Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: +qmsikyZaaSZJJMrKzAA611WtzjQkhAy/jfDGFCRNCw=
Subject key identifier: CF:68:62:AA:B1:9F:ED:EE:FE:60:E0:1A:6C:A8:09:C4:BC:9D:95:FA
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 01A08CB2286D9081394EA9F0FFFDC65C56E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 05AB
Signing time: Thu 10 Sep 2026 19:01:21 +0000
Manifest this update: Thu 10 Sep 2026 19:01:21 +0000
Manifest next update: Fri 11 Sep 2026 19:01:21 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: 9GB1I3midjEpWyuC7bYtJP00HuABpFFWG6pYr/JQNvc=)
2: 7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (hash: SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b2:28:6d:90:81:39:4e:a9:f0:ff:fd:c6:5c:56:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Sep 10 19:01:21 2026 GMT
Not After : Sep 11 19:01:21 2026 GMT
Subject: CN=cf6862aab19fedeefe60e01a6ca809c4bc9d95fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:ff:13:56:f9:30:93:12:09:d7:f7:4f:f0:
e1:78:4e:8e:55:ec:87:75:84:bf:b0:15:98:5b:ba:
6f:b6:ab:6b:a3:76:46:fc:04:1c:7f:a6:06:e7:e8:
b1:75:bd:6c:89:31:1c:3e:c2:b5:4c:4a:59:ba:cc:
0c:52:78:de:ef:d6:3a:99:91:f7:4b:6b:c1:c2:e3:
9f:5a:8e:b5:28:07:fd:af:f8:92:3a:c1:fd:c6:27:
85:ac:7d:ec:ba:b6:04:5e:92:28:a0:d8:ef:e3:9b:
5a:9c:0f:63:f1:11:a2:5a:66:f8:80:1d:f2:3c:88:
86:74:8c:68:0d:a5:18:58:aa:77:a6:93:ba:13:74:
3f:43:4e:cb:15:ae:92:d5:0f:ed:23:a5:52:99:15:
1d:d4:bd:0a:46:b5:50:89:ba:d4:d3:bf:a4:54:74:
ae:bd:80:a2:9c:10:9d:e7:d9:c2:a0:f3:27:ab:3b:
92:05:87:93:67:1d:9a:a4:b0:56:6f:cb:a8:15:f7:
a2:a9:1a:42:76:d3:fa:32:a5:c9:94:b2:d2:64:e7:
b0:70:dc:b9:bc:53:fd:12:4e:53:47:e3:65:4e:a9:
af:cd:47:5e:0c:57:c7:79:13:c6:dd:a9:c4:fa:a0:
b0:72:7d:3b:c0:ad:e2:1c:07:52:6e:cd:f3:e8:22:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:68:62:AA:B1:9F:ED:EE:FE:60:E0:1A:6C:A8:09:C4:BC:9D:95:FA
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b7:7e:5a:c0:be:17:3d:f9:4b:23:43:d2:b4:40:94:52:06:
5b:8c:6c:be:10:f1:d3:67:46:63:28:98:ff:2b:82:27:bd:ed:
a5:41:a4:68:71:34:e7:8f:7c:06:b7:79:8b:39:0a:ee:51:34:
f9:54:86:b4:3c:55:e2:a3:43:96:32:04:db:14:88:c0:6d:e9:
14:1f:16:fd:ff:80:6f:81:50:12:9d:06:4d:c1:50:51:48:d5:
b9:e8:54:6a:cb:98:d7:9e:52:63:da:87:65:7f:79:fd:ee:56:
6c:c4:5f:ff:6e:0b:61:55:f8:bb:b4:5a:17:38:4f:3a:a4:3e:
35:5f:b0:46:b6:26:cf:16:b7:2c:65:b4:d5:9b:a8:0d:02:d2:
f7:29:91:fb:82:bb:a7:b5:a3:05:d4:c0:2f:3a:15:91:24:56:
6d:04:63:84:17:e0:c1:f5:06:9c:4f:7f:ca:5e:6e:de:48:12:
a7:a6:84:9f:fe:d3:57:4a:e8:f7:cb:b5:f9:e5:2b:0d:13:4d:
54:ec:e9:00:c5:b2:f1:cc:2e:10:1e:ff:f7:25:ea:79:7d:9c:
2d:0c:68:88:13:cc:8d:ad:6d:f5:35:20:0f:fa:ac:3a:2e:6e:
9b:fc:95:d5:20:2d:5c:38:d4:26:5c:4a:d1:9b:4b:77:10:14:
1d:c4:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:14:30 2026 by rpki-client