Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
File: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json)
Hash identifier: 30VaIwi3qHVdOblIVF7X1SWhXzJy/iZgNzIXOuf3qfY=
Subject key identifier: 7A:05:11:85:57:D2:E0:6C:83:97:74:38:0B:DB:CF:05:1B:07:F7:39
Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
Certificate issuer: /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Certificate serial: 01A0D34B1192AE2F6CDF83BDD2869EACF28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
Manifest number: 0B8D
Signing time: Thu 24 Sep 2026 12:01:47 +0000
Manifest this update: Thu 24 Sep 2026 12:01:47 +0000
Manifest next update: Fri 25 Sep 2026 12:01:47 +0000
Files and hashes: 1: PKBAlxhxjbQl3V5bDnuBzljib9Q.roa (hash: eWzoIIDioxxQX7PyiTO6rBCtAXhu7H8TtLvFoqesiBg=)
2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: aq78RVe9HRK5t7RAUssYnZOC/DrwDTVKRzJHgFhWgfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:11:92:ae:2f:6c:df:83:bd:d2:86:9e:ac:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Validity
Not Before: Sep 24 12:01:47 2026 GMT
Not After : Sep 25 12:01:47 2026 GMT
Subject: CN=7a05118557d2e06c839774380bdbcf051b07f739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:ac:1f:2e:4b:bc:f8:f7:c0:81:40:e5:35:
6e:70:05:b0:d6:b9:3c:36:fc:58:9e:98:ef:a1:69:
c9:f9:c5:c9:41:9b:e6:83:ee:a0:cb:42:93:da:c9:
6d:71:dd:8d:c6:d7:7f:b8:3c:bd:75:15:f7:eb:77:
8d:cf:2a:73:f1:95:e6:65:8e:72:99:76:70:8e:c4:
a1:e6:a6:23:4b:40:ee:a1:d3:f7:9b:44:19:e6:01:
54:b3:a5:26:6a:33:92:1b:04:c7:8f:b5:45:13:7e:
34:ef:e7:c3:91:3a:0b:26:a6:2b:4f:a6:bb:6c:65:
99:36:f3:be:6b:19:6c:f3:1c:7d:44:e2:79:61:0a:
50:44:23:5f:76:69:98:55:da:16:d6:00:0f:9e:ff:
87:f6:8c:15:6b:5a:aa:95:17:a0:e8:d1:22:fe:0a:
de:16:e1:65:55:52:b4:b8:4a:96:19:d9:96:80:8c:
11:00:9a:61:87:a2:b1:be:97:d3:86:3e:92:0b:f4:
49:8d:92:a8:4c:67:8e:39:73:3a:e8:a9:8d:75:a6:
b4:8f:b0:04:e7:f5:32:94:bc:bc:73:58:1c:a9:6f:
44:a0:b4:d5:88:6b:49:a4:fc:3f:96:ae:dc:d4:f3:
89:76:84:65:0b:b2:37:fa:30:e4:f7:1a:be:57:a9:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:05:11:85:57:D2:E0:6C:83:97:74:38:0B:DB:CF:05:1B:07:F7:39
X509v3 Authority Key Identifier:
keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:56:ee:e6:24:10:0d:f7:f4:2c:24:b9:c7:2d:37:e9:09:da:
e9:29:09:58:62:5e:a1:e4:21:86:b6:b6:e2:76:cc:a8:cd:75:
1b:44:77:14:5b:29:db:36:9c:fb:d1:fd:dc:ed:ad:b5:8c:fa:
57:cf:be:77:46:87:a0:36:a5:80:e0:9b:6c:b2:13:2c:53:7f:
51:08:e3:2e:ad:be:92:20:3e:50:bd:b3:26:79:60:f5:54:57:
0e:19:3a:0d:c4:3f:71:82:26:32:38:0a:7b:3e:6f:49:bb:98:
4a:31:3e:fe:43:d5:bc:91:b6:87:d3:4a:91:5c:23:f8:47:ec:
c9:96:af:56:33:44:50:6b:c0:28:4c:b0:12:57:d2:4c:06:e9:
03:bb:25:16:b7:73:9a:18:bc:6c:60:4c:f7:84:e0:53:f7:c3:
d3:92:c5:0e:e0:a1:7f:98:5c:3d:25:24:19:80:00:f0:f6:5c:
3a:60:44:92:85:51:6e:66:94:f8:ff:4b:de:4d:43:c9:79:fa:
db:a9:e4:50:14:38:7f:f4:59:48:49:80:e4:56:59:62:9d:62:
de:c5:47:1d:f9:63:bb:f8:c4:96:11:60:50:89:80:d4:a5:8e:
5c:8c:58:65:c1:47:c6:15:bb:43:60:15:9f:15:17:2e:14:16:
28:49:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:54:08 2026 by rpki-client