Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: objE3qOdgswmCNJO2SB00efZ4kCE0U+Bov7PAH1xP48=
Subject key identifier: 70:19:4B:32:CA:4E:95:6A:4E:2C:C2:56:92:E2:93:EA:F5:9A:88:16
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 01A0E1E2A92914623A1AB57B5CD46CA2C2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 0796
Signing time: Sun 27 Sep 2026 08:02:03 +0000
Manifest this update: Sun 27 Sep 2026 08:02:03 +0000
Manifest next update: Mon 28 Sep 2026 08:02:03 +0000
Files and hashes: 1: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (hash: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0=)
2: voKmqzxnpt1_Etyi16YW_6f_LiA.roa (hash: FSyRyjfIYpd8tAuhdZ0kMGNXftsQsnkKkGGZLUK2+XE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: +QEerltUjQSTGNTGXgrgBkAMkH3cOZPDI7SXQIGl2YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:a9:29:14:62:3a:1a:b5:7b:5c:d4:6c:a2:c2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Sep 27 08:02:03 2026 GMT
Not After : Sep 28 08:02:03 2026 GMT
Subject: CN=70194b32ca4e956a4e2cc25692e293eaf59a8816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:03:5f:ab:e1:3e:fd:61:da:6a:ba:38:d2:
f1:2c:e7:24:b0:a7:29:93:71:c3:e0:2f:8b:77:e7:
db:1f:87:d8:11:36:90:ca:23:e2:f9:da:b1:38:b3:
05:29:47:03:c8:ef:01:63:10:3a:1d:35:8c:54:23:
10:07:6e:e0:68:e7:32:fd:21:93:48:26:a7:b5:83:
02:04:7a:7a:08:90:b5:32:9a:49:bc:50:3e:58:14:
86:d1:35:e6:75:f8:34:87:78:c7:e0:d9:04:bf:ac:
cd:a5:9d:23:04:36:f1:2e:74:58:c5:d1:aa:e5:c0:
6a:20:b5:4f:f2:97:6f:1b:45:e5:b6:10:24:be:e8:
cc:6a:22:cb:0c:54:b9:cb:17:bf:17:5a:89:72:df:
b3:5c:aa:26:b9:b9:b2:6d:1b:11:93:0d:fc:ab:f4:
ed:d2:b8:63:a7:b8:3d:a4:9e:45:18:ef:af:a4:16:
5d:50:f4:26:15:49:1e:22:ff:89:d7:a9:8d:06:24:
e3:42:3e:82:04:f6:c9:9a:be:2c:1e:98:b7:d5:af:
c4:bd:a0:1a:0a:e9:42:ce:ca:ae:f1:be:1b:00:e4:
14:a2:87:d9:5c:70:9e:34:10:25:e8:2a:f0:b7:1f:
92:ac:c9:02:e9:a5:53:3f:2b:33:54:69:99:19:6a:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:19:4B:32:CA:4E:95:6A:4E:2C:C2:56:92:E2:93:EA:F5:9A:88:16
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0a:ec:7c:25:38:c0:a5:12:1f:d5:ae:d7:96:56:e0:a3:68:
9f:d2:34:99:b3:f7:7d:a3:3a:8c:82:58:38:0b:b6:9f:11:4a:
3f:ba:96:d9:d5:91:a0:62:e9:dd:98:f1:8f:de:c5:c8:18:2a:
1c:5f:45:ca:3a:7a:e6:0e:5d:8a:1c:83:32:31:21:0c:43:44:
01:a1:4d:9e:97:25:d5:f1:f5:53:89:ff:3e:f0:f6:46:cc:da:
11:22:02:db:7b:36:f9:fc:10:1a:04:bc:12:9b:0c:11:4a:d9:
19:9e:7e:61:a1:99:42:c6:a7:0f:2c:47:2b:49:0e:ec:43:50:
d1:f6:20:ed:03:85:c1:66:3d:17:ab:50:9f:a5:28:10:a3:a6:
c9:59:1b:f7:03:5a:b1:43:5f:dc:27:1d:ba:ec:64:ee:cc:64:
e8:5b:cc:85:da:55:4d:f0:38:e1:72:ba:90:32:4b:74:f3:c6:
84:fa:5d:88:cc:5a:9d:ea:81:35:8d:e2:e0:67:ef:87:ea:e6:
42:4e:f4:5b:79:57:c7:9d:42:b9:a8:85:89:83:78:5c:5a:99:
94:b1:fc:93:4a:8e:99:59:0c:ab:f3:db:50:1d:be:fd:34:88:
c1:5f:0c:48:5c:91:3c:f5:f5:8f:02:bf:e9:b7:20:dd:32:bb:
4d:df:7d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:29:32 2026 by rpki-client