Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: yAaccqFR5MbZOGiGBz4AwfIXiRi9HtVUiQ/mnE0rQpI=
Subject key identifier: 98:6C:5F:F3:57:24:EB:06:39:65:B1:A6:E8:1C:BE:5A:F2:6D:90:0F
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 01A08B31970E9410C3AFB3A8DCDFF8E6A244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 103C
Signing time: Thu 10 Sep 2026 12:01:17 +0000
Manifest this update: Thu 10 Sep 2026 12:01:17 +0000
Manifest next update: Fri 11 Sep 2026 12:01:17 +0000
Files and hashes: 1: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (hash: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: mb8Y61Dl9n1YTNWy+oqpyq7IOXGCrUnr7OFrbKwj+ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:97:0e:94:10:c3:af:b3:a8:dc:df:f8:e6:a2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Sep 10 12:01:17 2026 GMT
Not After : Sep 11 12:01:17 2026 GMT
Subject: CN=986c5ff35724eb063965b1a6e81cbe5af26d900f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ca:0d:4d:59:d1:95:fa:bd:e3:66:c6:36:1b:
0a:68:a8:5b:d7:f9:09:5c:d6:58:ed:b1:00:2f:b2:
93:2c:6e:5e:71:16:3f:8d:46:b4:70:56:1a:55:55:
ce:65:37:e7:7c:fa:57:34:cb:63:3a:50:16:39:a9:
e5:b6:87:9e:03:9a:60:c3:2d:de:0c:9e:25:92:65:
bc:54:26:ca:1e:5e:8b:9a:08:54:c3:12:04:f2:d9:
69:fb:59:39:eb:c0:0a:63:15:79:a5:35:57:76:07:
37:4e:3b:b0:db:37:cc:3b:b8:0a:95:44:40:f4:52:
ec:b8:c1:36:66:5d:18:7b:0c:7c:a0:49:12:7c:e9:
c4:7f:b1:2e:a7:fd:03:53:1d:a7:39:9f:22:f4:ce:
26:df:d8:c0:8b:2b:97:2b:10:bc:6f:2d:67:3c:9f:
8f:5d:33:cf:98:5f:ee:f4:66:81:73:17:cb:34:b7:
e2:0f:ad:40:1c:1f:fb:7f:be:9b:3b:98:b2:15:e4:
84:ac:d5:39:af:07:5f:a9:18:b3:a8:ec:ab:67:de:
88:19:9e:bc:ee:a4:d7:37:08:d9:2b:11:5a:2d:fd:
3a:32:72:b6:a6:3c:6d:22:ce:c7:15:31:85:46:58:
c1:86:fa:97:41:14:ad:b6:4e:67:4b:fa:d4:e5:dc:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6C:5F:F3:57:24:EB:06:39:65:B1:A6:E8:1C:BE:5A:F2:6D:90:0F
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:bb:b9:1a:9e:84:75:f8:8a:10:39:13:ef:f8:ab:19:00:97:
6a:fe:c0:cb:7b:a9:5c:a3:cd:05:9a:c7:3e:74:04:c2:01:a7:
ec:f0:03:d5:5b:7d:98:fc:40:13:d3:8f:85:8a:6a:75:d5:a0:
6b:61:f8:2a:e0:1b:0b:23:5a:fd:a5:4d:8d:f6:08:b0:b1:7c:
d0:46:21:95:fe:5d:5d:4e:eb:9c:d7:98:7f:da:c5:9d:07:5e:
ca:0f:3c:75:4f:3f:df:b4:da:51:dc:43:6e:ec:0d:75:a5:f1:
fd:32:f0:60:86:18:55:47:3d:a3:6b:64:19:98:f1:a3:0f:2d:
c2:54:0a:d8:01:aa:b7:c8:a1:b2:a3:2f:70:d2:e2:11:41:0a:
92:d1:31:fb:6c:1b:e7:f5:a9:99:15:92:24:ac:8e:fa:f1:04:
64:50:4d:e8:ec:a8:d9:fd:9e:92:e0:68:bb:9a:cf:27:c4:90:
5a:00:35:1d:0e:56:4b:4c:29:e3:55:ba:f6:85:00:7c:a9:f0:
1a:ee:3e:4f:ac:fd:3f:16:04:8f:2e:ca:05:9d:ea:df:e7:cd:
8f:12:c0:16:43:5c:fa:d6:eb:cd:dc:db:7f:9e:1d:cf:95:3a:
34:8b:4a:af:00:d1:6a:70:b2:f0:18:e9:a2:30:33:4d:8e:e6:
cf:c7:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:19:59 2026 by rpki-client