Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: 9oE+djJgyayHQgmBnozFo5e/c6Gjz6kQ3ck00u3INmU=
Subject key identifier: 7E:01:DC:24:69:1E:F9:86:62:81:E9:06:B2:8F:33:B0:CF:D5:23:BD
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 01A0BBAFE0F6A5E0E8CF0BD584A330D573A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 08EC
Signing time: Sat 19 Sep 2026 22:01:00 +0000
Manifest this update: Sat 19 Sep 2026 22:01:00 +0000
Manifest next update: Sun 20 Sep 2026 22:01:00 +0000
Files and hashes: 1: PtaIwv6j_fRPhVi8J0-7j605lCI.roa (hash: TLTnNugB01FAGr+O6mM1yQs38FDf/1kqzR1LqqRn5tM=)
2: iLYecyNvPLJpQj3efxZOTIWXApk.roa (hash: swdILG30N67hGnJzm85h/2MvOrOT4xu46fpnQjTo9Z8=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: x91dcQi2cy0pYbGIfq7vq/NBgCJV1KY9dBMza6ksDYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:af:e0:f6:a5:e0:e8:cf:0b:d5:84:a3:30:d5:73:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Sep 19 22:01:00 2026 GMT
Not After : Sep 20 22:01:00 2026 GMT
Subject: CN=7e01dc24691ef9866281e906b28f33b0cfd523bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:bd:e1:d3:da:7c:33:1c:2c:6f:ca:2a:10:
c3:fb:2d:23:22:07:df:63:6d:3d:ae:35:ab:1c:e9:
75:c8:f7:9e:4a:9d:9b:37:6d:84:06:ef:7d:27:3c:
77:a5:cc:9f:26:d0:ec:f4:39:8f:40:46:08:60:5b:
32:e5:50:ee:03:cb:84:e6:95:69:3c:7c:ad:de:48:
9e:02:0c:c2:ee:26:b7:e7:86:76:5f:06:58:49:9c:
00:72:09:39:69:82:ba:3e:fb:40:73:98:a5:9b:45:
03:b0:cf:ca:3b:72:c8:ad:b1:b9:02:de:56:22:ea:
32:6e:9e:22:af:64:3f:1c:a2:15:65:9e:28:31:e7:
54:6e:2d:9d:be:e7:0c:8f:0c:cb:1c:7a:a3:4b:c4:
12:16:d1:e5:4b:03:7b:be:2a:21:9d:c2:41:fd:d3:
aa:69:76:60:56:e1:94:9d:6b:43:e5:06:32:02:60:
bc:88:3f:0f:4b:d2:c4:60:49:3d:a5:f2:de:9a:ee:
17:30:3c:96:4d:08:8a:0e:ec:c1:c9:d6:60:b0:30:
a0:e9:38:fb:5d:31:93:3a:61:b4:ea:4f:8a:1c:2a:
97:aa:bf:cd:80:df:53:de:56:99:ea:fa:47:c5:39:
c9:d3:2e:77:b9:3e:67:d4:65:9f:62:51:f9:04:8b:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:01:DC:24:69:1E:F9:86:62:81:E9:06:B2:8F:33:B0:CF:D5:23:BD
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b1:8a:e5:8a:4f:af:d0:be:62:d0:48:99:46:7f:05:90:f3:
f6:b4:3f:f7:71:96:d0:0d:58:32:70:52:53:a9:fd:45:62:b8:
12:38:3b:de:da:83:56:98:db:9f:4b:86:35:ca:30:47:ee:53:
aa:b5:b9:3f:f5:84:0c:aa:b9:2e:be:8e:f4:dc:39:28:e0:79:
d9:da:0b:97:5f:38:82:c2:ae:a7:54:c0:2d:12:c3:3f:5d:fe:
28:97:b3:79:c8:fe:53:49:4d:19:9e:52:50:cf:8e:79:78:a8:
86:3c:35:18:44:52:21:97:8d:50:85:aa:d9:59:79:03:91:69:
d7:f9:fe:40:13:82:02:4d:a0:9a:d1:47:fa:93:4b:05:5b:37:
48:a9:af:9b:2d:66:27:b5:ca:b2:81:3c:ba:24:7c:71:9d:9c:
5f:57:8d:35:c9:a6:a1:19:71:4e:fe:da:de:d8:9f:56:66:29:
1c:b2:5b:fa:00:be:6d:e6:ec:c2:8c:3d:af:a6:e9:96:90:7a:
27:3d:0b:e6:a3:8e:38:6c:a7:93:5f:d4:d3:0d:0c:06:a0:dd:
07:48:1b:4a:c0:5f:38:0b:0a:7c:bd:0c:f2:59:76:51:7a:9f:
c8:7e:aa:4b:ee:36:6b:81:a8:6a:05:f8:d5:fd:45:cf:65:8c:
59:75:b4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:33:47 2026 by rpki-client