Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: JfufiM4BSAgWByMuiem19tBVlhZwMUhrYg0JEPuIp3U=
Subject key identifier: 04:B7:35:14:E9:EA:69:00:1B:A5:36:BB:AE:4F:1B:AF:3B:F0:CB:76
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 01A136DB369715470055E0DCBB111A253C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 0900
Signing time: Tue 13 Oct 2026 20:01:38 +0000
Manifest this update: Tue 13 Oct 2026 20:01:38 +0000
Manifest next update: Wed 14 Oct 2026 20:01:38 +0000
Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: Y6jbtWG0fxMJlGfCgv61Ck6ClF4fORU7Q6WOcjTWKu0=)
4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:db:36:97:15:47:00:55:e0:dc:bb:11:1a:25:3c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Oct 13 20:01:38 2026 GMT
Not After : Oct 14 20:01:38 2026 GMT
Subject: CN=04b73514e9ea69001ba536bbae4f1baf3bf0cb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:21:72:29:b5:89:26:5c:ca:85:a8:d4:c6:
d7:1b:eb:39:e9:50:3f:c3:07:bf:66:77:74:61:e1:
ec:81:06:c3:5e:83:f8:92:69:1c:c4:1c:22:47:89:
d5:a0:ce:d9:fb:81:de:a2:67:f0:94:d8:7d:1a:e5:
c6:b5:ae:2d:ea:e1:9e:ff:90:c5:5a:89:10:90:06:
93:6a:9b:61:2d:53:98:43:00:fc:55:a0:52:7a:83:
b6:7b:ae:d4:da:39:8b:b7:19:da:74:c4:bb:d6:b9:
33:dc:a2:93:73:90:97:7b:2a:e0:32:e1:2d:6d:2e:
94:fb:a1:ee:07:62:74:4d:0e:be:bc:7d:7e:e3:25:
06:d1:3c:e2:5b:37:bd:bd:32:84:97:a5:a2:d1:52:
c0:b6:38:2c:a1:ac:aa:01:53:40:85:04:83:33:d1:
d6:a6:9e:61:84:16:a4:51:e8:4c:a5:fa:ad:2e:9d:
73:33:25:ef:8c:bc:fa:a5:94:f9:40:22:0d:6e:e4:
c0:72:2d:44:5e:53:b4:7b:97:7a:38:ca:42:82:38:
c8:c7:c5:04:43:a0:91:95:a8:ab:ef:9e:7f:e9:38:
1d:35:ca:15:60:7e:00:24:57:8a:5a:8a:46:72:f9:
49:e4:87:13:49:a5:d8:53:87:ce:c0:2b:ea:17:69:
9a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B7:35:14:E9:EA:69:00:1B:A5:36:BB:AE:4F:1B:AF:3B:F0:CB:76
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4f:be:3b:e7:59:a7:2f:eb:62:f8:49:c1:6a:72:21:c4:0b:
17:6c:c8:f9:6d:8f:10:a9:68:0a:3c:be:70:ca:ef:ba:be:1d:
a3:2d:52:e2:ea:89:fa:f7:1a:da:33:85:9e:66:9b:9a:ad:99:
86:7c:e1:8d:ac:00:f6:15:19:33:9f:c5:4f:12:59:a9:69:12:
13:d8:66:3b:23:3c:4a:d9:5b:d7:00:61:89:43:b2:4f:ab:56:
59:18:54:32:2d:3f:17:61:6c:49:ad:f1:fe:df:8f:51:8f:1c:
e1:ae:3a:02:09:70:92:a9:96:fb:84:be:d1:35:e0:41:ee:8d:
69:e1:e6:15:a9:9c:ce:7b:25:c6:24:bc:18:66:28:fb:3f:dc:
97:a2:18:8f:9b:32:82:f0:5a:01:af:5c:4c:24:d3:0e:58:af:
1a:a7:d7:c1:4a:36:fb:77:58:78:f4:5b:75:eb:0c:4c:1e:08:
5c:e6:99:f7:1c:c2:91:13:ec:48:b7:b3:92:a1:9f:45:31:c5:
bb:80:c4:69:b4:74:e6:6f:3b:5f:cd:4c:92:e2:df:5a:65:45:
6a:7d:6d:0c:7c:1c:42:c2:73:3f:fc:06:b9:ce:21:a4:66:01:
07:18:6f:fd:69:49:68:b6:dc:00:19:9d:dd:c5:e6:7d:28:3e:
e7:20:5a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:58:38 2026 by rpki-client