Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
File: ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft (raw, json)
Hash identifier: ND9J4362p2gDiVuAb88g0hbxw7EzGR72irfmvp+oK2Q=
Subject key identifier: 02:3C:10:63:96:B3:01:9A:03:EF:95:52:16:00:6D:EC:F1:96:89:3C
Authority key identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
Certificate issuer: /CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Certificate serial: 01A0C1E8BB1E5C9C8F77B6245B723643CDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
Manifest number: 051A
Signing time: Mon 21 Sep 2026 03:00:49 +0000
Manifest this update: Mon 21 Sep 2026 03:00:49 +0000
Manifest next update: Tue 22 Sep 2026 03:00:49 +0000
Files and hashes: 1: 4khbVFEEtELbVKjdX-EOY4D-84o.asa (hash: jJbuP4gphJUD/kkuEq/w+9/whek2vyfSwhJa4fmVm8Y=)
2: OpiyEA7jLNoth377L3JQZRW22EA.asa (hash: r8ONgzWitytpplKZRKdun1LH8tmOWmyteR7//LNHOZ8=)
3: TBDRW3pZmuh3LqJB0SgJxwzZcn8.asa (hash: hzhoB7Z5vY10r4VrziTI+hp0NwmrNuDhAq362RHDbhc=)
4: ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl (hash: 3gST39CEFZnuM4xAOklAj8kgbOiNpznfg1ax4sd2bqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:bb:1e:5c:9c:8f:77:b6:24:5b:72:36:43:cd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Validity
Not Before: Sep 21 03:00:49 2026 GMT
Not After : Sep 22 03:00:49 2026 GMT
Subject: CN=023c106396b3019a03ef955216006decf196893c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:a4:68:cf:c6:68:da:72:20:27:f9:d1:1d:
64:da:17:fe:89:28:28:28:56:a6:fd:1b:0d:25:fe:
fb:03:4f:a2:82:7a:b7:d7:73:e3:43:a4:ca:7f:22:
2a:42:64:41:c5:eb:93:89:eb:1f:b9:cb:06:26:35:
ba:ae:d6:36:56:80:75:31:80:8f:6b:da:0e:f6:28:
f6:7a:80:44:c7:06:6b:00:44:16:0a:da:c8:81:5d:
38:89:e4:7f:2c:6e:a3:92:d4:a0:20:a3:b1:2d:6e:
61:1a:4a:60:1c:4e:bc:55:2a:12:b3:8d:8b:f8:7d:
e4:e8:87:c7:6d:0b:37:e4:a7:4c:52:07:da:74:8b:
aa:1c:bc:3c:c3:18:15:b7:30:73:9d:14:b4:92:98:
c4:7c:2a:d6:2f:ab:03:75:38:f2:72:c2:b9:1e:5b:
35:43:39:8b:ef:76:0b:64:3d:ef:fc:6b:96:61:15:
28:8d:df:0f:6f:31:4a:e2:1c:24:ed:15:9a:1b:ef:
14:f8:c6:7f:12:3f:5b:30:73:d7:5e:a4:e4:1f:8b:
b2:8a:04:b1:8e:c4:c7:68:75:25:20:94:06:2d:80:
bb:1d:19:fa:ca:39:66:5b:1a:b2:83:19:b0:fb:7e:
97:e1:1c:58:fc:b9:ba:93:d5:6d:35:36:56:ff:a1:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3C:10:63:96:B3:01:9A:03:EF:95:52:16:00:6D:EC:F1:96:89:3C
X509v3 Authority Key Identifier:
keyid:65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:46:5d:ec:89:bf:f4:37:7f:81:6d:30:14:23:dd:b0:c6:71:
5a:3a:5b:ea:46:49:7e:85:c8:86:3f:06:8c:22:07:3a:5b:8f:
ec:ab:df:a5:d3:e9:21:60:f9:9c:1f:51:d3:39:9c:e2:4f:ad:
85:6d:cf:0d:fb:3b:5a:0f:fd:e6:37:5d:2d:14:e1:dc:5b:ed:
bc:fa:ad:83:c8:37:c6:9f:09:30:07:39:f3:61:14:ba:ea:03:
f9:8e:95:4c:d0:65:c3:5b:74:62:b6:15:be:95:fb:15:f5:d2:
67:9a:ec:15:34:16:1c:f1:a4:e2:4c:4b:c0:5d:91:3e:60:8e:
9a:4e:b4:0e:48:a9:bc:b4:3f:06:ad:87:b4:04:d7:b7:61:4e:
db:1e:5a:bf:cc:22:fe:b6:8d:73:74:dc:0b:45:51:ea:19:eb:
65:c2:81:c6:0c:a8:ee:28:aa:03:3f:36:74:42:ef:49:26:e6:
e7:9d:71:19:bc:df:98:c2:be:4d:6a:f3:09:a2:ce:70:1d:2a:
16:69:67:bb:a0:c6:72:b1:0d:56:df:64:44:c5:fd:eb:c1:c0:
93:f8:5b:d1:32:81:f6:c6:9d:62:4c:94:59:7d:9e:c6:81:97:
12:3b:1a:51:a5:66:1f:0c:39:7a:8c:12:ea:f3:04:90:e1:92:
1f:8a:49:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:00:33 2026 by rpki-client