Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: FAIFjdqtcJXzoRb+hEoXzVyOujes6W2H8PgzmMzwLQA=
Subject key identifier: 64:13:9E:D4:CD:7E:98:B2:1A:88:A7:7A:74:20:D5:BC:3D:0A:A4:AE
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 01A0E43EB63F5D4FB2B91411749661FE05D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 05D6
Signing time: Sun 27 Sep 2026 19:01:50 +0000
Manifest this update: Sun 27 Sep 2026 19:01:50 +0000
Manifest next update: Mon 28 Sep 2026 19:01:50 +0000
Files and hashes: 1: EQIS8hUY1cmRXKR2EV3HGZu3pAA.roa (hash: Wp9jKVUnjH19KZBMjioHvcWYEkt9n8/MKYDMHRVjrW8=)
2: U6_BOZR92hnw_a9L4P6TzqeXhec.roa (hash: g5QjwrMvRa/952IazG0KYw2xw/6dTSo8fap6F5NGQ7c=)
3: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: Kf/QTl1o4oqLOvFQVtuRgcpuNHAeA15Si1qpeeLdiRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:b6:3f:5d:4f:b2:b9:14:11:74:96:61:fe:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Sep 27 19:01:50 2026 GMT
Not After : Sep 28 19:01:50 2026 GMT
Subject: CN=64139ed4cd7e98b21a88a77a7420d5bc3d0aa4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:3b:eb:10:b6:f8:ff:ee:e7:58:0d:b3:54:
61:87:a8:22:f0:55:2e:d0:e2:71:97:be:6c:30:05:
dd:74:33:b9:9e:41:fe:8f:69:c4:51:06:88:73:59:
f0:38:49:2e:38:2d:e0:35:07:40:e6:e3:da:fa:c0:
59:02:75:84:2e:9a:e7:11:e3:6f:45:c1:88:14:21:
c6:68:77:89:f3:e7:77:85:57:fb:ba:d4:09:a2:74:
e1:58:65:f7:0d:bb:4a:64:a9:54:fb:31:39:7e:f4:
14:1e:c1:ba:5b:98:b8:d7:47:88:86:d8:51:96:f1:
26:6d:c9:bd:2f:3f:c4:88:21:77:a3:06:45:ad:b8:
56:bb:5e:12:3e:02:b1:e7:80:ff:0d:c1:7e:e8:1c:
bd:23:aa:e5:13:9a:62:fe:ff:c2:c5:f8:59:c4:4a:
3c:22:33:f3:2f:ac:6a:b2:38:8a:49:f9:12:22:cc:
bb:65:5e:50:a5:40:61:93:d8:52:a6:36:8d:c5:5d:
34:96:dd:58:69:50:35:14:f4:36:ea:85:9c:50:17:
1f:37:f3:00:1d:64:28:d1:78:e3:55:8a:b0:be:32:
3b:a9:4a:1d:7e:43:ab:70:11:06:b0:3f:bc:70:60:
49:8c:d6:c3:82:07:2a:b1:d6:33:b3:49:37:d6:d1:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:13:9E:D4:CD:7E:98:B2:1A:88:A7:7A:74:20:D5:BC:3D:0A:A4:AE
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:75:0d:5e:b8:43:58:01:30:ad:05:23:bc:53:3d:3a:ff:8c:
78:57:b7:d6:b7:66:da:a9:30:d5:56:ad:0d:a9:5f:73:67:14:
0c:f0:29:88:61:d1:10:d8:54:bd:3f:8f:42:6a:ba:3a:61:d6:
0d:59:0c:d7:3d:c1:9a:a7:31:69:7e:b5:de:4e:b3:b0:bd:1e:
bd:61:7b:d2:51:d0:5b:5a:30:7e:82:89:9e:b3:af:d9:a5:7f:
d4:d3:cc:42:b8:3f:dc:42:ff:75:de:4d:bc:c9:dc:37:10:79:
73:5a:a0:91:92:9e:0b:bb:1b:26:cb:86:b7:bb:5b:a1:ec:0f:
78:29:cf:4a:35:51:3a:e7:1e:09:7b:c8:23:e6:dd:b0:47:1e:
a4:65:65:d2:9b:3e:74:13:bd:1f:dc:b5:24:13:c4:6b:35:43:
78:07:ed:4c:85:dc:42:cb:c2:c4:61:1c:ee:3d:06:3d:e7:de:
88:2c:39:40:f6:c4:52:17:a2:d3:cc:6a:02:8d:5e:7f:6f:39:
af:f9:1e:b0:cb:a7:d8:9c:a5:30:bb:fc:d7:5d:e8:34:1d:18:
0a:85:c9:88:7f:d9:2e:c5:6b:61:74:77:25:a9:61:a9:62:88:
5c:08:e8:ea:70:07:75:2e:97:47:b7:f5:3a:12:2e:cd:50:37:
b7:e1:44:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:51:36 2026 by rpki-client