Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: AGlZwswzCzeijJqAU2S0P2tfAjZ2CMBDIQeJxfeCm3Y=
Subject key identifier: 71:B6:CE:F9:AC:AB:EF:0F:20:6C:95:5C:DA:92:25:BB:3F:62:82:45
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 01A091D8B171898BA56FE7280C118F2AF706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 134A
Signing time: Fri 11 Sep 2026 19:01:32 +0000
Manifest this update: Fri 11 Sep 2026 19:01:32 +0000
Manifest next update: Sat 12 Sep 2026 19:01:32 +0000
Files and hashes: 1: v7WcqpRYWHh239LPGmTnapW7Q_w.roa (hash: xmjmImowRyBXLpG11gkpyM1tBT1YhUEBnShnhTtDYrk=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: wQ9OBWTQMyFwXqxbsWHpaM2EAT/lkHfnBngWCsXbPgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:d8:b1:71:89:8b:a5:6f:e7:28:0c:11:8f:2a:f7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Sep 11 19:01:32 2026 GMT
Not After : Sep 12 19:01:32 2026 GMT
Subject: CN=71b6cef9acabef0f206c955cda9225bb3f628245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:a7:35:04:c7:6d:5b:3c:32:bd:7f:4b:38:
c3:9f:40:8c:25:2d:18:84:c6:c2:05:a4:43:b7:e4:
c3:34:eb:b9:eb:67:80:e7:6f:b9:ed:f2:d5:49:c4:
40:9b:7e:b4:b3:fc:b7:ec:dc:2a:76:bd:9c:b2:37:
76:27:59:2d:14:1f:ef:4d:d0:4a:dc:c2:9f:85:41:
62:38:32:ed:ee:d4:70:e5:06:bf:15:6e:77:3a:17:
4e:64:ab:e9:b8:9d:a3:8c:3e:5b:6a:88:71:e9:6c:
8f:d1:0b:9f:1a:2f:ad:b5:27:c6:7f:25:2a:70:44:
36:03:d1:05:46:41:7a:fe:2d:03:73:44:40:e2:06:
40:60:e9:41:64:f8:34:2b:e4:c1:7d:e5:e4:83:05:
37:86:3d:df:30:f3:ae:a8:24:d1:a2:2f:27:06:7c:
79:f4:cd:5c:5b:fc:d5:86:68:f1:dc:c6:25:a6:53:
9c:56:58:98:95:54:24:31:af:c1:a2:53:37:00:af:
81:dd:81:cc:5d:28:6b:fb:79:5b:b1:ab:15:ea:36:
89:45:0a:37:57:83:eb:8c:4b:7e:ca:b4:2d:dc:9a:
b0:da:f2:c7:20:20:b5:0f:f3:29:04:91:45:7c:13:
eb:ad:83:31:b4:08:b6:3e:c7:69:51:5a:b6:3a:0f:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B6:CE:F9:AC:AB:EF:0F:20:6C:95:5C:DA:92:25:BB:3F:62:82:45
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d8:a6:8c:ad:76:ee:b5:90:35:1b:6c:c2:ee:48:5a:36:9b:
61:e3:91:a4:50:cd:15:79:1c:c0:91:d7:4a:3c:4d:f7:15:44:
94:e6:75:6b:7a:96:21:6a:98:68:51:0e:fb:53:e9:83:1d:07:
2c:fc:06:b5:5a:2c:0d:17:6d:0c:53:4b:60:8c:1d:39:df:3b:
03:37:a0:b8:69:a6:1a:e4:67:ad:57:3c:75:30:23:5d:76:96:
38:1a:3b:20:71:8b:45:74:aa:14:b6:b8:5f:0e:c3:ca:f9:07:
42:7e:bc:c2:66:26:23:fd:3a:97:5f:87:02:37:0b:c2:fe:1a:
34:aa:42:f9:8d:d7:1d:4c:09:aa:a1:41:4e:e1:1d:f1:54:9a:
ca:2f:4b:af:2b:7e:be:83:26:19:d5:3a:45:ca:94:71:7f:de:
4b:69:6a:78:d0:a3:da:fd:4e:b8:9e:7d:49:ef:36:61:e1:52:
a7:a3:a2:5d:0b:f6:72:dc:de:41:ea:16:58:e3:dd:da:a8:72:
38:5a:66:e7:c9:0c:92:73:4a:6e:f8:77:fb:15:b9:f4:31:7d:
d0:77:7b:34:0d:74:f4:fa:b8:3c:df:8a:08:23:ee:b5:4e:48:
b7:69:de:42:7e:d9:57:67:eb:88:86:c0:af:84:79:2e:00:1b:
91:71:03:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 21:24:30 2026 by rpki-client