Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File: zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier: lBlbaSWntMwVgPFbLUIAeB9LnpfkOVhs83yBloAc6fQ=
Subject key identifier: 95:67:D3:25:E5:BB:B2:FD:3E:B7:7A:01:D7:C7:7C:8E:BD:DB:09:C7
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 01A08A55657B8E7DFED71EBE7DB82234D082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number: 1343
Signing time: Thu 10 Sep 2026 08:00:47 +0000
Manifest this update: Thu 10 Sep 2026 08:00:47 +0000
Manifest next update: Fri 11 Sep 2026 08:00:47 +0000
Files and hashes: 1: 1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa (hash: uFFlZsAMKLJKDEktW5ybjbZi8RHcBaE5UQZ62izVnr4=)
2: G9U4X93rXqstWDjqCmr74O0MOOc.roa (hash: lHIU6yFEQWHJAGlwWMO/pP3VoRev0tS4Byvjv7Nl/Nk=)
3: SV_A5OMf5Dv_YVGf3i03i121qDE.roa (hash: Yx1VNJorHPI+3bEwTwwZMtNZ1vpLF6jyHjPFF9j0vFs=)
4: u0VefA4FNPAM3OaDOe1uGO8G7GM.roa (hash: L/EGbgrpKOwV4dXB0O77kAg3sNSvZROrNTY/PmdUGpM=)
5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: NSJC60xNw8NJOrBik13N7hEj8Et+DnVKZKB6pBL8JNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:65:7b:8e:7d:fe:d7:1e:be:7d:b8:22:34:d0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Sep 10 08:00:47 2026 GMT
Not After : Sep 11 08:00:47 2026 GMT
Subject: CN=9567d325e5bbb2fd3eb77a01d7c77c8ebddb09c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:4d:71:f7:5c:ba:90:82:b2:e4:54:0f:10:
11:33:b3:73:d3:bb:a7:b9:ed:89:1b:a3:ba:0e:0e:
6f:d5:67:06:9e:71:7d:ed:b3:b9:6a:44:1b:ac:30:
85:77:95:50:88:52:5c:a1:79:29:c7:29:05:64:d9:
51:b1:dd:04:44:6d:9f:a8:24:06:d4:7e:4b:16:a9:
f5:17:4e:7b:6b:3c:7a:15:8c:b7:c8:b4:4d:ea:9b:
84:e5:0c:24:ba:bb:61:2e:fa:8a:d8:c4:a9:4a:d1:
e2:5d:fc:9c:fd:42:09:cf:3e:6a:19:98:48:22:e6:
ea:52:03:1c:2d:c1:ba:93:7f:f6:4e:5b:eb:62:9e:
78:81:64:16:ae:b0:f8:f3:0f:e7:b5:31:c7:45:25:
33:a0:da:7d:81:6c:4d:1c:b1:fa:64:d5:3c:12:d8:
f7:49:3b:98:1f:39:1c:23:c8:5d:39:cd:20:3f:94:
23:ab:41:f4:7b:d1:63:75:44:6c:cc:54:15:69:a0:
17:03:bf:08:e4:85:1b:d3:d3:7e:a0:7f:71:06:cc:
1d:c5:02:86:6b:f9:05:14:94:c5:b1:6d:17:d6:49:
f7:b0:18:39:4b:73:3b:c6:96:b3:2f:f5:fa:f6:92:
12:db:57:27:89:e4:be:4a:d6:4b:8f:e7:59:b6:08:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:67:D3:25:E5:BB:B2:FD:3E:B7:7A:01:D7:C7:7C:8E:BD:DB:09:C7
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b0:0c:89:fa:2e:b2:52:de:64:a2:78:47:dc:56:00:77:0d:
74:5e:76:e1:b0:91:57:24:55:6e:ca:15:3e:10:e0:ef:c1:bf:
8b:a1:f3:80:48:b1:fe:07:8f:88:7f:3b:79:fb:5c:76:34:76:
18:f8:e0:8e:0e:bf:f5:79:e4:22:68:98:64:e6:32:4f:84:33:
c2:fd:cd:9e:b9:c6:4e:b7:06:97:9c:c9:a1:11:d3:77:44:0d:
f1:58:96:f6:e9:aa:b0:aa:d6:ec:49:83:9f:bf:a5:50:08:f6:
b6:10:76:e8:8e:9d:ca:d4:35:73:eb:0e:83:2e:a6:82:ed:a7:
4d:ca:03:ae:30:ea:92:bf:85:ea:61:36:80:68:97:8b:42:31:
f4:ea:7e:55:e7:d1:6e:83:2a:aa:21:fd:7e:6e:ac:09:87:91:
15:fd:20:b4:16:c1:43:77:72:f5:51:07:ee:c2:a7:2f:2a:77:
7c:cd:98:25:2e:f1:aa:5d:45:66:72:e7:de:83:bc:71:79:fe:
48:24:79:cf:c8:3e:72:04:fa:58:8f:6b:f4:18:b1:7b:3e:37:
66:f7:2e:da:64:5f:fc:75:7d:cc:6b:59:13:60:46:81:dd:d5:
10:52:d0:cc:34:8a:30:d3:bf:14:bf:87:7a:c7:bd:6a:eb:bd:
57:58:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:21:19 2026 by rpki-client