Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: gB6S+O+beGPgvC8uDlFhB+bjUMSvJzuImV64biXbPu8=
Subject key identifier: 17:F0:E4:87:70:D4:D6:8C:BF:4F:4F:7B:95:36:B8:3E:78:1B:77:6F
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 01A0C745F8EE60CF027BA2CDE54C47533C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 14A7
Signing time: Tue 22 Sep 2026 04:00:46 +0000
Manifest this update: Tue 22 Sep 2026 04:00:46 +0000
Manifest next update: Wed 23 Sep 2026 04:00:46 +0000
Files and hashes: 1: SWC8q5CH8zumHrflzVp4e7i8dGY.roa (hash: z98d01QAmvPs9qVeEUxQJcsgJEzGZb8FADftU7i+UZw=)
2: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: qZdo1sMjt+xl94lRDxqLDZ3oWRyJKqMk/QLWryy+9l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:45:f8:ee:60:cf:02:7b:a2:cd:e5:4c:47:53:3c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Sep 22 04:00:46 2026 GMT
Not After : Sep 23 04:00:46 2026 GMT
Subject: CN=17f0e48770d4d68cbf4f4f7b9536b83e781b776f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:76:01:20:13:6b:17:5b:1c:57:3b:68:75:
8b:1a:e3:4f:95:b2:ea:5e:2c:7b:42:54:fd:f7:13:
7a:12:2f:81:39:9b:82:f4:bc:6e:49:e9:b6:14:22:
10:be:91:5a:33:3a:85:3f:5e:db:c5:46:52:f0:a8:
84:fc:a3:5e:32:42:13:eb:5c:ee:55:65:23:09:dc:
5f:3e:c4:0c:ba:d1:ff:01:27:9b:54:81:24:da:64:
c2:f4:bd:aa:17:c8:3f:f9:90:cd:5d:72:fc:39:98:
03:28:e3:c1:6a:2a:16:8f:a8:b6:71:c6:16:d1:b0:
e3:bf:0f:f9:1a:89:c4:00:e0:75:b2:1c:f7:5c:1f:
00:1a:e4:32:30:4e:6e:44:4d:20:48:48:ae:cc:b0:
b1:8b:86:1a:79:e2:32:33:bd:f1:50:bd:4a:f9:8a:
7d:81:df:f4:47:43:d9:b5:b7:0c:6c:d9:b9:82:ab:
7e:1a:b8:cd:71:b3:0c:8e:e4:d5:77:e3:f7:0a:d6:
31:d7:72:7b:12:34:81:a2:fd:b1:a9:0c:da:82:3a:
7a:55:0a:53:08:69:58:c9:3f:ba:ae:aa:ad:90:b2:
ab:fb:b5:a2:77:9b:c8:c5:13:db:14:a5:14:d1:5b:
71:8d:ba:32:28:28:88:e8:e4:23:49:36:84:c5:3b:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F0:E4:87:70:D4:D6:8C:BF:4F:4F:7B:95:36:B8:3E:78:1B:77:6F
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ff:e2:fc:15:22:f0:18:8a:8e:77:21:e7:3b:7a:79:6c:ac:
e4:80:58:4a:92:76:3c:e1:9f:51:75:ea:97:40:95:cd:9c:e3:
5a:be:f7:99:55:17:04:0a:50:49:d0:74:79:65:2e:76:d6:28:
34:6d:43:fa:bd:e8:30:59:02:e3:64:2c:2c:8a:fc:57:ae:54:
7d:01:8f:5f:4e:b4:af:5b:c2:6a:85:ac:59:42:e1:b6:3c:9e:
1c:76:5d:ef:03:cf:0e:a7:ff:f7:e4:f9:23:a6:be:70:5d:51:
1e:e2:81:ef:63:4f:3b:7d:21:32:95:47:33:7b:7b:52:0c:ce:
89:a6:c2:9d:c2:95:a4:d5:8f:2a:c3:84:48:b7:8c:1b:20:90:
7e:8a:b4:06:91:7a:f7:82:08:4c:43:e3:2b:81:0b:a7:3f:ec:
4f:b3:9a:31:0c:be:98:bf:9b:ab:ae:5b:b2:9a:e2:8b:1a:11:
d5:c2:4d:e4:ad:02:77:49:09:be:da:5d:a0:42:0f:da:5c:25:
ac:7d:9e:88:03:ef:10:34:78:bd:fe:ec:d4:7a:2a:21:ea:27:
5c:df:c9:62:e0:e9:3a:4f:58:03:38:85:66:e1:a7:55:bb:f4:
a9:d8:fb:3f:d4:c1:52:d0:b7:92:0e:72:2e:d0:ab:b9:0f:5b:
87:51:fe:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:53:52 2026 by rpki-client