Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
File: ZiEKIeTkbpksh_aziCYLb8xi77c.mft (raw, json)
Hash identifier: I2yyb50oBLKq4QfzogBLJiNhefHP6oEXRM0hbVjF0S4=
Subject key identifier: 74:26:8F:C7:AE:26:03:05:5B:6E:77:5C:1C:EF:B6:E3:38:77:69:97
Authority key identifier: 66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
Certificate issuer: /CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Certificate serial: 01A0D5DDCFFD9175465F9E65C861A894E91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:18 +0000
Manifest this update: Fri 25 Sep 2026 00:01:18 +0000
Manifest next update: Sat 26 Sep 2026 00:01:18 +0000
Files and hashes: 1: 7hxycR97F6II7DC0Vj37aerZ5oQ.roa (hash: KZSoHAwVwfiAoSXeYAVjqNq4+GGagnZ4C5DwWpPA1wQ=)
2: ZiEKIeTkbpksh_aziCYLb8xi77c.crl (hash: fdfhdaFlVKCziM9CfgZmgD3gtVVHaj/pzv/zPxm9/tY=)
3: qxo3ePZzVemzYTrsxmbd-aDG0xQ.roa (hash: Ts2ye0fisSWfvRXQ8xO3p21sDayxpAX1ycZX2DBkKX8=)
4: uYVzId5kHuAZNJSNCwDKcMz7_xY.roa (hash: c9bVVqZsVrLii9K2d4d5uBshO4e4alJujzyjDVg0Pr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:cf:fd:91:75:46:5f:9e:65:c8:61:a8:94:e9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Validity
Not Before: Sep 25 00:01:18 2026 GMT
Not After : Sep 26 00:01:18 2026 GMT
Subject: CN=74268fc7ae2603055b6e775c1cefb6e338776997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:50:4e:52:32:a7:91:8a:e4:b2:cf:f6:6a:
1c:fb:aa:28:ad:77:ef:6c:24:e4:c2:f9:4a:53:a6:
32:62:4d:21:50:f8:2e:a7:6a:d5:5b:87:59:ac:3c:
fe:c1:8d:f3:ad:e3:a7:3a:53:68:b4:33:01:29:9f:
a8:f8:75:41:69:c7:d1:1b:6f:a0:7e:50:86:cb:1e:
df:07:d7:9c:ac:ed:b3:74:5b:8d:04:1b:9c:6f:6c:
30:7f:7a:24:23:16:6f:17:b0:c5:4f:11:92:fa:ff:
2f:43:3a:7a:05:eb:a8:a0:f4:f6:d5:6b:46:f7:12:
61:8a:fd:13:33:85:e5:9b:f6:a4:3c:33:6a:b2:ab:
14:2a:e4:c4:62:18:5c:fa:1c:0b:ab:90:7a:55:3e:
74:1f:6d:dc:03:29:27:d6:e7:0f:3f:f3:09:5a:b0:
3c:8b:bd:7c:76:04:ce:19:24:8f:1a:43:75:18:fa:
a2:7e:68:58:ac:2e:42:18:cf:f5:3b:09:5a:be:6f:
3d:25:82:03:d2:b6:e7:4c:14:25:1e:ec:ab:10:9b:
22:a0:ad:7a:62:28:73:c7:cd:ff:4b:4e:c6:48:f3:
1a:8d:12:d4:30:57:35:c7:d0:e1:3f:29:eb:81:0d:
ad:21:d5:46:88:f5:68:05:95:de:16:0b:dc:78:35:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:26:8F:C7:AE:26:03:05:5B:6E:77:5C:1C:EF:B6:E3:38:77:69:97
X509v3 Authority Key Identifier:
keyid:66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:be:59:0a:75:93:74:ec:85:38:65:d4:d4:9d:78:70:8e:a5:
93:dd:04:06:ce:70:10:f3:35:20:69:19:fb:0e:60:4b:0f:3d:
61:c4:1a:90:4c:5d:83:78:d8:c6:f2:e6:a0:df:bc:71:c2:c2:
64:58:d6:c1:84:7e:48:44:f0:bb:ea:0f:bf:44:5f:ba:d8:6d:
e1:61:70:c8:cd:be:89:9c:fb:e1:05:19:2c:4a:af:e8:30:c6:
4a:e5:09:49:95:69:8a:b4:71:46:f7:37:27:7e:3f:47:1a:9e:
d5:9e:76:56:27:90:79:ee:a5:cb:78:32:67:d5:42:ef:7e:66:
56:01:a2:dc:55:b0:65:48:29:39:2e:ad:dd:63:7c:6a:47:1b:
6c:27:07:15:b7:77:02:a5:49:db:6c:b6:85:a5:a1:5d:cb:dc:
b2:c8:99:0a:e1:78:7d:01:67:50:28:b4:fd:da:17:58:3b:bc:
9d:0e:b3:78:06:97:da:dc:15:0c:8b:3c:68:d4:80:4f:fb:89:
c8:a8:cc:b1:47:48:7b:b8:f4:4a:bf:b8:8e:61:41:3b:bd:2f:
cb:8d:05:10:dc:f2:dc:80:3d:3d:a2:56:cc:eb:2f:40:bc:4c:
c3:32:01:d7:48:16:c0:45:1e:07:c9:a5:5e:30:13:b8:2f:ad:
bc:9a:18:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:57:56 2026 by rpki-client