Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
File: ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft (raw, json)
Hash identifier: HbxDrPj5UnfaoA/fM1gGqfbckHpZGOx4ZWtoNDj6L8I=
Subject key identifier: F7:6F:76:3F:E0:D3:13:A2:2F:00:23:35:5C:17:F0:C2:F5:A6:59:15
Authority key identifier: 64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
Certificate issuer: /CN=64262c8337e218bed316b70cc092dd0befe8195b
Certificate serial: 01A08A8D4CD3AD962DC888F29D241E4DBC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:51 +0000
Manifest this update: Thu 10 Sep 2026 09:01:51 +0000
Manifest next update: Fri 11 Sep 2026 09:01:51 +0000
Files and hashes: 1: 1L45PsyuvIYIg2ZJpaZ1kexqtD8.roa (hash: gzQs+2Sri4/i+ZuiKLzc6oYRR4Wmc7We38Tn2yPF6nU=)
2: KCG2jhdDWc9bOUDAuVYJDwPA_IM.roa (hash: XSPZXPjtWmH3tsooKgIJCC9hK4ebdbO48OGaE0GPJDQ=)
3: Ykafli2nuvHvr2ZZrxVKMXpHSUQ.roa (hash: ZVqCkdThQ+Dxa4j8Ohcu5jpE4zpamft8rts1/91ztKk=)
4: ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl (hash: FVhiATeTG4c8+hu3duxv1cLj1I9hTQ0m+Ct9QP1vJaI=)
5: boyjYBR7CeYYqBubps31ePeRjKg.roa (hash: 44PfnVaKtdz7BnqSwnT3jqIEnA/Gm5oPQKvw5imMG+E=)
6: jwSgudfTgoD0rYPgWs2QdsgCaFY.roa (hash: T7RwlJl15rnyYrYfOU8otSAOkH0fOifwVGS8FpasWE8=)
7: kTamAiL6qOOf57nIraLXQq7irIk.roa (hash: djhCgJi8JfOsutJAAl8lRxYE0HKm1fCZVH28XEIjiKY=)
8: lZHIjG7NZwuEiIUXn9PLMVcVIzA.roa (hash: PwjbCusxHYbPcriuRl5QcW2dN5wg11/a1p9YKj/rRnQ=)
9: pOkq5deJnN6boK6s5xEuzkj_cGg.roa (hash: J7cGVPgbOqr7KYHw8zUxLmdbPeKxga24cigIY5mS8rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:4c:d3:ad:96:2d:c8:88:f2:9d:24:1e:4d:bc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64262c8337e218bed316b70cc092dd0befe8195b
Validity
Not Before: Sep 10 09:01:51 2026 GMT
Not After : Sep 11 09:01:51 2026 GMT
Subject: CN=f76f763fe0d313a22f0023355c17f0c2f5a65915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:0b:b5:20:89:4c:97:58:ca:3b:e6:7b:de:
f1:93:f9:a6:bd:e1:d0:f6:0c:53:57:f8:26:f9:b1:
7a:75:52:06:76:53:cb:84:5f:2f:b4:d0:c1:6e:41:
68:82:50:38:e4:42:e3:82:14:61:b4:16:b9:69:f8:
8d:e4:ca:40:5a:ee:1e:6b:76:19:7a:f7:9c:64:91:
2e:71:99:e7:d3:90:e7:15:57:9d:28:1a:1e:83:db:
7a:2e:a8:25:c9:ca:ca:8c:f7:49:4c:56:20:1e:c8:
a2:c3:a0:83:b8:63:fa:9a:5e:60:d7:09:62:4a:e8:
a8:e4:64:23:55:1b:f2:3b:8e:15:33:57:55:b4:7f:
24:b2:14:e9:5c:30:56:c2:9f:77:a3:af:8e:b4:80:
cd:54:32:57:2f:c8:68:f6:0c:ec:d5:ce:a3:2a:c7:
4e:1c:22:69:04:52:c4:b7:9a:09:0e:d1:32:5a:81:
fb:e0:b8:be:a3:3f:9b:ff:62:fb:8d:8e:83:b7:3e:
82:6b:bf:05:be:6e:5b:99:dd:9d:10:aa:8f:00:e3:
9e:b9:ab:89:5f:81:e7:6d:78:d8:91:6a:2a:98:d4:
a2:d4:3a:8e:ee:cc:22:2a:50:81:0d:95:f7:34:5b:
11:2a:c0:cb:7c:cc:9a:73:3d:0c:8d:dc:a5:08:af:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:76:3F:E0:D3:13:A2:2F:00:23:35:5C:17:F0:C2:F5:A6:59:15
X509v3 Authority Key Identifier:
keyid:64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:91:e7:db:32:90:3c:ed:2e:f0:d3:fa:23:36:61:df:a5:ab:
80:d5:53:5a:a2:bf:34:2b:b0:52:35:d5:d4:a3:0e:ce:1f:bb:
41:44:35:88:b0:21:e5:cc:12:c9:b0:bd:6e:e9:13:f2:6e:c6:
2b:ca:b5:02:e3:eb:ea:e8:8e:fa:69:1a:f1:28:3a:5c:46:93:
b6:33:9c:06:c3:2b:0a:81:c0:7a:3f:54:29:5f:ac:de:7f:3e:
70:c3:62:ff:2e:ea:95:b9:06:b1:00:07:f0:8e:85:2e:0b:d0:
ed:da:5e:e9:07:1d:bf:98:b7:f1:61:bc:e4:68:37:49:4a:74:
1e:0a:74:52:cd:89:85:89:7b:1d:24:51:41:7b:c3:d7:fe:26:
2c:c1:16:96:dc:54:c3:02:36:e2:96:4a:54:e8:28:ef:cb:d3:
4a:ed:ba:a4:61:34:5b:d5:2f:4e:75:4a:fa:43:f9:f7:17:2d:
63:bf:9b:83:f2:58:22:c2:a0:26:82:bf:52:02:d3:02:cb:47:
29:2d:fb:cf:40:7e:85:c9:08:eb:b1:9c:ce:8b:59:87:a3:1e:
bf:b4:d3:82:cf:fc:02:55:52:2c:f0:7f:61:13:c2:f2:36:55:
df:c2:6f:12:bc:87:6b:73:f2:54:f3:00:12:fe:c3:85:1b:ba:
64:9c:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:13:31 2026 by rpki-client