Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier: +rMjXEB3jx70CWZdlnrFictrOhj48hU2PWrPgzaMCAs=
Subject key identifier: 02:3F:C4:4A:D3:C4:14:84:43:B3:94:2B:1B:51:FB:E9:B3:DA:01:C5
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 01A089B0960D12ACA0D357E74F960B60D85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number: 0AB1
Signing time: Thu 10 Sep 2026 05:00:46 +0000
Manifest this update: Thu 10 Sep 2026 05:00:46 +0000
Manifest next update: Fri 11 Sep 2026 05:00:46 +0000
Files and hashes: 1: 0TK3c5i8HR_A-PsT2oVGhcZw6cM.roa (hash: h0uiRwWUdBUK99Ks+Y8sh+LxhfXczzzvDGj593a9g3k=)
2: DV5WKmhJVzf0DZYxIZKRJBGbJrE.roa (hash: oHLHJsgbUguG193W+KSxMKgTzMMz/6UR3KrwC/LYnpQ=)
3: LvaDmqIdnr6ZwvXIw66-Fgt7aJs.roa (hash: GpWCJE/Uhd8pdU1hHuUyPW3gfCMnh5kn2jlAjryWbcU=)
4: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: 1dQ9DCcyaE1ku1S81wuCJyYHkMzFb+yqlt+6HkpZQ0E=)
5: ZPnR3HMA7sGvzycup7HofhXYTG8.roa (hash: A+4R2yyAAlbJkqTLskXX0nzQm93oNzg5z6lYvLAvYBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:96:0d:12:ac:a0:d3:57:e7:4f:96:0b:60:d8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Sep 10 05:00:46 2026 GMT
Not After : Sep 11 05:00:46 2026 GMT
Subject: CN=023fc44ad3c4148443b3942b1b51fbe9b3da01c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:28:2f:6c:f7:16:f6:25:62:b8:39:04:b7:
27:30:22:ab:81:c8:1e:28:93:13:70:5e:2e:b5:8b:
32:35:01:87:27:ca:d6:e7:2c:ce:05:56:ec:31:df:
ba:86:53:d1:d7:f7:f2:22:bc:11:2a:87:28:2a:ef:
80:10:d3:f6:9b:5c:80:62:60:ab:7e:81:69:89:da:
89:11:8c:38:67:21:2a:cb:93:99:5d:f1:86:f9:79:
31:b6:68:bb:d2:ab:11:fa:8d:a9:53:62:ce:b0:3f:
09:58:50:cd:64:b0:fd:05:fe:95:4b:a1:56:6d:84:
8d:c6:ba:1a:6a:fc:d1:db:ab:c1:4a:00:71:c9:d3:
4c:9b:a0:c4:f3:f4:e6:d4:52:72:6c:5e:22:8d:e4:
81:3c:c4:b5:5c:17:db:99:0e:59:6a:73:aa:fe:ea:
4f:71:56:02:34:7f:20:4c:41:9a:76:9e:73:f4:4b:
9e:16:ba:f4:47:30:10:f1:48:c7:16:d0:04:b1:e8:
da:15:ac:1b:9b:a7:d7:db:af:7b:ec:c8:83:a1:6f:
2d:1b:91:15:68:57:da:4f:e5:62:95:49:cd:53:a1:
ab:53:14:cb:78:cd:71:a1:96:62:89:2e:b7:22:b6:
23:db:45:fc:79:15:27:ea:ca:6f:07:f1:69:4a:ce:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3F:C4:4A:D3:C4:14:84:43:B3:94:2B:1B:51:FB:E9:B3:DA:01:C5
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c6:4c:40:2d:8e:45:cc:74:83:fe:6a:a9:ca:0f:00:96:c1:
18:be:8f:55:92:e3:9e:db:5c:af:d5:23:76:a5:8f:70:43:c6:
49:78:a4:51:a6:1b:83:e3:46:95:97:fb:3e:7d:30:9e:a4:46:
f9:89:06:6f:90:98:16:84:66:da:5c:6a:cf:b3:18:2b:23:7e:
64:76:2f:da:d4:0d:b7:82:56:41:cc:ae:64:40:f8:1f:dc:63:
76:ee:5b:36:ee:8e:b7:a5:46:dd:4b:7a:e9:48:77:46:b5:18:
36:9a:50:2a:fb:6e:14:fe:23:4c:87:2a:de:3d:d2:92:10:f5:
19:1f:44:c9:0c:ef:88:f5:cb:d2:46:bb:4f:dc:50:37:62:d3:
26:ee:97:79:2d:50:2b:6c:f3:4a:3d:74:38:41:ea:8c:29:e1:
54:c7:55:0d:d7:91:86:c4:7e:b1:aa:73:34:fb:fc:2e:09:cf:
cd:91:20:bb:2f:13:cf:f8:6c:9b:b4:af:ea:14:33:97:0f:46:
74:ed:cf:68:98:88:f3:0c:e8:97:61:9a:64:54:51:21:98:09:
ff:58:43:bd:cb:ee:99:fd:a0:2b:91:b8:e5:99:53:f8:18:26:
f5:72:d0:9b:b4:04:1e:34:b3:ae:b6:09:2c:41:76:f0:cd:e3:
85:c6:68:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:06:22 2026 by rpki-client