Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: 0F74AVtjO5tu/C2//deqX8rXbO27ikoyHpRV44wQZoM=
Subject key identifier: 17:94:6A:97:A3:D1:CB:74:D8:A6:7F:93:2A:58:76:D8:E3:B7:FB:57
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 01A1219C2C428A02314C01352FB9862EBC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0AAA
Signing time: Fri 09 Oct 2026 17:00:45 +0000
Manifest this update: Fri 09 Oct 2026 17:00:45 +0000
Manifest next update: Sat 10 Oct 2026 17:00:45 +0000
Files and hashes: 1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: opSYCdHcBuwxTnMFKs47kF5Fzx5mlgCjM1Jn/Qy32OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:9c:2c:42:8a:02:31:4c:01:35:2f:b9:86:2e:bc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Oct 9 17:00:45 2026 GMT
Not After : Oct 10 17:00:45 2026 GMT
Subject: CN=17946a97a3d1cb74d8a67f932a5876d8e3b7fb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:5f:10:61:95:a8:9a:a2:7c:70:dd:a3:58:
58:fb:1a:33:41:02:34:e3:98:1c:4f:2b:14:8f:ba:
0f:f5:5a:e5:3d:e8:68:8a:7a:b7:08:eb:5d:3e:28:
6e:7c:1d:a7:9f:55:d3:54:af:fe:d5:4e:3c:20:7f:
53:f0:41:e1:00:f2:c8:06:a3:df:f9:d8:a1:69:7e:
24:09:da:5c:45:74:04:2f:0d:3e:db:d9:2f:1a:2d:
69:87:6d:98:90:4b:72:bf:68:59:be:1d:4a:13:59:
ae:e9:5c:91:3b:ba:07:9d:f6:bc:21:80:5c:df:95:
65:d3:9b:3f:67:84:c2:e5:c5:54:39:9c:a3:0c:02:
59:d6:4f:70:fb:b4:cb:a0:25:65:7a:74:6c:df:8a:
73:80:87:fd:80:cb:8b:63:37:f7:dc:d1:be:49:3d:
a8:73:72:1b:12:58:2e:01:92:26:e7:d0:5c:c9:1b:
eb:41:88:60:40:44:3d:34:29:03:5e:e8:2a:4c:a7:
0d:6b:f0:28:83:e2:ea:56:0d:ea:d2:20:d0:65:b6:
cf:b7:68:91:58:dc:54:09:f7:a0:4b:d1:6c:a4:00:
ad:bd:f2:51:9f:c7:eb:6a:ba:85:f0:88:5b:de:ea:
75:cd:4c:19:39:1c:6e:3d:33:fc:f0:ee:74:1e:8e:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:6A:97:A3:D1:CB:74:D8:A6:7F:93:2A:58:76:D8:E3:B7:FB:57
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9b:aa:45:ce:0e:02:a4:6b:5e:f2:0d:e9:bb:88:8f:6f:fa:
80:e9:8a:ca:b1:7c:89:da:d8:06:0b:c0:f9:fe:d7:2c:99:d1:
80:76:ff:c9:b7:f9:f6:73:0c:6e:10:c1:55:62:74:13:ef:51:
9a:3e:41:e9:41:a7:bc:d0:fb:fb:66:fb:5c:21:17:12:a2:9c:
78:34:d6:aa:97:d4:26:16:68:f8:08:cc:f1:90:61:ce:75:9e:
98:3a:9e:ff:62:7b:ed:b3:fd:ad:6a:53:8f:6c:10:91:b3:7a:
15:e5:3c:03:b1:ac:81:bd:d0:2a:16:e2:c2:83:96:07:e3:1d:
69:de:44:92:25:f0:c3:c0:d3:90:84:f4:e6:66:67:0e:ce:71:
5e:e9:94:d9:09:ea:2f:11:5a:c4:8a:d4:b6:ff:f3:7c:89:75:
04:c4:9e:87:57:79:b4:ce:97:dd:7d:a9:26:aa:50:7b:2a:39:
4e:41:91:6f:93:2e:02:e3:d5:bc:1d:a7:5b:42:3c:a0:f6:4c:
ad:2b:c0:c8:d3:bd:9a:c8:c9:05:17:b9:06:22:88:22:c2:9d:
7c:5a:d0:0d:3c:d7:58:0f:8b:ed:e1:64:7d:09:0d:d8:6b:63:
d3:b2:29:81:44:43:85:f2:cd:0d:d8:37:d8:47:1b:59:ad:5e:
0e:13:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:40:08 2026 by rpki-client