Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
File: z9tEWe8iRa2EkR7v4IdafZM1xdg.mft (raw, json)
Hash identifier: QIt2YmZa08+26AWjMQBuGHy28MfLqZ2OuV1RR+ahaPg=
Subject key identifier: 57:39:80:BA:8B:5A:01:5B:54:E9:A1:1B:76:11:E4:DF:9F:7A:24:26
Authority key identifier: CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8
Certificate issuer: /CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
Certificate serial: 01A0C859535867E5F5E899D833E73175972D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:32 +0000
Manifest this update: Tue 22 Sep 2026 09:01:32 +0000
Manifest next update: Wed 23 Sep 2026 09:01:32 +0000
Files and hashes: 1: 5Ne0J2AnsBb3KqrsSaZmYRS_sJ8.asa (hash: tSOxg/159dhYNU00jXQeCM0SgZ81uaakuIVv4gHhNvQ=)
2: z9tEWe8iRa2EkR7v4IdafZM1xdg.crl (hash: QTmj7Hdj6VHrAvc+Oqcgn+Y9RCRFyed3XJUcvnb+OK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:53:58:67:e5:f5:e8:99:d8:33:e7:31:75:97:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
Validity
Not Before: Sep 22 09:01:32 2026 GMT
Not After : Sep 23 09:01:32 2026 GMT
Subject: CN=573980ba8b5a015b54e9a11b7611e4df9f7a2426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c8:53:7d:fb:66:68:28:61:df:b0:8b:89:4a:
36:19:b8:ad:fb:f0:ac:f6:23:43:4d:50:a7:6c:01:
30:c0:10:d8:8e:c8:7a:b3:59:b8:92:1e:35:f4:bc:
d8:6a:e6:6d:08:02:b6:99:b8:cf:50:32:e0:3d:64:
ac:33:5c:a7:65:bb:c2:cb:88:64:0c:d7:22:59:a8:
fb:8b:76:4b:f8:af:94:25:24:5f:f5:d6:54:ae:08:
96:7b:56:8f:80:d8:66:21:f6:83:e6:28:43:4f:1f:
53:85:09:89:87:90:a5:b5:ed:5c:00:b5:f2:c6:65:
78:47:3c:64:ad:d1:c9:dd:11:f8:e5:08:e8:69:0f:
da:41:e2:02:9e:41:84:32:92:7d:53:3d:01:70:cb:
e2:7f:fa:d4:f2:32:60:d4:70:22:ca:ec:5a:0f:7c:
6a:54:c5:8f:69:06:37:54:85:db:91:9a:69:24:1f:
fa:16:6c:cd:e7:fd:e0:3a:33:56:31:9a:a3:d7:fa:
6a:ae:55:8d:b7:3c:27:0c:65:69:96:c3:0d:b7:cc:
c4:b0:8c:b0:41:19:0f:e1:02:42:60:ba:2e:e3:fc:
8e:1f:db:de:1e:4f:bb:79:d4:15:1c:48:9b:21:35:
12:a6:09:0f:52:3f:e9:c1:f2:e8:4c:58:89:a8:58:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:39:80:BA:8B:5A:01:5B:54:E9:A1:1B:76:11:E4:DF:9F:7A:24:26
X509v3 Authority Key Identifier:
keyid:CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d9:cf:28:97:8d:1b:96:a3:22:12:ad:2d:62:21:44:f2:8e:
36:6f:0a:91:f3:88:c9:10:d6:a0:63:77:55:95:fd:cf:52:13:
08:bf:ce:10:3e:2b:3d:88:af:d9:11:eb:38:52:44:64:5e:73:
e9:26:a4:0d:fc:52:50:f9:50:64:74:f7:18:3a:39:34:c3:7f:
4c:d8:54:3b:b6:37:c0:b9:87:c0:9a:8b:8f:57:4c:85:de:d2:
cd:8e:bc:c3:5d:f7:d3:e1:5d:1a:b6:f4:95:6f:04:70:4d:09:
36:29:51:97:04:70:67:e4:93:6e:02:73:4d:07:e8:39:83:e2:
a9:5a:c4:d6:a8:24:76:7b:2f:f9:f7:df:7f:09:4f:5b:b2:e5:
d7:d6:10:89:97:ef:13:27:ff:57:de:68:4d:22:08:9f:c9:ac:
bb:97:50:63:f9:6d:5f:f5:da:e5:0e:c1:4f:ea:6f:83:e6:1b:
aa:77:2e:e3:5c:e9:77:e3:ed:0e:46:bb:3c:3e:bf:95:ac:b2:
0e:ba:e1:25:0b:e4:5f:d8:ef:ec:a1:d9:90:c9:1e:f8:f4:a6:
71:bf:db:5c:af:64:6c:fd:59:b8:90:aa:4f:93:39:b5:be:67:
1f:57:93:f5:6f:ba:e6:f4:45:88:ef:93:b4:83:5e:7d:0f:b8:
a3:ec:6c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:52:55 2026 by rpki-client