Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: 4V/WjtDc4IeCsz0ErHKJxWS8v4xSgtFRrLiwknJQ/tw=
Subject key identifier: 32:40:DD:BF:AE:EE:42:29:5B:81:D1:87:E1:D9:D0:DF:C9:AD:B1:CF
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 01A0C88F89CDCA5865D13FEB6ECE344D3433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 13AA
Signing time: Tue 22 Sep 2026 10:00:45 +0000
Manifest this update: Tue 22 Sep 2026 10:00:45 +0000
Manifest next update: Wed 23 Sep 2026 10:00:45 +0000
Files and hashes: 1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: xUfPKvpn0mmdqmhVdpq94bRiN8wOfM4qZEbYc5LbIPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:89:cd:ca:58:65:d1:3f:eb:6e:ce:34:4d:34:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Sep 22 10:00:45 2026 GMT
Not After : Sep 23 10:00:45 2026 GMT
Subject: CN=3240ddbfaeee42295b81d187e1d9d0dfc9adb1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:eb:c0:33:ee:9b:60:73:f7:0e:15:cf:22:
61:71:5b:23:71:92:94:68:1f:e5:34:32:f7:7a:c1:
e3:a7:31:72:36:98:1b:d9:c4:47:39:75:47:d0:71:
29:af:94:58:3b:71:57:f7:c0:14:38:f7:f7:25:97:
09:0c:9f:67:ff:62:a3:ab:d5:e7:df:90:dd:30:b9:
aa:0b:fd:a0:7d:15:b6:29:15:f6:b8:a6:59:1d:94:
2b:73:41:0d:43:2a:c4:3a:a7:fd:f2:5a:86:79:c7:
2f:56:97:fc:14:a8:4f:ef:8c:de:b7:fe:db:8a:36:
80:74:58:05:3c:54:61:b9:81:8d:c5:19:ef:0b:83:
85:ea:7e:03:bd:4b:ae:5f:c1:9a:2e:95:e7:b7:c5:
93:ee:3b:fb:5e:10:d2:e6:fe:36:b3:c4:9d:26:01:
b0:1c:ed:fe:cd:a7:b2:af:94:62:e8:f1:22:33:ad:
45:a6:d1:37:8e:c8:46:c9:72:7d:b6:7e:bc:2d:38:
4b:ca:15:21:00:ea:30:1a:b0:98:66:e4:e8:11:5d:
50:42:6a:cf:7f:dc:2e:f3:75:d0:92:bb:87:f3:d5:
72:8a:87:8e:4f:6e:cf:62:d1:60:ea:66:97:f8:6d:
62:e6:09:9c:b3:83:20:e2:48:4b:56:e8:6b:22:93:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:40:DD:BF:AE:EE:42:29:5B:81:D1:87:E1:D9:D0:DF:C9:AD:B1:CF
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:52:e4:16:68:36:3d:e3:2b:1e:d6:97:91:db:38:31:b6:9d:
43:ba:2f:fa:03:c1:d8:8b:6f:5e:b5:5d:fc:36:f9:8d:80:d1:
fc:2e:14:14:01:f4:ad:ee:91:f0:ea:14:2c:d7:c3:75:c9:29:
2a:50:ca:02:c2:56:8d:b2:b3:8f:da:09:38:8e:6c:bb:8c:0b:
0a:0c:70:3d:2d:dd:10:9c:24:8f:64:94:1c:33:9f:ab:be:13:
6b:13:ef:e2:50:3f:40:c3:2d:7b:e7:b3:a4:cb:3e:c5:c8:d2:
35:cc:e0:99:a3:72:7c:d7:69:bf:74:7e:de:d5:34:fe:7e:ba:
52:48:41:a3:fa:47:84:59:2d:b4:09:7d:84:92:84:43:ab:7f:
6d:a1:87:a1:46:dd:27:32:59:17:a7:08:59:b4:05:1b:a6:61:
2d:e8:70:5d:11:25:23:5a:f8:f6:14:6e:3f:19:64:07:c6:a5:
67:1b:0b:c4:e2:23:e4:2a:82:1b:b2:88:17:66:50:8a:6f:4b:
ca:cc:b0:5a:c5:5a:12:27:e3:a9:f6:d3:9b:15:97:99:06:51:
c9:5e:14:2e:b0:e7:55:ea:c5:00:c3:1d:1a:8c:26:5b:a4:63:
90:2a:b0:ee:de:1d:18:4a:30:87:0a:c5:0f:69:b6:07:e0:b9:
db:b3:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:11:16 2026 by rpki-client