Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: 7C7Cvvgc5cNPdzCrMQ3fzv/6QYDf3tlUdv5C13Atk6s=
Subject key identifier: 88:34:C2:18:B1:36:DB:9A:60:D6:7F:08:B6:13:3A:03:87:79:6A:FD
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 01A08E69A9FCA486398DCFF01456334CF4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 1468
Signing time: Fri 11 Sep 2026 03:01:24 +0000
Manifest this update: Fri 11 Sep 2026 03:01:24 +0000
Manifest next update: Sat 12 Sep 2026 03:01:24 +0000
Files and hashes: 1: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (hash: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: GFFJ5ERqzGf30Gy//uOov9DdMw+LzwiQ+pIwxm+T9U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:69:a9:fc:a4:86:39:8d:cf:f0:14:56:33:4c:f4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Sep 11 03:01:24 2026 GMT
Not After : Sep 12 03:01:24 2026 GMT
Subject: CN=8834c218b136db9a60d67f08b6133a0387796afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:55:fa:ed:00:3b:4f:85:9c:26:64:ac:ea:96:
34:5d:1b:b2:67:f3:07:cb:2f:81:e8:5a:38:eb:c1:
32:24:3e:6d:be:c7:c8:b3:0f:54:f3:1a:51:26:3d:
3f:c1:7a:fb:29:e6:6b:12:0b:f4:29:f7:d1:98:ab:
0a:7d:30:b6:c7:6d:08:0d:bb:c0:c8:6b:39:dc:59:
dd:88:f7:e6:f3:3b:da:21:9b:75:ea:89:82:b3:8a:
cc:a2:5c:c5:d3:16:9b:88:79:de:ff:aa:c4:67:3d:
72:65:1e:67:96:96:89:f4:49:4a:75:a4:a8:35:2c:
2d:27:42:a1:2d:fd:1b:60:1a:6a:a9:d3:68:44:8f:
e4:6d:f5:a0:8f:ad:1f:cd:fd:5a:a9:82:46:ca:51:
1b:66:53:02:c5:9c:b7:f4:53:0a:c4:1a:12:02:df:
6d:01:48:88:64:fb:9b:0b:93:40:75:24:41:45:9e:
72:2d:35:53:97:04:e5:ac:2b:7f:ad:33:fe:cc:4a:
99:a0:bb:56:ec:10:85:04:37:38:85:00:09:45:b6:
fa:d5:fa:d5:82:6b:27:49:90:32:0c:68:a1:29:fb:
31:d4:00:94:a2:64:c3:dc:a8:e7:71:e5:f4:a3:24:
68:bd:bb:cc:fd:30:9a:0a:20:78:a0:31:66:1a:64:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:C2:18:B1:36:DB:9A:60:D6:7F:08:B6:13:3A:03:87:79:6A:FD
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5e:3e:ce:88:e5:c3:7b:16:49:dc:c7:12:ee:af:7d:52:8d:
70:b7:ef:23:21:bf:61:ca:5f:66:e5:59:19:d8:a5:31:88:5a:
3f:a4:5a:ea:1c:89:8c:d4:ab:59:0d:d5:0d:0e:d4:95:5c:e4:
ed:30:77:67:96:4d:30:56:18:ed:0d:8d:3c:80:91:bf:22:7d:
94:4e:7c:80:59:66:91:bf:bc:42:00:ed:a8:49:c4:57:e5:20:
11:aa:90:0d:57:c9:b9:a6:dd:40:64:69:a7:bc:7c:6a:e8:69:
7f:29:d7:55:38:e5:81:36:7e:5d:37:56:40:f0:0b:d7:37:c8:
05:1e:15:20:f3:68:93:74:05:b9:cc:bc:70:7b:f3:4b:08:f6:
24:6a:29:17:f8:47:77:1d:18:27:ac:05:e0:56:11:1d:ed:f8:
ea:de:4d:0a:f1:16:c5:21:46:a0:da:b7:40:8f:89:c7:57:df:
ab:de:68:20:7e:a2:ae:85:fd:03:13:94:51:2c:df:6d:bf:57:
7e:c3:fb:74:96:e7:89:ec:b4:bf:3f:7d:6c:d7:ee:ac:71:6c:
ae:ec:3e:88:ae:de:d9:6e:1d:73:fb:bd:f1:99:2f:74:dc:77:
79:3e:b9:14:8b:20:39:46:c0:a7:bb:a1:aa:55:7f:20:8e:a5:
65:72:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:44 2026 by rpki-client