Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: fmmgvvJj6dch79uYszTQxeiTrXTnP4+MAchGUyn/cuk=
Subject key identifier: 9B:6D:3E:A5:53:04:52:A7:70:D9:14:10:79:AE:53:A6:6F:AD:94:FD
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 01A050D3D904C9433FBA4F9F7D12CF0A5434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 09AC
Signing time: Sun 30 Aug 2026 04:00:55 +0000
Manifest this update: Sun 30 Aug 2026 04:00:55 +0000
Manifest next update: Mon 31 Aug 2026 04:00:55 +0000
Files and hashes: 1: Utc_slWR8yHDk290AryGYchTlYA.roa (hash: NUCfh9s0WjqwyOFskJUWEakWr/HjDtF3kDLbwsne7Ro=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: 3j5V+qPd0hpShW/BfH4LlYdhD9pheBTDf0kQX9uEm0E=)
3: zynEh3pPdQY3KJQVgvhOsaYxciw.roa (hash: rOMrg3wVXzNicfVb9K/t1LGxhcGrIWejZTOsjk80vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:50:d3:d9:04:c9:43:3f:ba:4f:9f:7d:12:cf:0a:54:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Aug 30 04:00:55 2026 GMT
Not After : Aug 31 04:00:55 2026 GMT
Subject: CN=9b6d3ea5530452a770d9141079ae53a66fad94fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:ce:65:be:bb:3c:7e:c8:fd:5a:47:56:cc:
0f:47:8a:98:9f:8c:d6:e7:83:06:f1:04:70:55:87:
82:09:5a:a5:b3:75:ef:4c:22:c4:43:9a:2f:54:af:
26:07:1f:36:d2:73:d5:de:05:a7:00:02:2f:69:e6:
6b:cf:03:9a:60:b8:73:e9:c1:e5:f7:a0:97:f1:3d:
2a:e4:ae:e5:a2:10:e8:8f:d8:70:ae:b1:e9:97:3f:
e7:ff:03:eb:dc:b4:0a:e0:f9:dc:73:99:33:f9:53:
b7:16:68:8b:42:23:7e:ed:4c:05:cc:c4:7c:70:36:
8f:f8:b2:36:00:71:c3:ef:ad:70:4e:84:28:7d:61:
81:df:61:71:47:ad:a0:f3:b3:ba:c0:ae:f5:7c:9e:
3b:bd:62:52:a6:40:1d:20:fd:5b:d5:98:d3:4b:73:
5c:6d:f0:d0:01:5d:2e:dc:f5:be:4e:08:a4:0a:3a:
ce:42:d5:1a:4c:21:9f:ef:8e:89:87:3d:3e:25:8f:
de:06:6d:13:4f:78:ec:12:2d:a9:b7:a3:a1:07:bc:
e6:f0:3d:63:d9:53:ed:9f:63:0c:a4:37:60:d7:4c:
c4:0b:80:8b:2d:be:f4:0a:d8:c1:22:fc:d4:6d:e4:
f9:30:be:87:f5:6c:14:3d:4d:b7:a6:22:f3:eb:14:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:3E:A5:53:04:52:A7:70:D9:14:10:79:AE:53:A6:6F:AD:94:FD
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a2:1d:c6:fd:23:ac:79:97:15:85:06:4c:d9:3d:73:70:29:
03:ed:53:7d:3a:46:41:42:a7:04:ba:1d:f8:fb:a4:31:12:cc:
2c:93:7f:7f:de:8b:e4:da:08:95:de:34:b9:84:91:20:62:2c:
93:f2:94:25:04:37:53:16:13:ad:bb:bb:56:e7:ca:a2:1f:89:
5b:78:45:1c:a2:d5:ad:04:9a:c8:36:a5:38:34:0e:11:7c:65:
2c:7f:39:c3:19:92:84:c6:1a:46:94:00:86:b3:f2:35:a9:c5:
8a:04:08:19:04:50:0a:52:49:a9:ec:27:90:52:d1:0f:09:e7:
cd:fd:a6:86:92:14:b3:eb:e2:e7:a5:49:68:69:ec:41:ef:93:
7a:53:35:ce:d9:88:f6:50:e8:53:54:38:a2:a9:4c:43:15:c1:
1a:02:1f:9a:12:fa:72:67:1e:a2:9c:ed:9e:a4:d1:17:7c:2d:
0b:0e:61:79:7b:87:74:99:54:e9:5d:0b:6a:4f:af:0e:fa:8f:
ef:50:80:92:b1:09:13:4e:ed:d5:47:13:bb:0c:22:35:85:2c:
85:c8:7f:14:6d:91:c3:65:a8:30:1a:14:25:b2:bb:9c:fb:4f:
c1:5e:f9:83:7a:df:c4:67:fa:7a:57:c0:41:2d:a0:55:6b:e3:
7f:91:fb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 30 11:03:31 2026 by rpki-client