Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
File: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft (raw, json)
Hash identifier: 0YuxFhMIIcSxXOOBJa5Xj9jnMLu+lf/7rUks+GdoGlo=
Subject key identifier: 8C:60:6F:E0:62:D5:96:AC:1E:68:0D:BD:EC:B7:29:4E:02:D7:3D:D7
Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
Certificate issuer: /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Certificate serial: 01A12C8DE110C2752AE4AA094C9C8DF5D0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
Manifest number: 0620
Signing time: Sun 11 Oct 2026 20:00:58 +0000
Manifest this update: Sun 11 Oct 2026 20:00:58 +0000
Manifest next update: Mon 12 Oct 2026 20:00:58 +0000
Files and hashes: 1: 5_mNKvnFKLC3DW1kpn5M97s_rV8.roa (hash: YSn080K1AyDozT4ZZIR3FUMOs0H/Uq7H2U6XVLEbIes=)
2: NS4bJSf8JtisPPo4E4AUvgYiJkI.roa (hash: kNAqy7sfsX/DzrejY1IHLtdhRNkU/dXjQEKN71zDd5M=)
3: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl (hash: jtgoaclIRO78OBC2TPdhPtcrwagZsiCgSkrfn9z23QQ=)
4: m0S48tEBv9nFzVOV38xvVb-7W24.roa (hash: kgq2gT5y50cbq7aH/NdH+FdCNYhuUI9iaSWsZs757h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8d:e1:10:c2:75:2a:e4:aa:09:4c:9c:8d:f5:d0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Validity
Not Before: Oct 11 20:00:58 2026 GMT
Not After : Oct 12 20:00:58 2026 GMT
Subject: CN=8c606fe062d596ac1e680dbdecb7294e02d73dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7b:a6:3f:e6:e5:8f:2c:60:d5:c5:51:52:88:
4d:22:05:9e:0e:68:52:b7:eb:54:e6:c3:ab:e5:22:
b3:a8:8e:1e:47:ca:64:ac:1b:f2:c0:3e:74:f9:64:
74:cf:cd:a9:1f:2a:7a:95:fa:5d:f7:07:80:d9:71:
15:35:2e:98:db:7f:78:bd:52:46:7e:cb:57:f9:97:
0a:75:d7:8f:fe:ba:0a:8d:86:0d:12:66:8e:9e:78:
4d:61:6a:47:ec:58:53:5e:76:6a:c1:3f:c5:c0:e9:
db:6a:3f:96:da:26:c9:8b:b8:88:0e:34:9b:83:c4:
ab:72:57:d2:e2:dc:72:d0:f9:58:82:93:6a:16:36:
5f:64:09:b8:7f:90:52:40:d2:2e:bb:ef:4e:24:0f:
eb:0d:85:28:9b:62:80:ac:3f:b9:38:68:e0:d0:df:
cd:00:aa:f4:10:2f:81:08:c4:cf:af:c1:1e:b4:97:
03:a9:27:3f:88:03:6c:6c:e0:de:bf:0c:c0:37:b0:
dc:a9:69:05:92:3c:fb:3a:36:2f:51:f7:08:1b:34:
c1:1f:e3:e1:54:33:3c:47:e1:4b:2f:f5:b4:7d:f7:
ec:fb:6b:e2:48:d1:a5:50:a5:57:da:e7:65:56:76:
9e:28:c9:bd:d7:c9:22:71:4b:27:87:04:2f:9a:5a:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:60:6F:E0:62:D5:96:AC:1E:68:0D:BD:EC:B7:29:4E:02:D7:3D:D7
X509v3 Authority Key Identifier:
keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1e:3c:fd:ea:a6:4c:41:18:a5:4f:52:39:8f:1e:36:b9:ee:
d2:87:07:b4:13:83:0e:f6:48:62:fa:cb:1e:26:3a:b2:f7:7d:
1e:d8:67:a4:cb:4d:8e:2a:bb:7d:fb:c1:41:ce:10:2a:f6:b0:
d1:ce:22:08:35:f1:cc:d9:65:56:a6:a8:b9:bb:08:98:fd:ed:
02:4d:85:18:de:85:20:6e:d0:3b:ba:91:33:be:7b:b5:9a:57:
b2:81:d7:77:70:c1:ba:cb:ed:49:b4:ee:0a:a4:43:26:b3:c5:
a9:cb:c8:c5:92:2d:14:db:90:5e:5d:0b:96:2c:9b:8a:2d:7d:
79:5c:47:0f:b0:9a:04:fc:ff:0d:59:30:65:81:4a:01:dc:c3:
d1:61:95:af:fa:38:36:f6:8d:00:97:19:4d:d5:a0:6e:36:48:
ac:01:df:58:4d:cd:65:56:6f:cc:26:9f:48:f3:00:12:61:97:
b4:24:79:a4:3e:51:f3:65:41:51:c5:0b:e4:4e:dc:03:4b:52:
d1:d3:2a:a6:e4:47:32:ab:e9:52:c8:39:d3:91:13:ae:ca:88:
35:49:25:c0:25:46:6b:f6:63:2f:a4:67:af:f0:75:95:52:85:
9c:de:ac:8a:6e:80:51:90:44:23:de:dc:af:3c:1b:22:82:3d:
46:c0:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:35:54 2026 by rpki-client