Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: nYSfqSM2k/Bb1w/DBHiTV6jvqWkRsCGgyuBBJ7XrtaM=
Subject key identifier: AA:31:7D:9E:AE:22:FA:3A:3C:CD:65:4D:16:72:B6:69:0A:55:80:74
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 01A0D0B6899498E759B9F1B95E340E0481C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 0A12
Signing time: Thu 24 Sep 2026 00:00:18 +0000
Manifest this update: Thu 24 Sep 2026 00:00:18 +0000
Manifest next update: Fri 25 Sep 2026 00:00:18 +0000
Files and hashes: 1: W37sGJ1Z1wl4UUbIKXQMtHltG0E.roa (hash: hXtR6w7vecs+GA3es0V1qVgIw93rkqQSf8/pd9Bww6I=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: RaO9iyFO0PiRZUk/qza/ceZTFjrn7IDycth1UtZoRHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:89:94:98:e7:59:b9:f1:b9:5e:34:0e:04:81:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Sep 24 00:00:18 2026 GMT
Not After : Sep 25 00:00:18 2026 GMT
Subject: CN=aa317d9eae22fa3a3ccd654d1672b6690a558074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:13:81:3c:73:74:df:1e:0e:12:90:d9:d3:
a6:fe:76:a8:f7:a1:d5:3d:be:51:3c:2a:ea:2e:6a:
ea:1c:97:a9:09:26:6e:86:89:8a:70:5e:95:48:c0:
24:5e:e4:09:dc:ec:cb:3b:c7:e8:12:1c:89:4f:0e:
ce:c2:dd:63:68:93:84:be:77:a5:54:84:e7:e7:a7:
1e:73:74:9a:91:16:dc:cb:1b:a8:02:a6:3e:d4:dd:
ca:aa:b3:87:3c:91:6a:29:bd:f4:1d:2a:64:b3:a1:
e7:ba:69:e0:fe:cd:83:ff:d1:31:d9:55:05:bb:4a:
32:ff:f3:f1:12:b2:90:1d:1e:5b:50:89:92:52:75:
27:c0:1e:af:36:ab:84:c6:b6:bb:31:13:15:5a:cb:
4b:cb:58:39:ef:46:b7:83:3f:15:c0:aa:ec:58:5d:
c9:0b:02:75:ff:01:75:6b:55:42:6e:59:12:21:a7:
8d:09:1b:a3:87:5f:ba:d3:8a:be:97:c3:cd:12:d6:
eb:38:1d:ed:c6:71:26:d9:71:67:58:13:42:cb:79:
35:d8:8d:71:dd:de:51:4b:a8:80:e6:e0:19:5c:7e:
32:9a:67:f1:ec:2d:41:a9:33:bc:db:64:fd:31:3b:
a2:cf:41:71:de:fa:ac:ca:af:d4:5f:86:d4:71:5d:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:7D:9E:AE:22:FA:3A:3C:CD:65:4D:16:72:B6:69:0A:55:80:74
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e1:00:1c:f3:7f:e7:fa:15:87:c9:c8:47:8e:a8:69:4e:4f:
3b:73:64:48:f5:5a:91:cf:7c:bf:1d:93:0e:7d:a1:5a:18:02:
94:0e:c7:ec:11:db:a1:8b:05:16:69:62:e4:97:00:ea:0a:f1:
6d:28:57:59:a3:a5:3b:af:a1:4d:3b:02:a2:26:5e:7f:82:24:
e6:c1:79:b5:84:48:ca:9d:c5:58:90:f8:2c:ff:2f:d3:1a:17:
10:8d:e1:24:b9:d5:2a:41:17:79:67:88:e2:20:7c:03:fc:04:
19:ac:5b:92:25:5b:27:6f:05:22:ea:9f:c0:b3:b9:23:39:7b:
66:ef:a0:a2:e4:59:6b:28:e8:79:8b:fa:6c:cb:dc:62:39:40:
16:dc:6a:79:6b:3f:b1:4e:ed:21:61:76:35:f5:0b:13:64:d0:
1c:b1:a4:44:a2:0d:45:a6:7d:fe:81:e7:b4:48:89:b0:d5:67:
c8:7e:e4:ea:3e:17:32:dd:55:ab:c7:8f:4d:80:fa:06:db:df:
44:73:ad:19:e2:84:ac:90:f8:ca:93:e9:98:63:1c:4c:10:b1:
5e:42:23:2f:4f:01:40:d8:37:82:04:42:90:14:2d:c2:f1:39:
88:a3:b8:52:e7:59:fb:d8:cb:0a:6d:25:70:a3:c9:54:1d:5c:
d7:0d:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:52:23 2026 by rpki-client