
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: PGvzUyqDS550NE0iFKwrx9pEMPGZairscBmnUVXwBf8=
Subject key identifier: 3D:3F:E6:54:59:9D:C4:F0:9E:A5:45:2C:AE:4C:BD:AC:12:69:A6:49
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 01A068A57EB823D13DD9356B2CFDB09AD48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 1A36
Signing time: Thu 03 Sep 2026 19:01:11 +0000
Manifest this update: Thu 03 Sep 2026 19:01:11 +0000
Manifest next update: Fri 04 Sep 2026 19:01:11 +0000
Files and hashes: 1: Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa (hash: MI2P4v9i+kU4F9eDStIUnkN/VYUaWV71u0evfwMIhOU=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: sP26tTLHed4kt2TezRN0MyTGmeHgG9YdY2+16eZQBb0=)
3: fzcY56XdnFZoFNt0HXida4aSHGU.roa (hash: MqoKni1V8waFiRzOClIF15P78qFKBD2MS62bZfGpfEI=)
4: n43sGwmhzZ66iynJ53zXSTJbQU8.roa (hash: fV5lfxAtxqffZkSRdmIPhZPQSriuDx7t3nKVTXbhIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:a5:7e:b8:23:d1:3d:d9:35:6b:2c:fd:b0:9a:d4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Sep 3 19:01:11 2026 GMT
Not After : Sep 4 19:01:11 2026 GMT
Subject: CN=3d3fe654599dc4f09ea5452cae4cbdac1269a649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:d0:ea:f2:6a:6f:46:39:c4:e4:b4:dd:de:
81:2b:5d:e0:92:85:d7:a2:b9:97:6b:03:27:ba:1d:
6c:e4:bf:37:a6:21:60:32:08:d3:63:63:7f:55:6a:
34:c5:99:96:46:90:7a:49:06:bc:66:79:5d:8d:b5:
bc:73:d8:2f:18:26:08:5a:a9:39:e7:c1:93:a4:d1:
41:2f:ff:cb:fa:4a:a4:2d:08:d5:29:f4:1d:94:aa:
a6:c4:de:04:61:12:37:30:59:4d:16:88:79:61:9b:
a7:19:c2:ec:a2:16:55:b1:c2:2d:23:a6:c2:fb:36:
16:3d:c7:2f:02:39:ff:a5:02:47:3e:f1:0e:cc:89:
f6:48:92:0e:57:76:69:b9:58:f4:ad:69:64:d4:59:
9a:2a:fb:0d:13:bf:d7:2c:5d:de:77:1b:be:fc:a4:
e2:ec:a7:94:e5:82:9e:44:d4:8a:98:0e:d5:7a:bb:
9f:73:15:3b:1b:04:1b:f5:fa:29:9d:86:9d:14:b9:
87:07:f3:2f:a0:ac:2b:5c:73:d5:4d:91:ee:e5:86:
1b:9c:cb:9d:d1:1e:3f:c8:37:de:96:cc:44:c9:e2:
c3:da:31:89:9a:de:22:72:70:ec:29:40:6d:e6:64:
29:1f:6a:09:c5:d8:52:eb:b5:22:44:65:8f:8c:66:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3F:E6:54:59:9D:C4:F0:9E:A5:45:2C:AE:4C:BD:AC:12:69:A6:49
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5d:a8:18:9f:b4:5e:6c:d2:a1:f7:9d:e9:24:0c:c5:82:64:
df:7f:05:26:bc:b3:1a:8a:ad:3f:5e:e9:88:34:d6:29:08:e7:
40:8b:3b:69:7f:1d:dc:d1:55:6a:7d:0a:56:f6:e4:bb:85:b1:
c3:3f:81:d7:57:86:f1:cd:ac:00:eb:1d:b1:8e:c1:f2:0f:2c:
a5:53:1d:67:9c:0a:ee:1d:98:a5:16:5b:75:0a:a5:ca:3b:45:
b5:8a:94:81:a6:26:7c:e2:ed:3e:c7:7e:dc:fc:28:aa:63:a0:
9e:29:49:2e:e7:6d:22:a4:e8:eb:33:e6:cd:2d:4b:2b:e7:75:
99:dd:b0:f0:3f:8c:71:b6:cd:39:b5:4c:bb:60:9a:4b:aa:69:
9b:b6:5e:4e:ca:d0:73:0c:95:cf:6c:05:10:bb:31:28:45:68:
cb:71:da:3a:48:43:a8:0a:d0:e7:ce:eb:ca:24:43:a2:fd:e7:
9b:23:58:5a:ea:16:ba:f4:fe:30:35:e7:7e:40:87:76:c1:8e:
fd:74:73:77:62:cc:bd:79:cb:e3:53:4a:79:a5:88:47:a6:ae:
d5:c1:6c:8f:e5:5c:97:e1:03:0e:88:b6:87:c2:d7:4a:0b:c6:
d8:48:a4:6d:19:dd:4a:6e:b3:89:ce:59:f6:2f:28:1d:3c:3a:
fb:ff:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 03:46:59 2026 by rpki-client