Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
File: ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft (raw, json)
Hash identifier: FSTHxWdkvrw1H5UX6ysn/VB75ZD+uMPNe/f2qFgx64c=
Subject key identifier: A2:A9:0B:97:23:90:BA:24:27:F5:A7:E2:57:40:AB:C6:0B:AD:10:47
Authority key identifier: 65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
Certificate issuer: /CN=65f852cbd1cdf244a170edac2440d0d2f4bd5319
Certificate serial: 01A0D4942062FCAC6BB5C816ECE4CE69E6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
Manifest number: 01A0
Signing time: Thu 24 Sep 2026 18:01:12 +0000
Manifest this update: Thu 24 Sep 2026 18:01:12 +0000
Manifest next update: Fri 25 Sep 2026 18:01:12 +0000
Files and hashes: 1: ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl (hash: necT6y+by7NqpE7ZwYTi9V70IeXLhGexThYgrIZ4QWg=)
2: fX47DA3aknJjMaNF3kpMk1RfVDY.roa (hash: QnbSVkKJ1tgtZD036KjNU81Gb7v/2YPgVvv50U+eDiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:20:62:fc:ac:6b:b5:c8:16:ec:e4:ce:69:e6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f852cbd1cdf244a170edac2440d0d2f4bd5319
Validity
Not Before: Sep 24 18:01:12 2026 GMT
Not After : Sep 25 18:01:12 2026 GMT
Subject: CN=a2a90b972390ba2427f5a7e25740abc60bad1047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:36:08:1a:14:d3:12:82:ed:b2:f9:5c:0d:
9f:b2:68:8b:65:03:11:b1:a3:83:21:66:f2:11:c9:
0d:c3:94:84:45:3a:07:af:db:27:3b:be:d1:f3:5a:
bd:d6:ba:a7:81:d3:91:21:83:21:12:5b:c3:56:68:
92:d6:fb:a7:fe:57:cb:0a:f1:41:5a:62:c9:36:1d:
e8:ce:d7:83:ab:af:08:06:e1:8d:ee:16:94:5e:3f:
8a:13:08:f3:c5:ba:93:94:c6:2e:fa:e0:29:c3:65:
b0:b8:d6:44:e3:e4:6b:61:0d:39:ef:1c:24:be:6c:
a0:fe:70:43:27:d5:6f:bd:15:50:54:44:32:d9:30:
f6:9f:88:c0:96:99:e2:aa:ee:6e:40:7f:bd:b6:29:
94:a6:17:6b:77:c6:86:a1:ee:58:a6:5f:8b:0d:d4:
ff:de:99:45:b8:d7:bf:e9:f4:5c:5e:f0:0b:fb:07:
b7:09:ef:db:67:aa:1a:df:4b:77:b5:8c:3b:4a:8f:
d0:6c:df:a0:7d:7b:13:57:93:45:b8:07:d2:d4:b3:
44:41:16:c4:5e:fd:62:40:4c:b7:91:0e:76:60:8c:
9b:c7:32:5a:65:70:b2:bd:c7:00:a8:e5:25:12:83:
99:18:63:bc:23:27:90:f5:f7:38:1c:f5:cd:2b:c4:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A9:0B:97:23:90:BA:24:27:F5:A7:E2:57:40:AB:C6:0B:AD:10:47
X509v3 Authority Key Identifier:
keyid:65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:15:bb:b7:87:ca:d9:7e:69:b3:ab:2a:2b:cb:af:68:aa:9a:
19:1c:60:73:07:19:0c:b8:40:20:46:dd:f1:44:2b:24:56:21:
ee:f6:73:69:18:cb:02:4f:89:03:ed:af:37:6f:24:a5:30:de:
1e:e4:e3:45:f7:53:76:4a:45:ec:75:ab:30:04:77:e7:d1:e6:
52:4a:3a:c9:93:1d:03:56:f3:f1:79:1a:ee:65:f4:ca:0e:c3:
42:ff:89:3f:6a:33:45:ba:5f:8f:be:a7:3b:2e:18:5b:89:f2:
52:3d:e2:fe:c8:4f:75:ab:90:e4:f6:df:18:37:ed:33:28:6c:
0e:d4:38:d5:eb:2b:fe:d5:7a:52:3e:64:e1:61:bb:bc:5f:8a:
6d:dc:e4:41:be:cf:cf:30:67:39:76:5e:de:2e:c8:0e:0f:b0:
c7:09:26:62:d2:53:6c:8d:ba:a0:87:d1:84:b0:20:ae:7a:ad:
16:af:9f:d8:12:ab:65:db:aa:69:02:89:91:ad:df:78:2a:07:
98:22:78:f5:ce:23:0a:cc:90:7c:7f:65:8d:8b:85:cb:fa:24:
55:eb:4b:86:13:db:68:55:85:dc:31:bf:e9:ed:ce:79:1e:30:
43:0b:93:70:6b:9c:fa:87:2c:70:66:8a:90:57:eb:be:20:06:
51:b1:bd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:59:11 2026 by rpki-client