Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: 67thic7tAkL8WnsrOIcm/AkRsvjZHNlv/IqUNHhKqUM=
Subject key identifier: 42:DE:BF:64:7D:4D:D7:D0:15:56:C9:30:B2:55:18:C9:DF:40:F8:E6
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 01A132FE4E22E4E8798635B9804850611BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 07F4
Signing time: Tue 13 Oct 2026 02:01:29 +0000
Manifest this update: Tue 13 Oct 2026 02:01:29 +0000
Manifest next update: Wed 14 Oct 2026 02:01:29 +0000
Files and hashes: 1: 0MEQxwD9zfWWZH2uW7sIhd_mFno.roa (hash: bP379mwRyG+37X38gwvy3mtfEkchSNALzGhS0CYul3s=)
2: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: Opo1DBy+l2YXEnn/MLWkMRMz9wN0YvuWii6AZEZgD4Y=)
3: 1-GkTjUK6V7r09KkxY2YGe-ZueW4.asa (hash: 0dOTFNwjsycUSdYNOemtkLMm/ZBw6AcUp5qXHZi3tFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:fe:4e:22:e4:e8:79:86:35:b9:80:48:50:61:1b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Oct 13 02:01:29 2026 GMT
Not After : Oct 14 02:01:29 2026 GMT
Subject: CN=42debf647d4dd7d01556c930b25518c9df40f8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:9d:26:4b:ea:ae:f8:65:1d:35:83:da:be:
76:46:13:b8:87:8c:92:e4:d9:e5:42:3c:58:71:e0:
3f:42:2b:a8:e1:04:01:7b:10:22:c5:85:24:2b:32:
f6:ca:8f:18:c4:1c:bc:21:81:f6:74:95:15:12:5f:
e1:c8:ab:d4:16:b3:2d:8c:64:ed:51:bc:4a:8f:7e:
35:e8:05:cc:de:39:34:41:d2:ff:6a:fe:6b:d8:24:
8f:f8:f1:03:a7:f0:a9:d4:d7:ea:c2:98:3c:05:09:
ea:0d:95:24:de:25:4c:a2:7c:c8:0c:b1:6c:31:9b:
9f:18:6a:c3:f2:7d:bb:0f:17:ac:b1:ee:60:96:c9:
c2:9c:f8:e6:98:61:63:3c:9c:3b:53:24:d7:23:79:
6b:de:e5:08:0a:1e:a2:54:bb:57:ac:dd:d8:4c:50:
2f:77:d6:34:72:8c:a3:cf:89:a5:79:00:07:13:8a:
55:cb:f2:f0:e2:70:b8:c6:42:f2:fb:7d:4c:1a:78:
0e:5c:09:51:3d:34:71:62:b9:55:ea:2c:0e:71:d2:
7f:b5:39:4a:f2:b9:f2:41:46:96:b9:6f:78:05:cf:
52:64:7b:90:20:49:7f:f9:51:f8:d8:79:0d:5c:ab:
dd:69:8b:5c:66:14:82:05:11:ba:0d:26:d9:bb:d0:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DE:BF:64:7D:4D:D7:D0:15:56:C9:30:B2:55:18:C9:DF:40:F8:E6
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:aa:68:f3:87:0f:b0:31:ea:38:a5:43:d7:a1:14:05:1f:72:
f4:f9:ba:ab:e8:61:ca:3d:7f:70:c3:be:ae:d1:63:e7:89:c1:
5f:61:60:40:61:4f:81:64:a4:3a:8e:b2:05:ab:70:04:e3:2d:
22:60:63:4b:56:10:f6:17:19:38:43:11:11:85:23:62:ce:60:
5b:71:a0:ab:5c:0d:42:54:92:2a:60:02:ca:b7:79:ec:24:a5:
a1:f4:43:2c:82:6c:a6:1b:dd:65:fd:f5:39:51:18:10:b3:10:
5e:e6:1b:6a:44:14:4e:10:9a:2e:ce:69:aa:28:b6:30:02:82:
8f:67:04:d5:d9:a4:96:70:39:96:0e:49:03:08:bf:0a:41:76:
82:fb:f6:57:9a:81:8c:41:27:9b:66:cd:c3:a1:88:59:b2:d5:
21:15:97:4f:61:74:4a:c9:31:fd:26:7e:8a:77:fb:7f:d1:3e:
7c:d1:21:b9:0d:88:ae:80:91:a5:15:24:41:c1:e2:c4:f1:7b:
1e:9c:90:36:23:28:4f:11:f8:18:a0:fa:9a:eb:83:5f:75:2b:
80:b9:c2:28:45:10:0c:ff:64:4e:58:89:af:12:c9:6a:92:7b:
0f:7c:c6:40:bc:fe:d2:3e:9f:7a:f0:a3:60:87:4f:9b:aa:32:
9e:e4:00:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:53:39 2026 by rpki-client