Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
File: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft (raw, json)
Hash identifier: fHx6Rh3wrzFMt9vVHMH3FIs/PNpzSHwsmuZbZ34LPsI=
Subject key identifier: B6:B6:C6:D5:5A:FB:89:03:E6:74:30:41:B7:37:F0:54:FE:4A:EB:AA
Authority key identifier: 65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
Certificate issuer: /CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Certificate serial: 01A08B31212F4271668498E1A454C017977F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
Manifest number: 0117
Signing time: Thu 10 Sep 2026 12:00:47 +0000
Manifest this update: Thu 10 Sep 2026 12:00:47 +0000
Manifest next update: Fri 11 Sep 2026 12:00:47 +0000
Files and hashes: 1: 3zMRh1jlUnNdxEr1g7CUVjVS7Io.roa (hash: sT+SSBni7dZcvlHSV+3jhOFDUsj7LFoenmqYmqUNvq8=)
2: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl (hash: mAhHOUVD8QUI5/1SyeVCq8iVgZWhOwlNoM6P89rmSj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:21:2f:42:71:66:84:98:e1:a4:54:c0:17:97:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Validity
Not Before: Sep 10 12:00:47 2026 GMT
Not After : Sep 11 12:00:47 2026 GMT
Subject: CN=b6b6c6d55afb8903e6743041b737f054fe4aebaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:eb:46:2e:0e:5f:40:94:04:b9:42:42:09:
28:04:ef:81:f2:29:8a:5d:c9:5e:85:41:b6:be:cf:
a7:fe:f8:86:c5:a4:7a:34:44:a0:ce:33:aa:37:9b:
5b:aa:8a:d3:d7:9e:a8:84:a6:f2:57:2d:c1:d6:95:
c8:8b:df:d1:46:d8:d1:5a:76:cf:eb:bd:3c:79:56:
7b:11:31:d5:38:86:ab:1e:93:63:c6:0b:75:39:42:
1b:1c:15:c8:62:ca:43:e2:bc:0a:f1:3d:36:83:5f:
b6:9e:9a:bf:be:de:43:3b:9c:c8:ff:e5:d0:a7:d4:
01:8d:cd:3b:31:1f:db:1a:56:a5:68:9a:54:30:64:
72:5e:3c:3b:5c:82:52:5b:0e:02:4e:e0:f6:70:19:
88:4d:85:dc:f2:d0:99:cc:bd:ce:3a:ab:51:57:3c:
de:d3:1c:9d:a4:19:e1:aa:e4:51:11:7c:b6:e8:c9:
ca:72:8d:24:8e:e6:36:04:54:d9:6e:2c:40:9b:2c:
f4:30:cc:75:82:5c:93:49:e6:81:1d:7a:d4:59:8a:
52:74:f0:af:6e:ae:bc:c1:56:1a:5c:de:0e:be:26:
66:20:30:5e:b5:b9:46:9f:fd:47:05:ae:81:e3:f8:
11:c9:a7:b5:f5:75:20:75:88:1f:00:7b:2f:97:75:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B6:C6:D5:5A:FB:89:03:E6:74:30:41:B7:37:F0:54:FE:4A:EB:AA
X509v3 Authority Key Identifier:
keyid:65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:48:2e:0c:86:4f:37:0c:2c:48:1c:be:7c:f2:61:ce:ca:9f:
f0:42:cf:25:a3:e2:80:aa:8a:99:b3:21:66:32:8a:d0:18:0f:
6a:6b:62:0c:e2:ff:aa:49:c6:37:88:b7:e4:1b:71:f1:65:7e:
39:42:2d:fa:8e:bd:ea:c2:2c:a7:d3:da:5a:89:07:76:a4:61:
29:ac:29:cb:66:f5:dd:3e:7d:76:55:47:b5:f0:de:22:34:4f:
d8:d4:c4:0b:bd:ce:5e:e0:b1:e1:c9:0a:f8:67:eb:2d:c1:32:
92:47:0d:59:82:7a:fe:24:20:86:83:21:d1:cc:ae:74:b5:4e:
d7:c8:b0:9b:52:6b:58:be:e8:0b:9b:98:6c:8c:5e:63:92:8a:
c9:ae:f4:8e:b2:f5:9e:7e:99:0a:5b:82:9e:1c:c6:3a:5a:a9:
7d:bc:e9:7e:bd:2a:78:7e:88:15:e7:f3:40:28:3e:97:0a:62:
7f:99:68:a1:72:17:95:7a:c2:74:ca:bb:bc:b6:a7:c9:6e:3d:
00:ab:c2:2d:8c:04:c6:2e:e1:84:f7:2a:f3:3c:8f:f0:9e:57:
e7:3a:70:48:fe:55:27:36:2d:b2:d7:f9:4f:58:eb:cb:fb:39:
24:52:ca:e6:c8:42:9b:70:a6:2c:48:ff:ed:e7:8c:8b:64:f4:
51:87:22:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:14:35 2026 by rpki-client