Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: 8DK97d91FAcCSv0/td3M1fcnzldm3alyoE1qE3P9L7I=
Subject key identifier: AC:B5:70:0A:54:45:A9:48:5D:1E:39:FE:BF:8F:F9:C3:56:8F:76:6B
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 01A0C77CE24DE556664F90C1A76E0ECF2401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 056D
Signing time: Tue 22 Sep 2026 05:00:45 +0000
Manifest this update: Tue 22 Sep 2026 05:00:45 +0000
Manifest next update: Wed 23 Sep 2026 05:00:45 +0000
Files and hashes: 1: DV_1PU5sghttOAyD5Fk0auja6M4.roa (hash: vyYX2XFHKs4PfXvL2MDa+XaKNUQzIY/+9Y9TmVp9CiU=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: lSNAcJ6yvh1CqNRZe0QN/NIlLNIokpJ80DXPGXOWF4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:e2:4d:e5:56:66:4f:90:c1:a7:6e:0e:cf:24:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Sep 22 05:00:45 2026 GMT
Not After : Sep 23 05:00:45 2026 GMT
Subject: CN=acb5700a5445a9485d1e39febf8ff9c3568f766b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:16:73:49:7d:3a:5a:9b:47:f3:03:1f:d4:
ad:6f:31:ab:4e:23:96:0e:c1:8b:51:da:0f:5c:c5:
8f:11:3a:95:26:43:10:86:e3:31:4b:c4:3c:e4:4c:
74:54:e4:06:ec:1f:ba:95:67:91:33:db:4d:5f:75:
30:fc:1e:31:b6:77:dd:4d:ac:8a:6f:c3:d8:72:ee:
b4:a8:34:4a:34:b4:21:a3:4f:d5:80:76:17:61:49:
42:63:5e:5c:cb:95:d8:44:b5:f0:07:39:d3:66:28:
fd:7d:54:7a:d3:25:9f:59:90:ea:f4:33:ca:16:ce:
aa:13:bf:ea:b7:aa:f9:9f:09:ed:8b:61:12:aa:31:
20:46:4f:2d:ac:79:c7:3d:c0:86:fb:d4:63:14:4a:
11:da:35:75:72:9b:e7:1d:e7:7a:2d:1f:7b:b7:4f:
f5:08:73:07:d5:8e:5f:55:73:da:55:32:59:1c:b4:
88:0e:81:f1:8d:cd:e2:a4:7f:22:98:ec:ff:39:1c:
5f:9a:98:77:5d:ba:f3:13:1f:ae:cd:fe:9e:f2:3e:
58:81:63:8d:5f:3b:7b:e5:3b:11:9a:9b:fc:ce:ad:
0b:9a:00:47:0c:b5:26:c9:e2:f7:1e:da:be:a9:93:
9f:2a:ad:5f:e8:f5:c3:8c:15:1c:bc:f8:f9:d2:8e:
25:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B5:70:0A:54:45:A9:48:5D:1E:39:FE:BF:8F:F9:C3:56:8F:76:6B
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:d8:f2:7f:72:be:e1:2b:e5:9b:5b:95:a8:ab:cf:b1:a1:bb:
ed:66:94:d6:cd:c8:67:66:46:47:81:d2:64:74:ae:6a:09:17:
2e:d0:f1:bd:14:bc:34:7e:89:86:82:dc:a4:31:b4:e6:fc:6a:
29:9f:a2:d5:94:99:07:f0:2a:06:b3:9c:fc:fe:a1:b0:0b:8e:
8a:d2:9e:82:76:f8:78:bc:d2:2c:bb:b7:b4:f8:1b:38:44:cb:
6e:30:56:f2:88:02:3e:f5:3c:a5:2d:1c:b7:2e:1e:30:e3:44:
c9:b1:70:9f:3d:fb:b4:82:12:de:1d:40:9a:f8:1a:3d:c8:ae:
23:de:93:a7:3d:db:d5:91:eb:1b:01:22:47:60:9c:f4:ab:24:
99:fb:81:2f:b2:95:f4:cc:e4:79:a8:10:a9:a6:71:7f:42:ee:
4d:18:7d:50:e5:8c:bf:8b:08:88:3e:07:7f:01:62:0d:ca:d4:
40:06:2b:15:bd:1b:74:b5:30:10:cb:24:11:9c:13:d4:ba:1b:
98:6a:ca:4b:cb:b9:84:f5:48:cc:63:cf:a9:04:60:9a:7e:09:
0c:c0:ac:38:94:af:5b:66:a5:4e:90:56:35:62:55:d0:ac:3f:
6e:ac:37:93:30:f0:3e:89:2a:65:c0:14:05:b4:e7:6b:14:c0:
5e:70:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:49:47 2026 by rpki-client