Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: YvRoZofJGnmHlf9NN7NpTZx6/tVytxcp3rJYIOe+0PQ=
Subject key identifier: 52:2F:DD:02:BB:A6:D3:51:39:60:C0:87:70:B6:9C:9A:9B:F3:14:61
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 01A08F4551F9FF0016782D03135B1B61D94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 1500
Signing time: Fri 11 Sep 2026 07:01:19 +0000
Manifest this update: Fri 11 Sep 2026 07:01:19 +0000
Manifest next update: Sat 12 Sep 2026 07:01:19 +0000
Files and hashes: 1: HY8y2aUxH2zl7Z8uEFKyCs4_DZE.roa (hash: pgB+L4R4Q18tDhMP8CyO3Aai8GigL3mxjQcI8MoXdXI=)
2: cKZJLTzeqYRhpsddyswZAoLcpsE.roa (hash: HgvgjBFasTjpcgFlyoecgapQ0MDuq029z3qYeWnH2Zk=)
3: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: DJUQUaG+eRg8EY4CUS6CRnB851Dt1CoquAztzTZEW3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:45:51:f9:ff:00:16:78:2d:03:13:5b:1b:61:d9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Sep 11 07:01:19 2026 GMT
Not After : Sep 12 07:01:19 2026 GMT
Subject: CN=522fdd02bba6d3513960c08770b69c9a9bf31461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:a0:4e:c1:8e:5c:47:2f:9c:99:26:31:e0:
a8:e2:a0:40:ea:f7:1f:f2:e6:e3:94:91:cc:5e:72:
5f:05:0c:53:2b:04:be:cf:c3:e0:a4:79:b3:13:84:
ae:82:aa:22:53:f3:bb:51:f4:11:e8:b1:01:68:b3:
49:57:e1:68:74:a3:ef:3d:9e:f7:5c:14:6b:49:4d:
c0:0f:d8:5c:8c:06:bd:a7:a7:68:a4:5d:6b:1f:e0:
ec:a2:de:e4:c6:66:ba:19:10:1f:a6:98:29:82:8b:
95:57:f6:49:49:77:53:2c:cb:e5:6f:38:05:24:cc:
ff:af:e0:79:98:32:4e:98:3c:56:e6:58:10:09:e4:
3b:4b:8e:b4:37:43:90:35:09:aa:8d:da:ec:e9:63:
10:fc:9d:fb:58:0b:bf:2d:d9:14:c8:16:e9:72:6d:
68:c0:c9:9d:d0:6c:e1:b3:58:d0:57:f7:84:65:ea:
90:27:d2:e7:33:ad:36:61:8c:a7:20:fc:5d:48:38:
2b:56:a3:99:11:58:5c:a0:e0:65:02:b8:ad:c3:56:
b4:15:33:d0:9d:53:d2:ea:e9:e3:69:52:31:2f:26:
89:06:ef:33:37:c3:ff:95:f1:5e:55:96:d4:16:e7:
3a:e1:bc:bf:78:57:7d:3e:52:d2:08:93:00:da:0a:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2F:DD:02:BB:A6:D3:51:39:60:C0:87:70:B6:9C:9A:9B:F3:14:61
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:0f:73:3a:91:0c:37:e7:08:bc:8a:dc:45:e8:e5:45:2f:
06:14:a0:64:99:a6:d1:b8:a7:88:48:cb:80:36:6f:f6:21:48:
a7:48:ee:41:47:e7:5e:28:20:e2:56:1f:2a:2d:fc:81:ce:dc:
60:a2:9e:69:4c:41:7a:06:f6:25:31:7c:18:1c:30:60:f2:d8:
04:d9:02:7a:89:c9:d6:25:82:eb:f5:f7:86:ef:9a:87:71:d2:
df:a8:41:63:b4:be:c3:65:84:31:ff:87:06:ab:3e:21:ac:d0:
96:0e:07:f3:1f:8e:99:eb:6e:e5:34:41:0f:69:a4:3a:dd:e2:
33:fe:ce:7b:de:ea:ff:6a:bb:c4:22:56:6f:84:e8:2c:74:b5:
45:2b:83:c9:30:d3:fb:52:3e:8c:52:75:35:a2:08:2c:8b:75:
2d:7f:be:da:33:06:e6:28:59:06:09:38:53:2f:52:b7:96:42:
a5:68:16:31:a0:be:c3:64:e2:9d:62:5b:02:a0:37:bd:62:27:
79:89:3f:83:a8:ae:2a:d8:f7:a7:f8:70:6f:c0:2f:2b:a9:ae:
0a:10:eb:6b:84:2c:ea:dd:0a:4c:f3:ed:be:3b:d5:bb:27:34:
72:6a:60:00:64:1c:1c:e8:63:b9:ea:09:f3:32:50:5a:16:d0:
fd:94:96:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 18:35:49 2026 by rpki-client