Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: WxHgDAP1E33wqEDOKOA2jZZpJYvzHw2nmLl1hfSsqkU=
Subject key identifier: 45:C3:7E:89:6F:AC:38:43:25:87:8A:CD:DB:01:2F:8D:C0:02:0E:9F
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 01A08C0D5679F0C17C90E427AE1E343C13BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 16:01:19 +0000
Manifest this update: Thu 10 Sep 2026 16:01:19 +0000
Manifest next update: Fri 11 Sep 2026 16:01:19 +0000
Files and hashes: 1: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: LHioDPqGEg0Pm6Y9ISXBRXZ969EdMYLFvhyWz099TBI=)
2: ftUP8AhWyKSCfDygp2EvHTO8Boo.roa (hash: ewSYxaolal/Z6l87pd6PUdDa+voxm7gfdPqRbZdlcCk=)
3: h7hfu83GdfBNM7Zx2PElKBPYyGY.roa (hash: HsgzFT58UTHg7xZoI81l8ngXvJujr6TYdyM2zeg4nXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:56:79:f0:c1:7c:90:e4:27:ae:1e:34:3c:13:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Sep 10 16:01:19 2026 GMT
Not After : Sep 11 16:01:19 2026 GMT
Subject: CN=45c37e896fac384325878acddb012f8dc0020e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:95:79:ca:d0:c3:32:56:ee:37:25:38:28:
8f:f7:d1:de:15:37:88:f6:68:26:c8:bb:ff:19:50:
47:a4:5f:fe:8b:4b:3f:13:7b:64:f8:cf:9c:4d:5d:
4f:ab:83:60:4e:ab:87:df:e0:2e:85:22:32:46:b5:
81:c2:26:ee:17:33:40:32:31:8a:16:65:de:88:dd:
aa:62:8a:7d:b7:c6:43:fa:81:5a:81:38:cc:69:51:
32:d0:13:fa:6a:4f:97:ac:0b:e2:e5:f6:c6:3c:63:
43:7a:4d:17:11:4b:08:9c:be:22:d9:b9:be:1f:9e:
8e:44:a1:94:1e:62:a3:78:bf:35:a2:45:50:bc:1e:
a0:7b:30:43:b3:a4:0a:8e:52:31:8c:f3:af:55:93:
dd:c9:24:47:5d:ab:76:25:66:50:b8:c8:2f:3b:37:
15:1b:34:db:78:e8:9d:b2:c2:23:9b:38:0b:ba:72:
5a:56:e1:0c:16:40:ac:ae:5d:df:d6:3f:35:35:63:
00:f3:f8:18:2d:d0:66:a3:47:91:14:7a:17:2f:41:
f9:3a:a5:fa:73:37:e2:2e:01:6d:ce:bd:24:86:5a:
98:ab:aa:2c:c8:9a:b2:85:cd:bf:e4:cb:e1:2f:ef:
d3:c4:24:d5:6c:9e:7d:5b:93:03:2a:c6:b7:da:ba:
cd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C3:7E:89:6F:AC:38:43:25:87:8A:CD:DB:01:2F:8D:C0:02:0E:9F
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8b:0c:e1:58:bb:0a:f9:fb:b8:f2:c7:2e:d1:c4:cb:c2:8d:
b2:f6:4b:9d:bd:5c:82:b9:f8:de:30:21:b6:b5:54:76:b7:2b:
7a:fc:8a:e3:88:b7:11:70:2b:4d:81:a4:a1:97:1c:21:cb:ae:
5a:1a:c5:79:62:e4:58:e9:ef:ad:0e:22:a0:df:f0:94:3d:a6:
f1:de:d6:a6:f3:d5:1f:20:99:dc:4d:28:78:a1:d3:ec:3f:4b:
96:6f:1a:06:eb:ab:f1:df:1b:00:68:84:ce:c7:d1:b1:e7:88:
48:d0:1d:bc:3b:25:89:5c:7a:ab:27:c3:b4:29:9b:d1:0e:e1:
92:b6:5f:78:73:9c:c3:fb:ec:e0:53:27:9d:1f:67:7f:09:72:
f0:e7:4f:e4:b7:29:6c:6c:c2:eb:6c:8d:c1:1c:62:6d:13:ce:
7f:db:4e:7e:82:13:89:28:1c:25:f8:c6:35:73:9f:33:c2:d1:
0f:38:e7:13:f1:c0:f2:d6:05:1f:29:3d:bd:dc:88:19:f9:44:
8e:32:69:0c:9e:0c:91:b1:8e:9d:26:7b:bf:2d:1f:26:17:e7:
ed:d3:5a:97:d9:27:95:f2:73:7c:8a:a1:78:23:c0:a7:05:b4:
ed:b2:de:a1:78:e5:ef:9b:07:c6:39:65:42:96:1f:2d:73:52:
44:d3:98:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:25:08 2026 by rpki-client