Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json)
Hash identifier: O0vx8MOgeGiwrlivGMg62V5oUsxn0BNW6gS5rolZ1dE=
Subject key identifier: A8:D1:77:27:B9:91:24:F4:69:44:24:97:1C:82:59:8F:E5:51:80:C6
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial: 01A08BD63E9B1E4DC3E0A02CEA7A4141A52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
Manifest number: 12FA
Signing time: Thu 10 Sep 2026 15:01:08 +0000
Manifest this update: Thu 10 Sep 2026 15:01:08 +0000
Manifest next update: Fri 11 Sep 2026 15:01:08 +0000
Files and hashes: 1: 5mo5xCIsbIhrhc8a0MMdjoHlY1A.roa (hash: pyWlQmd0OGBAWyVjo0BfVWnydEoUEqSFJZF/M2RGZlA=)
2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: uN+lYLuCMITudddLxtK4K0GqXjGNQXaVakklGUx63Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:3e:9b:1e:4d:c3:e0:a0:2c:ea:7a:41:41:a5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Validity
Not Before: Sep 10 15:01:08 2026 GMT
Not After : Sep 11 15:01:08 2026 GMT
Subject: CN=a8d17727b99124f4694424971c82598fe55180c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a8:df:53:11:aa:20:fe:c1:4b:94:1f:db:3d:
d4:21:3a:84:e4:60:cf:7e:50:1b:cb:d4:62:a4:85:
87:f3:d0:7f:13:6a:36:4b:80:be:19:01:a7:73:1a:
7c:90:95:b9:55:a7:d3:9e:54:0c:4e:92:77:28:83:
ba:10:2d:6b:2b:a4:e0:17:e7:21:d8:c0:6d:f2:2b:
00:49:81:f5:c0:dd:37:41:5a:1a:27:04:d0:99:c9:
53:c3:82:18:50:3c:58:90:ad:1a:dc:5a:d4:05:55:
a9:f0:00:cb:3f:85:2e:11:3c:29:c8:eb:7b:5b:2a:
4a:3a:65:0d:bf:80:0e:02:e5:9d:20:e4:76:49:cd:
97:cc:bf:29:e7:32:81:17:44:6f:9c:18:0a:44:76:
00:5f:be:de:c0:50:a2:fc:ad:10:e2:2e:26:25:da:
14:cf:9e:39:56:4d:ea:2b:dc:5c:39:48:32:ba:f5:
c0:84:a3:87:e8:71:8c:57:b9:c0:c2:55:c3:33:28:
fd:c8:08:61:a3:2e:a4:d7:f0:4b:59:87:6d:ff:f7:
78:b3:f9:c2:d6:c8:bb:99:d0:73:84:c6:a5:66:c1:
80:5d:c8:05:5c:0f:9d:21:42:d8:78:c4:75:3c:6f:
34:21:a8:bb:85:7e:1f:fb:e8:d1:f0:61:52:3b:40:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:77:27:B9:91:24:F4:69:44:24:97:1C:82:59:8F:E5:51:80:C6
X509v3 Authority Key Identifier:
keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e5:1f:1d:ab:41:e8:aa:2b:7c:02:88:dc:bb:2b:20:b4:57:
ee:14:ad:70:72:bd:85:db:12:f8:ab:e8:1a:b9:e4:7b:18:98:
28:0c:27:11:93:b3:4c:d2:07:88:33:0e:22:61:a0:fb:d4:fa:
85:0b:ab:8d:74:ec:cc:eb:19:ae:27:55:85:1d:a7:bf:49:0a:
ae:d1:dc:db:ff:8a:ba:bb:fd:e3:33:63:6a:09:bf:ac:25:73:
71:9c:29:1b:ed:8d:97:5d:e1:22:b5:7c:2b:9c:f4:74:45:3c:
dc:43:9c:12:62:fc:e8:20:6f:7e:cf:cd:df:2f:60:a9:e6:e1:
7e:bb:b3:96:5c:4e:a6:1a:79:61:c1:88:1e:5c:c5:db:fb:cb:
08:8e:a2:6b:6c:a8:69:c3:87:f3:a2:15:38:93:0d:c2:5c:69:
89:e4:34:f9:3a:1a:f6:ed:bf:d1:01:fd:66:b0:75:75:6b:b8:
6e:7a:89:6d:98:e6:50:a6:e9:8b:29:dc:dd:26:ee:e5:d6:f1:
c9:34:4d:c7:2b:cd:3e:8a:2c:25:5e:7f:74:c3:c6:04:d5:05:
55:f9:8a:ae:5a:4c:26:7a:6e:d1:00:f7:c6:10:48:ea:99:83:
87:fa:cc:3f:15:eb:96:6a:d0:53:ab:a6:b3:f6:d7:33:28:59:
18:5e:66:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:38:57 2026 by rpki-client