Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier: UrD/RYzsKW/2QW6qNQAi+UdSsxbF77PcBIIZnWi9Yr4=
Subject key identifier: E2:1F:84:2F:D3:16:66:D3:BB:A2:68:45:67:88:06:4F:6F:0A:AE:BD
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial: 01A04273FF359075CF7DD194F24268AC10ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number: 16E1
Signing time: Thu 27 Aug 2026 09:01:33 +0000
Manifest this update: Thu 27 Aug 2026 09:01:33 +0000
Manifest next update: Fri 28 Aug 2026 09:01:33 +0000
Files and hashes: 1: GZsPzmbA--FYrc4SNgLcVzZUS58.roa (hash: gCmBdutjh3s8CjQ+XZ5HjES4JuiIxCATlIX/+TCZL7A=)
2: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: /UasJkX9a2w40AywWIGpaPXNj3dw3PZdyBOwcPatVtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:73:ff:35:90:75:cf:7d:d1:94:f2:42:68:ac:10:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Validity
Not Before: Aug 27 09:01:33 2026 GMT
Not After : Aug 28 09:01:33 2026 GMT
Subject: CN=e21f842fd31666d3bba268456788064f6f0aaebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:39:7a:c6:1a:b6:2c:36:08:00:63:04:3f:
13:2d:ac:68:74:c7:95:2d:c2:67:7a:c2:0d:7d:eb:
c0:01:c8:6a:45:18:b2:80:fd:e0:ff:82:5a:0f:fa:
6e:30:bb:76:0b:03:cb:69:ac:8d:84:1e:f4:42:f2:
d7:70:47:ea:d6:40:d5:59:11:fb:8b:24:d6:da:7a:
d5:b5:cb:4d:3d:59:3b:41:5e:cf:9f:a6:8a:b9:11:
fa:85:5e:9e:79:d1:82:7c:61:76:67:e4:2d:0d:5e:
80:da:71:ba:b0:7f:d7:fb:a4:c8:46:87:1d:02:16:
b9:f9:fd:51:49:2a:24:1a:e8:75:d0:06:9b:08:56:
e8:9a:06:2b:eb:35:d1:d1:2a:bc:c7:cc:de:c0:96:
eb:56:b6:69:c1:08:8a:08:43:9b:6c:a6:53:c0:7a:
b9:e3:be:1c:5f:3a:19:7c:36:a1:1d:a7:6a:68:d3:
8c:d1:fa:e0:ab:8a:bc:18:4e:c7:aa:d7:3e:a8:59:
ef:be:c0:ff:a4:51:6f:bd:44:22:f5:30:a0:fb:f0:
db:76:b5:09:ae:6f:a4:16:69:01:26:45:3f:73:84:
eb:2b:e6:ea:ed:ad:d9:09:2a:a4:23:db:64:8c:ca:
fa:53:9a:c4:bc:8e:99:d0:4e:c8:cb:88:e9:96:b1:
bd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1F:84:2F:D3:16:66:D3:BB:A2:68:45:67:88:06:4F:6F:0A:AE:BD
X509v3 Authority Key Identifier:
keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f5:75:38:70:f2:d1:17:84:e1:35:7d:b1:e3:52:97:03:70:
14:13:5e:93:ea:f3:98:bf:d4:0f:1e:e1:9c:a1:04:f4:fc:f1:
37:7e:c7:6f:2d:53:74:35:9d:1d:13:21:a4:96:93:ab:82:7a:
38:b1:bc:99:34:38:0d:6c:9a:63:fa:d2:b6:8d:d7:ff:4c:31:
4c:d0:b6:64:4f:99:32:a8:84:1d:91:c2:0a:d7:62:fb:30:ce:
5d:bf:5e:48:e5:76:39:bc:32:aa:a1:36:14:cf:4c:6c:4b:09:
4c:cb:37:f0:8f:8d:83:3c:d7:b2:ff:bd:f9:f0:2e:02:79:28:
0c:7c:95:e1:68:a7:a8:93:a3:29:91:cb:73:8f:8e:96:aa:8a:
70:ef:08:b0:41:84:f5:ce:26:59:37:6c:a4:80:35:70:cb:da:
1a:21:1e:12:fc:94:92:ea:cf:29:60:bb:06:c6:1c:17:c0:af:
e1:1a:c1:82:fe:7e:57:c0:bb:79:73:23:bc:59:04:f3:ee:da:
da:a7:b3:f5:3e:a6:e6:e3:90:67:dd:b7:42:48:e2:04:8c:25:
bc:c0:8c:fc:bd:6d:27:b6:cf:5a:92:c3:e7:97:26:11:cc:25:
d2:41:1a:91:f5:e9:01:c2:5c:db:50:1a:d9:00:92:93:13:c2:
6e:dc:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:14:52 2026 by rpki-client