Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier: 1R45bDf+VWjM5w3GKrzyClZZG+epgiWrMVh/MzPV29w=
Subject key identifier: 35:75:8E:7F:CC:37:52:40:F9:C6:BB:24:17:45:52:A2:CF:21:DC:7C
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial: 01A08AC3B9491B3E1DB98552BEA0A114F811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 10:01:17 +0000
Manifest this update: Thu 10 Sep 2026 10:01:17 +0000
Manifest next update: Fri 11 Sep 2026 10:01:17 +0000
Files and hashes: 1: vZ8MxOiXegtHuoU9azc_92OWfV4.roa (hash: iwh0Pl3Hne1gOnuU6enDkJTWZ+3nLBGQ17Ta8mwUfwg=)
2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: ids3OPRvBBVjUzXWYHf+ZqMThpCwWwzaVYVpfK3iUJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:b9:49:1b:3e:1d:b9:85:52:be:a0:a1:14:f8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Validity
Not Before: Sep 10 10:01:17 2026 GMT
Not After : Sep 11 10:01:17 2026 GMT
Subject: CN=35758e7fcc375240f9c6bb24174552a2cf21dc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:09:15:00:ea:29:86:fc:2b:75:43:14:12:bf:
e1:a3:aa:75:08:61:c1:6b:73:42:ce:0a:79:3a:23:
cd:fa:fe:c1:cf:4d:f3:79:28:8d:22:2f:27:96:61:
d5:7f:b5:53:62:b8:81:1f:4f:ec:75:64:06:d3:a8:
03:8f:68:ee:da:0a:c7:7a:b4:33:c4:4f:ba:f0:3b:
63:44:91:51:cc:b4:37:18:b7:15:23:d4:9e:94:4e:
b7:39:71:8e:92:c8:2d:0d:4a:78:56:2f:e1:6b:32:
cc:bc:31:68:62:45:a4:6d:1c:ca:c0:96:61:d2:84:
88:7a:fd:0c:89:1a:97:ce:71:c1:15:e9:a4:9d:93:
a0:ae:9a:30:a7:54:d7:93:4f:d4:e6:64:fd:f1:18:
59:f8:f9:a1:0f:db:84:5c:71:db:62:c8:cf:68:a8:
5d:90:33:9e:f5:35:8a:28:95:08:70:0c:15:7f:9d:
f6:dc:fc:74:34:a2:9a:de:d7:f7:93:91:20:67:ea:
3e:7a:f6:67:1e:8a:e0:c5:80:5b:05:af:26:df:95:
33:bb:c0:e8:2b:7f:4e:da:05:9c:df:f7:4d:c2:e9:
92:d0:03:a8:4c:55:39:61:e7:10:32:73:8d:ab:1e:
0f:b1:b7:9a:ca:b0:b9:d7:b9:f8:70:ae:d4:14:c0:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:75:8E:7F:CC:37:52:40:F9:C6:BB:24:17:45:52:A2:CF:21:DC:7C
X509v3 Authority Key Identifier:
keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:42:c4:c9:d1:bd:60:67:7d:cf:41:00:56:da:62:6d:94:57:
34:fb:45:e5:4a:b2:05:fd:90:8d:7f:64:65:cb:c4:29:99:85:
8a:ea:92:8d:f0:38:06:a9:ea:94:f3:3a:51:7b:15:95:52:d7:
39:9d:f2:e5:9c:c1:ca:9a:a4:2f:3a:5f:ac:f8:b1:f0:cf:f1:
61:50:88:a7:56:d7:0f:16:ed:65:87:e7:f3:f6:3f:b1:ec:ba:
ec:d7:cf:0a:4a:ee:82:3c:5a:a7:8f:c2:51:c2:62:ee:3d:70:
28:34:07:72:92:3e:dd:9b:92:69:65:fd:6c:99:d5:8f:a6:27:
e3:15:a0:9e:8c:36:8a:b2:87:e4:55:4c:1a:33:84:a3:fa:67:
0c:30:63:b7:a6:cd:79:01:6c:c0:f5:8d:9f:ea:7d:33:5f:a4:
31:ec:3e:49:87:1d:d8:62:0a:82:29:ba:b9:50:4e:54:39:8b:
d6:d2:43:57:90:0b:b4:03:d3:2d:44:8f:bb:8c:d0:05:65:4a:
f7:7c:5b:8d:fb:42:b3:19:b6:f1:de:ca:78:60:9a:74:c2:40:
5d:52:60:b7:54:04:d6:2f:2e:89:be:a9:8f:6d:ba:ab:86:0e:
22:a6:63:52:11:ad:1f:4f:18:ae:e2:93:72:82:14:a5:7d:09:
be:e6:4b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:17:07 2026 by rpki-client