Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.mft
File: zXXolNaajeSsnxixZzCGj8JY5Jg.mft (raw, json)
Hash identifier: phDQaVvGE98M2JxbWU/5jHddWNrlLy+JQaAiOb/LdhU=
Subject key identifier: A9:56:4D:96:28:29:77:DA:C4:83:B6:4E:5C:6B:DB:2D:FD:65:99:2C
Authority key identifier: CD:75:E8:94:D6:9A:8D:E4:AC:9F:18:B1:67:30:86:8F:C2:58:E4:98
Certificate issuer: /CN=cd75e894d69a8de4ac9f18b16730868fc258e498
Certificate serial: 01A089B10075916D5015A6FEDB4727816013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXXolNaajeSsnxixZzCGj8JY5Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.mft
Manifest number: 54
Signing time: Thu 10 Sep 2026 05:01:13 +0000
Manifest this update: Thu 10 Sep 2026 05:01:13 +0000
Manifest next update: Fri 11 Sep 2026 05:01:13 +0000
Files and hashes: 1: G2UcFG5kngEVhRj3W-C85i4l2Q8.roa (hash: BpC7XpATs78NWBVSbkp0h5ZYQFR2te7nCt6bYeLy7yU=)
2: zXXolNaajeSsnxixZzCGj8JY5Jg.crl (hash: iFh8RGyMyptf4a+84CKof5RA8EqIxevjGaupZkrbtcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXXolNaajeSsnxixZzCGj8JY5Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b1:00:75:91:6d:50:15:a6:fe:db:47:27:81:60:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd75e894d69a8de4ac9f18b16730868fc258e498
Validity
Not Before: Sep 10 05:01:13 2026 GMT
Not After : Sep 11 05:01:13 2026 GMT
Subject: CN=a9564d96282977dac483b64e5c6bdb2dfd65992c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:dc:b6:90:26:28:58:5b:db:98:4d:0e:dd:
d5:03:fc:d6:c0:4c:78:d2:7a:7f:db:54:a2:f1:0c:
30:83:03:76:8a:5f:bb:14:fa:dc:f8:8e:39:d4:e9:
64:07:4b:b7:c5:41:26:b2:bd:82:85:12:e8:26:8f:
e8:63:a9:5a:7f:b6:37:03:45:e1:13:e1:1b:59:27:
59:5c:98:cc:9e:17:42:3a:1d:ed:33:ca:f6:d4:e9:
6a:cc:91:89:ec:8e:f3:76:5d:6f:f3:99:91:05:d6:
c5:f3:cf:5f:ce:a5:6f:44:6f:f2:10:45:09:2b:4d:
cf:2a:70:f5:e7:6b:05:9a:74:36:3e:4a:83:80:87:
ff:36:2d:2e:fe:3c:6c:12:5a:ca:f4:f0:a2:55:c3:
f3:69:2e:97:4b:0c:f3:f9:a1:08:e7:cb:35:84:b0:
f7:b6:ab:bb:15:f7:32:9d:66:34:ca:b7:4b:fd:66:
af:20:c3:8b:76:47:1a:af:14:d0:35:84:b8:da:c4:
77:75:45:cb:2e:da:69:ce:02:28:dd:b1:0e:19:7a:
36:f8:6a:88:33:3d:0a:7e:76:09:91:0f:6b:4d:f7:
eb:34:b1:44:32:10:fe:3d:56:af:24:f0:eb:9a:54:
49:f9:4d:f3:ba:0c:2b:16:d5:64:21:97:31:48:13:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:56:4D:96:28:29:77:DA:C4:83:B6:4E:5C:6B:DB:2D:FD:65:99:2C
X509v3 Authority Key Identifier:
keyid:CD:75:E8:94:D6:9A:8D:E4:AC:9F:18:B1:67:30:86:8F:C2:58:E4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXXolNaajeSsnxixZzCGj8JY5Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aef6f4-e23b-4981-bc26-6b8023d32e1c/1/zXXolNaajeSsnxixZzCGj8JY5Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f7:3f:ba:7e:49:8e:20:69:28:9b:30:6d:01:1b:4b:d9:ba:
e2:db:52:70:5c:2d:61:6d:d3:7b:a8:01:2c:10:2d:d4:cc:77:
cf:2f:df:ec:58:d1:4d:43:ef:2f:7f:62:24:27:57:43:2a:b3:
fb:70:f0:f7:bf:de:ce:b6:df:af:e0:57:19:dd:f2:e6:c8:87:
91:09:c3:45:08:75:15:5f:4a:0f:fd:a8:e0:99:7a:2c:fb:45:
74:71:46:3c:1d:15:eb:b4:c6:87:94:ca:bb:3e:e9:90:5a:fe:
d9:58:45:b4:38:83:92:05:18:25:4c:c6:d6:56:7d:a7:85:bd:
23:7f:32:7c:f0:1e:b0:a1:2e:2f:e6:2d:f6:6d:e5:18:02:7a:
37:c5:e1:3d:f3:81:73:50:72:a7:87:b4:aa:01:43:e5:00:0d:
df:99:d4:bb:71:d3:38:67:3b:02:b0:82:a2:91:30:66:b7:ba:
88:d0:62:48:98:6e:47:77:6d:2d:5b:f4:ab:26:bb:7b:68:67:
4e:f2:9b:67:a0:74:6c:24:0c:a4:5e:dd:32:22:60:13:6a:7f:
99:a5:42:61:2f:40:c4:28:2d:53:6f:a1:26:88:68:e5:5d:bc:
19:88:40:7b:e7:32:7c:99:05:5b:48:38:8a:bb:bf:dc:e5:01:
78:2c:e0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:25 2026 by rpki-client