81:3b:d3:3a:98:c6:
9d:3c:14:c4:84:94:d5:b9:77:9f:23:d3:37:fe:b4:
80:6c:5d:39:b4:d8:5a:1a:d4:ce:7d:93:a7:4a:c3:
2b:1a:02:f7:8b:fd:42:cf:78:fa:75:cd:88:e9:4d:
32:29:56:9d:07:a4:57:17:a9:8c:d6:34:41:e0:b7:
c0:0c:f3:e8:f5:e8:32:ab:46:4b:40:47:87:56:bd:
2d:18:24:de:86:76:b5:7e:be:fe:cd:82:04:95:89:
56:dc:51:a8:be:b6:24:35:3d:4e:d9:81:10:1f:85:
d1:0e:09:1b:8b:b5:7b:a1:9d:a9:33:cd:b0:16:51:
2a:95:fc:6c:59:a0:43:66:ba:3a:1c:c3:d4:23:23:
c1:3c:08:8c:6e:8b:7c:4a:f0:67:53:e1:c2:66:ce:
5e:22:a0:04:1f:14:00:ef:62:16:31:5a:e6:c2:2f:
2f:b9:d7:63:1c:05:0c:99:15:99:25:2b:45:98:31:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0E:51:68:60:4E:62:D5:EF:92:D7:C2:CF:1E:AB:42:BE:18:35:73
X509v3 Authority Key Identifier:
keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d9:cc:94:ce:dc:64:42:f5:f9:db:a7:ac:aa:5a:d3:22:22:
7d:4b:c0:b7:54:32:36:98:7d:e7:20:57:57:0f:8b:ec:e7:0a:
5d:a9:aa:cf:be:23:0f:ed:09:48:9e:f4:60:7c:f8:b5:00:e3:
82:0c:09:a4:5a:16:cc:fd:e8:e1:35:be:b2:ae:22:46:ff:4d:
cd:5c:9b:be:bf:df:2c:6c:31:44:97:41:c5:b0:60:9f:33:9f:
55:be:45:55:9c:f4:b1:fd:89:1d:5c:78:11:a5:7a:1d:6b:90:
ef:6d:e4:25:83:d5:33:19:2d:2a:04:8c:2e:2d:35:a0:2b:93:
aa:15:e0:72:45:ea:47:c9:a6:9a:7e:08:ec:b8:dc:65:ad:40:
83:a0:a2:3f:8c:1e:a7:ce:30:0b:62:df:dd:61:c2:34:4a:61:
74:e7:6d:21:dd:11:1a:e9:9f:ad:a0:78:84:7f:70:9e:3a:ef:
cc:4c:ad:ac:a8:72:dc:22:06:02:0d:26:7f:d9:41:e9:b5:0d:
a2:10:23:c7:10:92:58:91:fd:56:97:de:1b:a0:02:d5:5c:25:
9e:a8:f6:67:3b:2f:96:74:10:50:e0:34:ae:09:78:42:7c:9b:
d0:4c:8f:cd:03:10:02:c2:91:79:bf:c0:70:59:e4:11:e6:13:
9e:a3:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:40:41 2026 by rpki-client