Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
File: dZSaAgpSrHxVFICFzj7-LQKq09k.mft (raw, json)
Hash identifier: F/94niUY4oZYfY2mvxQ5/Mkcr/6e/eswrWgHWykMtek=
Subject key identifier: E6:02:4B:6C:5F:6E:CC:8B:52:7E:25:04:08:18:73:4D:CB:66:4E:AA
Authority key identifier: 75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
Certificate issuer: /CN=75949a020a52ac7c55148085ce3efe2d02aad3d9
Certificate serial: 01A18788C6AE220826E2B749FF3D0277BC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
Manifest number: 0144
Signing time: Thu 29 Oct 2026 12:00:50 +0000
Manifest this update: Thu 29 Oct 2026 12:00:50 +0000
Manifest next update: Fri 30 Oct 2026 12:00:50 +0000
Files and hashes: 1: cfG8GDhSC5IbhMcmwnrArCxDK5A.roa (hash: FkrvdsSSTjBBdNtO3cQ3OTlfM00z/ndv4EdJpdqE/pM=)
2: dZSaAgpSrHxVFICFzj7-LQKq09k.crl (hash: Qj3sqXJ5XkDxkcJmWObRO9PvaBrB4yXWGfDCFjWPuUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:c6:ae:22:08:26:e2:b7:49:ff:3d:02:77:bc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75949a020a52ac7c55148085ce3efe2d02aad3d9
Validity
Not Before: Oct 29 12:00:50 2026 GMT
Not After : Oct 30 12:00:50 2026 GMT
Subject: CN=e6024b6c5f6ecc8b527e25040818734dcb664eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:5d:66:59:d0:92:a4:ba:6f:37:d5:ba:1c:
57:a8:41:04:63:fa:67:46:08:4a:5a:56:4a:51:4c:
96:e1:71:d3:c9:1e:8f:d1:c5:09:96:64:90:e7:6c:
35:06:37:b1:a8:62:f2:5e:b5:ef:df:23:ce:cd:e8:
47:d9:d6:98:4f:67:0a:65:8f:12:49:41:1e:fd:73:
e4:e8:fc:c7:4e:ae:5a:c7:d2:90:54:af:b7:4a:4e:
4b:51:6d:24:0b:27:3a:7a:66:25:a1:89:9f:17:df:
1e:9c:0f:92:93:76:2b:4a:28:16:e7:4d:d1:e8:84:
1c:b9:76:42:ad:2e:b6:ab:5f:87:c7:9d:23:e1:2c:
ab:93:15:63:77:53:09:47:7a:ec:78:6a:c3:45:75:
ee:ec:c9:6f:71:0d:45:ae:a8:74:73:bb:22:04:b5:
a7:22:00:1a:f5:f7:43:10:54:f5:0e:be:04:82:de:
17:af:e5:8c:60:af:27:87:d6:86:f3:4c:5e:9b:56:
0a:22:3d:d2:07:f2:4c:22:83:57:0f:c0:e6:33:4f:
75:11:78:5e:e1:af:32:ca:ca:b8:6c:bb:d2:94:e2:
63:5c:57:11:91:9d:08:55:c9:ae:2c:51:b1:81:4c:
61:c3:57:51:f2:90:88:cc:01:ca:01:b9:d1:cb:a4:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:4B:6C:5F:6E:CC:8B:52:7E:25:04:08:18:73:4D:CB:66:4E:AA
X509v3 Authority Key Identifier:
keyid:75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ea:22:5b:e6:c1:ae:83:c8:36:67:0d:b5:57:51:09:84:aa:
3e:56:de:af:dc:9a:72:9a:23:75:c1:c7:d7:a3:7a:6f:84:19:
6b:e4:c2:ec:55:f7:3e:10:af:16:93:fa:a6:49:2d:64:03:69:
78:7e:cd:4f:e1:1d:15:08:42:d8:d1:c3:29:07:71:8c:f5:bc:
17:6f:ba:65:c8:62:6c:44:12:d3:03:cc:c7:f1:d6:56:59:0b:
f9:34:5c:0f:e5:78:1a:a6:b3:bf:bd:90:e5:16:d3:12:bc:3c:
b4:67:41:12:4a:d7:db:92:47:b7:a1:55:17:bd:32:83:cb:c4:
d7:88:21:c1:df:72:11:ea:f5:4b:ba:9a:46:50:f2:b7:53:09:
28:d7:da:86:f7:ab:73:f7:ed:70:05:cb:a0:85:1f:98:77:df:
a7:37:cb:33:37:60:3d:49:c8:64:0e:ea:bc:54:63:90:06:8d:
77:32:d2:19:07:f9:11:dd:92:ec:b1:7a:cc:d0:d7:53:ba:24:
7b:56:c5:c2:c3:a5:5c:bd:bd:64:d9:e4:7b:13:1b:dc:46:3b:
09:e8:7c:02:49:a9:71:6c:5a:14:47:45:2d:47:17:09:5e:f8:
1c:9d:be:78:08:55:d9:3d:ba:ba:89:cb:06:2d:67:76:0f:85:
96:41:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:55:00 2026 by rpki-client