Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: jES5f7EM4T0AH6e9yAbtUyXE3AF7rGm53cNoERIDvKU=
Subject key identifier: B4:97:60:F5:7F:11:6C:BC:F6:00:46:A5:65:F9:9F:E8:B1:EC:E6:71
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 01A06D95055CCA509741BF9F70A33A70984E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 09D5
Signing time: Fri 04 Sep 2026 18:01:17 +0000
Manifest this update: Fri 04 Sep 2026 18:01:17 +0000
Manifest next update: Sat 05 Sep 2026 18:01:17 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: IAnS6bEzch3TIofLALz1ygB0iyo.roa (hash: lyXUvYyQfJt4aH/SJqViQQv03gKvKKB5vsWtq0xG3Ro=)
3: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: Vpk8MmJuBgm7GCFYUvPfSm975pCcglG8GiAXCJx3mYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:05:5c:ca:50:97:41:bf:9f:70:a3:3a:70:98:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Sep 4 18:01:17 2026 GMT
Not After : Sep 5 18:01:17 2026 GMT
Subject: CN=b49760f57f116cbcf60046a565f99fe8b1ece671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:f6:f0:56:69:e6:2e:58:e7:dc:2b:17:ba:
d4:53:8f:81:80:18:80:40:09:1f:88:54:9b:e0:3b:
93:be:33:c4:e2:23:e0:2d:97:be:8c:4f:1b:55:2f:
1f:b0:33:ac:47:41:b1:b3:8c:7e:ad:c6:5e:bf:7e:
5a:6c:21:f5:e7:f0:db:16:65:4a:bb:87:f9:1b:01:
14:68:b5:a0:b7:42:3a:3b:a9:f5:e0:c9:fc:6b:56:
24:7d:e4:af:b4:2b:b2:14:14:fd:38:d8:9d:19:a5:
1a:f1:31:55:f9:09:d5:f6:99:f8:92:04:de:c8:d9:
17:ae:d8:a3:3d:17:df:da:4a:55:6a:13:cc:2b:d6:
89:6f:5f:88:a4:41:89:ee:71:64:bf:5c:40:08:9f:
72:07:92:44:10:d8:07:1e:de:b9:7f:92:50:0d:e9:
d9:35:03:d2:2b:c0:2b:26:e4:20:cf:f2:d9:e6:c5:
d4:c3:70:10:96:17:78:60:fd:3d:f4:14:ad:ce:07:
46:5e:0c:87:0b:95:6c:5c:9b:3a:ab:ac:12:46:39:
96:97:fc:9e:50:81:84:de:81:da:6e:44:cd:fb:36:
72:e1:5a:78:ae:d8:67:72:ca:b7:dc:4f:3d:cb:52:
4b:6f:05:a9:3b:f6:bc:7a:f4:e9:ac:bf:10:28:92:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:97:60:F5:7F:11:6C:BC:F6:00:46:A5:65:F9:9F:E8:B1:EC:E6:71
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:68:63:ab:0a:82:f0:b7:d6:03:67:47:2f:21:87:6b:13:c3:
1a:95:ac:f1:c9:bf:1d:c2:1f:da:b6:40:cf:1d:b2:49:0a:44:
d6:e8:66:be:91:7b:f2:3d:41:03:05:e4:0b:c4:21:bb:3a:99:
2d:93:33:e8:5e:cc:58:9e:c5:24:b1:15:7b:30:ce:39:a7:c7:
d1:16:5a:0a:d1:6d:86:bc:64:e3:b3:64:af:0f:df:ba:57:d6:
ad:fb:f3:4f:7c:95:70:74:b6:e3:c7:a5:95:7b:6a:aa:c7:5c:
62:f3:5b:46:3e:de:be:35:78:2c:b8:31:75:62:f8:cd:62:59:
75:7d:08:e3:26:61:d4:34:ef:51:be:12:12:36:7d:ea:b0:00:
8b:69:b0:80:0e:ec:be:8a:e7:5d:05:3c:3a:d5:49:97:70:73:
a2:ca:80:1a:b0:b9:18:53:66:79:db:92:9c:c0:0f:53:3d:89:
34:76:7c:5e:7a:a4:5d:3f:68:91:90:7e:20:72:03:7c:87:fe:
f3:19:0b:0f:64:d5:a2:a6:22:1b:0a:af:04:4b:f7:ba:b7:8d:
34:81:dd:2e:d5:c0:5c:51:6e:31:10:7e:a5:15:38:22:99:d8:
f6:7b:f2:a5:60:4f:94:c0:9f:1a:f8:6d:b0:e6:22:18:a1:3d:
fc:d1:ef:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:46:44 2026 by rpki-client