Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: ZgGbK/6e11lR1JkRCpll0syrbZljau9BFV9t3PiktjU=
Subject key identifier: 89:8B:12:B6:17:CE:7D:75:C1:48:49:17:9C:1E:B0:62:50:A3:F6:46
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 01A09020581FC2E2357CB63DBC570F1FD921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 1A4F
Signing time: Fri 11 Sep 2026 11:00:33 +0000
Manifest this update: Fri 11 Sep 2026 11:00:33 +0000
Manifest next update: Sat 12 Sep 2026 11:00:33 +0000
Files and hashes: 1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: kIUWH0f8XhA6YLJhF9Ymc8cCAbAc5Ud0M8+LbZs+ezY=)
2: _6LzupxXASaoZ39swk7m_G9Thtg.roa (hash: xvwqWAO3JPwTFbg3Vo/ega941AhbF1rkG80Zci2/F8E=)
3: fjLqd8nX00J9fe0_2aJ2e9FwgbY.asa (hash: hHImG8Y2r794WFIY//Kga9NCrwxYUH3dsvX+/DPBAtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:20:58:1f:c2:e2:35:7c:b6:3d:bc:57:0f:1f:d9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Sep 11 11:00:33 2026 GMT
Not After : Sep 12 11:00:33 2026 GMT
Subject: CN=898b12b617ce7d75c14849179c1eb06250a3f646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:e0:44:64:5e:f2:b9:b4:68:3e:eb:77:e5:
f2:54:fe:42:4e:ce:66:93:d4:23:61:ee:34:b5:e7:
99:d6:cd:3a:b9:b6:4a:f9:71:6b:6f:05:18:49:48:
ee:c7:74:79:58:aa:32:8f:6f:69:9f:ad:80:53:f9:
f1:95:a4:fd:f7:2c:f3:b2:b0:0a:ec:3a:10:95:6f:
47:25:d1:0e:93:90:7d:f6:42:f1:9d:c0:9b:28:fa:
c2:89:cb:c4:3d:90:ce:fb:df:5a:bf:31:62:d8:c5:
d6:25:d0:21:14:b2:aa:4c:d8:52:69:0d:c4:79:74:
15:e2:50:03:b5:ed:3f:f6:23:0d:58:ed:b9:79:4b:
01:fb:2b:e3:7e:d3:42:ca:ce:df:2d:25:ed:46:dd:
8f:2f:c9:67:b1:8a:85:9f:2b:c8:81:c1:37:93:8f:
1c:99:02:0d:3b:93:04:6c:3f:93:35:0d:36:ee:97:
96:3e:26:58:d0:b6:63:57:90:fc:55:fa:0b:d3:ed:
b3:89:63:62:da:a2:93:ae:bb:bc:bc:04:79:aa:24:
07:73:e9:b0:b0:1c:9b:88:ed:6d:e4:2a:62:72:db:
b6:45:d3:f7:60:b3:8c:47:dc:35:99:d0:e4:ca:b5:
53:84:1c:5d:9f:04:2d:93:3b:f9:44:48:b1:1e:37:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8B:12:B6:17:CE:7D:75:C1:48:49:17:9C:1E:B0:62:50:A3:F6:46
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:59:8b:80:f8:99:75:78:02:7b:08:aa:bf:f9:27:f6:36:b8:
ff:f0:63:34:53:7a:ff:64:9c:ea:85:57:6c:00:20:1c:8c:fc:
75:72:34:02:90:2e:e7:78:56:3d:15:82:43:fa:a3:9d:d5:5f:
9c:55:e2:14:5c:cf:7a:ac:d8:b8:66:18:df:6c:c2:e4:fe:b3:
7a:a3:79:9a:0c:ff:f9:1b:95:57:d8:57:0a:70:b3:0c:66:e2:
00:a1:2f:5b:5b:b2:ba:78:02:83:00:a6:f1:c0:86:4e:2c:72:
01:cd:51:01:2c:87:63:0c:b3:3a:7b:f9:1e:53:fb:08:c4:ef:
e0:80:e4:c3:f3:e5:e6:83:1a:6e:34:03:a3:b7:3a:3c:a3:00:
41:14:5d:87:91:db:dd:e2:99:dc:89:22:49:c3:b7:ca:58:8f:
d2:74:01:27:08:ce:ee:bf:d8:c5:9f:1c:0a:ba:11:c2:7c:9d:
f1:3f:e3:46:b3:e0:7a:49:e9:45:f4:ca:42:0f:a3:1b:e5:ed:
cd:26:87:c3:ca:bb:29:a3:dd:e9:dd:fb:d6:ae:b1:be:24:65:
ff:dc:1a:ca:b1:dc:29:86:06:20:98:ea:02:92:b4:6a:11:8b:
c6:be:20:53:cc:ac:83:eb:c3:49:a2:94:68:e9:ac:5a:26:90:
48:6b:00:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:50:41 2026 by rpki-client