Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: mPn3ywetoIbCzOSR21HfoftYJXavV2xFNRpA9AbOSqk=
Subject key identifier: C1:95:3D:97:BB:EE:25:C4:D4:D8:25:FA:34:92:BE:B7:97:4B:92:F1
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 01A03DF22496D1794A12DC33D06086346C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 1A2B
Signing time: Wed 26 Aug 2026 12:01:14 +0000
Manifest this update: Wed 26 Aug 2026 12:01:14 +0000
Manifest next update: Thu 27 Aug 2026 12:01:14 +0000
Files and hashes: 1: 0GL7DdIdoFqMUjvFhCRfHpKPMbA.roa (hash: pZia0ALckAxbVwXjSvk9ZitHob5JnbAYRMcyTh/GAHw=)
2: 4CJ3InuHwPxMIYug15LfFjf4TFE.roa (hash: AqjwYTvPMHv8KhwXl422zB5jGiNZqfOiCwgbFsHZ07g=)
3: H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa (hash: z0WYajZ68GEteUnmX5OmcBfJ0ynCGdGVIvLSKmVhonU=)
4: VxmBydPNDVkjAwNW0HlCl0mcW2A.roa (hash: 2uX2f6w9d7FkhAQJ79lByeDaz04Av+toag4OFSNYkF8=)
5: X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa (hash: rE1Gy+5Y3N/6nRhiVvsTgzmZ/j4C83X5X1jx7h+hjs0=)
6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: +lrJqNtluPJCV/vwLk3b6YFdW68PSO/z4DF7fqT5SOI=)
7: srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa (hash: WOqlcZKIxr5sVUqyyKJNHMiLfFbk3vNnFX+UsNkt18I=)
8: zPyNAFdQmlJqV2qKRKA-eSuuTJY.roa (hash: WQ7fB4l+y3xXDPGETnFXWLdLLeTLH4yREUZKhvFa6Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:f2:24:96:d1:79:4a:12:dc:33:d0:60:86:34:6c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Aug 26 12:01:14 2026 GMT
Not After : Aug 27 12:01:14 2026 GMT
Subject: CN=c1953d97bbee25c4d4d825fa3492beb7974b92f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:60:de:ad:89:d5:ab:41:6f:44:7f:f5:d0:5d:
86:90:e8:bf:02:27:e1:18:c2:14:f7:f7:10:68:28:
0e:aa:7c:f4:14:5b:df:0a:a0:45:33:3a:91:48:18:
8c:4f:2a:a5:2e:84:7b:cb:b7:da:f5:04:b6:d8:4a:
7f:cd:32:05:b5:6c:27:1d:e5:f5:50:c9:49:95:59:
8f:df:c6:a5:d5:b4:13:ea:61:95:4f:90:52:44:0e:
08:5f:18:f4:61:c1:bb:2d:b9:fa:5b:80:05:3f:52:
b4:cf:9f:6f:4f:c3:7b:0f:b3:16:00:af:b1:23:01:
eb:d4:54:65:12:0b:f9:fc:2e:b9:48:26:76:a2:65:
fe:2d:94:f4:bb:40:8e:1b:9b:95:36:ba:80:34:32:
a1:70:d7:52:2a:c2:8d:7d:c0:4a:b0:e3:4c:f0:b6:
23:0a:d6:04:36:45:50:1d:56:d6:63:66:14:62:ce:
d5:f7:40:6d:3b:7c:11:ed:ae:da:9e:ea:9f:e7:2f:
28:df:07:79:ae:c1:31:db:c2:0d:04:f2:1c:cb:a0:
77:31:5f:a9:7c:d8:5a:05:5e:04:47:43:5b:41:2b:
59:52:d1:b5:14:64:47:62:b7:0e:8d:d5:ab:ff:e8:
88:aa:14:d3:60:8e:5d:3a:d0:89:47:55:41:a2:ca:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:95:3D:97:BB:EE:25:C4:D4:D8:25:FA:34:92:BE:B7:97:4B:92:F1
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fa:09:89:bd:1d:ba:9a:3a:9c:b7:e9:71:28:59:94:2f:1d:
24:44:e6:e4:21:aa:92:9a:45:91:b8:57:2c:9b:7c:45:51:69:
69:df:04:93:20:10:51:cf:30:53:77:c5:ff:d4:19:d5:7d:23:
43:02:b4:d9:3d:83:27:38:61:35:5d:f8:ac:ce:60:73:17:64:
9d:66:09:b8:85:64:f4:15:c1:82:11:01:14:78:67:92:03:9e:
b0:c5:97:82:58:c9:f8:1f:e6:5d:08:0a:c0:16:69:74:3a:a3:
91:49:4f:8e:2c:c5:15:08:6e:92:df:e9:81:e2:56:84:cb:4a:
80:d3:8a:79:a2:d0:a6:84:7e:10:30:07:a4:ca:55:0b:50:25:
3d:73:66:ac:f7:29:77:1c:69:14:37:ec:09:5f:b5:5b:29:45:
54:aa:02:6c:64:4e:db:20:2b:ab:ab:38:8f:61:54:b8:56:f1:
b6:43:cd:3e:84:23:2a:fd:6c:fc:2f:cf:1c:aa:d4:19:11:17:
07:d3:65:81:b8:cb:84:3f:34:d6:16:ed:0d:4d:fd:eb:31:2f:
54:b3:4c:48:1e:80:be:64:84:87:c0:d1:d5:f6:b7:73:f1:0d:
70:77:34:83:78:7a:11:92:86:3b:00:b5:7a:3d:bf:83:b2:2c:
a9:d2:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:24:24 2026 by rpki-client