Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
File: dZSaAgpSrHxVFICFzj7-LQKq09k.mft (raw, json)
Hash identifier: lUZrQ976vSl88dZ2tbeyNfhT7Z2vXU9Sa8wePg01H1Y=
Subject key identifier: 67:36:D3:AF:5F:D4:2B:EA:7D:C7:9F:8A:AC:1D:20:26:E3:7E:12:0D
Authority key identifier: 75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
Certificate issuer: /CN=75949a020a52ac7c55148085ce3efe2d02aad3d9
Certificate serial: 01A08C7ACCB9C8DD26BA8F8130DE1C55BF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:53 +0000
Manifest this update: Thu 10 Sep 2026 18:00:53 +0000
Manifest next update: Fri 11 Sep 2026 18:00:53 +0000
Files and hashes: 1: cfG8GDhSC5IbhMcmwnrArCxDK5A.roa (hash: FkrvdsSSTjBBdNtO3cQ3OTlfM00z/ndv4EdJpdqE/pM=)
2: dZSaAgpSrHxVFICFzj7-LQKq09k.crl (hash: atwsBw4u0ygNOFb3ZozNmD5gJCrnvKdEBhJb40R5oqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:cc:b9:c8:dd:26:ba:8f:81:30:de:1c:55:bf:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75949a020a52ac7c55148085ce3efe2d02aad3d9
Validity
Not Before: Sep 10 18:00:53 2026 GMT
Not After : Sep 11 18:00:53 2026 GMT
Subject: CN=6736d3af5fd42bea7dc79f8aac1d2026e37e120d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:e9:fa:5c:24:a2:f5:35:65:b0:b0:85:56:
83:b9:0b:9f:d2:5a:bf:34:94:81:03:72:9d:b1:7d:
75:de:96:a3:b8:1e:3e:eb:28:31:d7:bc:f6:52:4b:
19:11:3d:31:9f:8c:e3:e6:30:c0:3c:d3:96:38:29:
a9:df:ff:bb:c9:11:d2:6c:f1:96:62:b7:63:82:fe:
24:b5:dc:28:ea:4f:c1:1c:10:c3:bf:bd:10:b2:05:
3d:be:84:e8:0e:bf:08:ad:87:2f:d2:f9:2a:49:73:
66:b6:b1:7a:81:73:69:aa:c4:85:29:10:08:7e:c4:
c3:53:c5:87:9a:ff:b4:8a:15:df:27:1d:97:77:b1:
df:53:32:7a:a1:fc:73:35:b7:34:0e:a0:7a:2d:d0:
cf:5b:3a:e6:09:f8:29:f1:fe:3f:60:b2:d6:45:2a:
58:b1:80:cf:80:db:d2:32:5d:93:a8:91:bf:17:ab:
0a:6f:33:d8:6d:c7:09:b8:06:25:5f:b6:93:b7:ed:
29:11:fb:92:58:fd:87:81:15:62:30:b0:6e:c6:f5:
49:bf:56:8d:83:e2:02:2f:d4:a9:1a:39:cb:ff:70:
43:6c:1d:ea:06:ca:cd:62:32:fc:ba:ee:31:d3:e3:
cc:55:eb:bf:4a:6f:d9:b2:ed:af:11:8b:91:35:b1:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:36:D3:AF:5F:D4:2B:EA:7D:C7:9F:8A:AC:1D:20:26:E3:7E:12:0D
X509v3 Authority Key Identifier:
keyid:75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:af:e2:b9:50:42:89:f1:aa:26:43:f1:7e:78:46:b0:9f:49:
59:50:1b:91:d8:a0:31:85:c1:07:00:1e:82:7f:cd:be:9c:a1:
88:39:6c:16:0d:e2:55:04:87:0f:1f:01:a0:ed:76:74:0d:cb:
89:e3:85:7f:12:6e:90:13:e0:62:5a:ba:38:ef:0a:13:e8:fb:
bd:b1:f1:72:d8:f8:a6:8e:81:fe:47:f8:c0:24:ff:9c:45:30:
05:b4:e5:36:35:b3:55:9b:2f:f6:ef:93:09:1f:d1:3d:17:05:
3a:77:18:2a:b3:4b:1a:e8:81:9b:25:f1:ce:05:e0:bd:30:f8:
b4:21:a4:d0:de:1f:73:45:d6:14:a6:1c:28:03:14:4f:c6:96:
f4:b3:09:f7:e8:ac:4b:ee:42:5f:38:1d:9e:d0:f9:e5:ba:45:
cf:71:1c:c4:1b:30:2c:03:28:f5:b5:af:a1:8d:de:16:b2:42:
da:78:ae:e7:cf:56:43:3d:b4:95:62:46:71:3c:66:ee:0f:94:
a9:f3:70:97:b8:f9:3a:54:30:50:70:15:ba:0b:22:f0:23:33:
7a:35:0c:ba:ad:6d:46:bd:92:fd:0f:83:5c:90:12:c8:ef:90:
ba:de:67:63:28:37:db:1b:6b:1c:e9:cd:c2:0a:e3:ac:bc:01:
fe:1d:cc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:27:44 2026 by rpki-client