Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: jP9uRojaz1lGQJCAyVafka0IeIOK6Z84yYTPxD7oJuk=
Subject key identifier: 3E:AE:91:52:EC:C2:5F:B6:8B:88:BD:B2:92:74:4D:CF:96:62:B1:A1
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 01A0ED78DEA4011134FB3F9BB78BC331E142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 0A2B
Signing time: Tue 29 Sep 2026 14:01:56 +0000
Manifest this update: Tue 29 Sep 2026 14:01:56 +0000
Manifest next update: Wed 30 Sep 2026 14:01:56 +0000
Files and hashes: 1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: FVHSuWEURBe4MPiPyuCGBfTTjlKkOjHYlHVmICJaw/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 14:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:78:de:a4:01:11:34:fb:3f:9b:b7:8b:c3:31:e1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Sep 29 14:01:56 2026 GMT
Not After : Sep 30 14:01:56 2026 GMT
Subject: CN=3eae9152ecc25fb68b88bdb292744dcf9662b1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:bc:e3:61:68:4f:50:59:9c:44:15:9a:33:
f1:b6:f8:0f:fc:62:68:32:52:33:23:21:99:27:c5:
f5:1f:89:7b:9d:9d:70:5e:dc:ed:2b:b0:c4:ca:06:
43:4d:18:81:04:94:95:74:1f:4f:a8:69:bf:a4:98:
b9:d1:dd:ac:b8:5f:d2:b0:44:38:42:e8:6f:3c:2b:
cf:f3:a0:5b:32:f5:47:87:b8:c7:d7:7d:a9:66:2b:
12:ea:21:45:e0:a9:2c:c2:bb:9d:d4:75:d8:48:19:
37:5b:2e:a1:4c:b8:01:82:72:25:6a:a8:4a:e3:27:
7d:b6:90:76:17:3b:71:94:da:3f:e7:b9:63:4c:a2:
c4:96:5a:fa:fe:63:64:e3:d1:4d:9a:45:04:93:09:
cd:d3:2e:3b:0a:65:1c:1e:35:c6:b6:ab:c0:5f:ce:
10:0f:db:e1:bd:30:03:19:20:10:cf:94:39:b8:bf:
d3:3e:8c:ed:de:ea:35:9e:eb:aa:93:b0:70:f8:37:
a5:42:8d:8a:fe:5c:63:36:61:53:77:c9:36:81:d3:
12:5d:06:79:5c:a3:58:31:0b:fb:3e:e4:c3:73:9d:
3f:d3:7d:66:1d:6a:5e:6b:a9:fc:b2:27:d2:c9:76:
36:ee:b9:af:a4:c2:19:46:3c:29:29:65:d0:7b:2d:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AE:91:52:EC:C2:5F:B6:8B:88:BD:B2:92:74:4D:CF:96:62:B1:A1
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:00:a7:2d:ab:9f:26:74:e4:7b:85:d0:ee:01:68:70:d2:00:
0e:59:d7:b5:09:65:06:b4:90:f0:b3:d3:71:76:6b:d6:9c:1d:
b5:26:b9:19:92:59:8a:d4:63:b4:b0:da:e6:89:f8:19:be:98:
e9:d8:3a:f6:9f:f4:29:0f:b7:60:46:2c:a2:9b:82:80:af:31:
30:93:cc:07:b6:13:2e:4d:0e:8d:8c:64:52:f7:97:0b:c6:0a:
6a:ec:ee:35:04:d4:e4:56:a2:04:ba:6b:0f:ee:59:8d:80:e7:
02:14:23:8e:1d:37:a2:3c:9a:16:39:ac:23:4c:43:48:bb:9b:
34:fd:9c:fd:da:64:cb:69:39:58:0c:81:e3:47:40:d3:2d:7c:
3c:d7:05:e7:a2:79:8f:41:6c:ff:4d:7a:d1:2f:93:3f:7e:41:
2e:33:bd:b6:f0:f7:29:d2:2e:8a:49:5f:b2:4a:f4:cb:b6:c1:
17:b9:1d:85:d2:09:76:27:aa:53:6c:55:d0:2c:af:78:27:08:
70:0b:d4:0c:42:62:b3:25:d2:8e:39:d2:a2:32:5f:e5:7e:c5:
22:da:2c:80:e6:b4:07:8c:5c:20:46:f7:21:27:35:51:ea:34:
eb:bc:10:19:2e:d0:7d:be:45:8c:da:46:d0:af:bd:b2:24:e5:
33:5f:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:25:59 2026 by rpki-client