Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
File: zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft (raw, json)
Hash identifier: OSeONvKDUkgsEB+2nt+0P20U+RnPPfbbYjIFKEfIKpA=
Subject key identifier: AD:F6:33:51:3C:87:DD:20:83:5A:EF:68:1A:3B:B6:EB:36:30:6E:C9
Authority key identifier: CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
Certificate issuer: /CN=cddce12ae50e80a4534d80f786a824497b26fadb
Certificate serial: 01A104DBCFD30EF12A80A31E86D636E90C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
Manifest number: 0187
Signing time: Sun 04 Oct 2026 03:01:16 +0000
Manifest this update: Sun 04 Oct 2026 03:01:16 +0000
Manifest next update: Mon 05 Oct 2026 03:01:16 +0000
Files and hashes: 1: pYYR9UI_sLtKcyNmvvaeAyGho10.roa (hash: Visrk6MwePbwviSVCYu3l4j6eSQ3jEUFOOu9154zYk0=)
2: zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl (hash: RmylmasoT57d9fmhCdiM2wEX6zqWSw3Z3Nz7y057loU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:db:cf:d3:0e:f1:2a:80:a3:1e:86:d6:36:e9:0c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddce12ae50e80a4534d80f786a824497b26fadb
Validity
Not Before: Oct 4 03:01:16 2026 GMT
Not After : Oct 5 03:01:16 2026 GMT
Subject: CN=adf633513c87dd20835aef681a3bb6eb36306ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:e7:f7:04:c6:ba:9e:d4:52:06:08:86:79:
9d:7c:01:be:e8:ad:67:18:1b:78:47:6a:40:5c:49:
25:44:c6:73:4a:ca:eb:d6:b7:45:01:60:85:53:54:
1c:2d:a7:90:ef:c2:82:2e:cb:93:e7:7c:15:6f:f8:
19:a5:17:db:0c:43:14:f2:ab:a4:3a:23:30:2f:b5:
a7:e7:c6:d9:61:ae:9d:95:de:b2:e1:d8:d4:5d:dd:
77:97:7d:4c:c5:6c:56:a0:f5:01:10:26:2f:2d:12:
c0:8a:88:48:54:9f:83:3c:c2:5d:ab:0d:49:60:8b:
f3:35:cd:18:19:c6:c2:04:23:cc:13:d3:86:ca:1c:
2c:46:a8:48:5b:82:e1:39:ca:5a:d4:32:75:69:b0:
44:1f:5b:90:38:ee:34:ee:62:ee:09:98:ee:d2:ee:
67:d6:08:15:85:f2:9f:2f:a5:17:76:19:ae:9b:c8:
57:ec:ae:47:02:1c:17:71:a5:dc:66:2d:e3:00:23:
37:3e:e8:1b:32:00:bf:41:c8:3d:8a:9f:73:29:1e:
a6:be:38:d8:94:68:19:07:0b:f5:df:03:4f:fa:80:
56:48:d3:00:16:26:93:ab:77:93:aa:3c:48:2d:79:
a6:91:ec:d2:42:f6:1a:3a:54:4d:a6:de:af:12:66:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F6:33:51:3C:87:DD:20:83:5A:EF:68:1A:3B:B6:EB:36:30:6E:C9
X509v3 Authority Key Identifier:
keyid:CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:81:f0:cb:2d:2d:e8:29:06:09:32:46:1d:a4:cd:1e:f0:7d:
cc:c2:28:81:5e:64:c0:fe:45:9d:60:70:12:66:a9:87:f9:90:
8b:3d:8c:b7:cf:ee:79:1d:1e:89:37:49:8b:28:af:6a:81:4b:
67:56:dd:24:66:bd:70:d5:24:a6:d1:d7:9f:21:e1:05:20:63:
3e:0e:2f:00:fd:da:da:56:c9:43:81:14:dd:14:e1:f4:a7:7d:
70:82:b9:81:88:ec:77:26:f2:20:7f:5b:69:e6:8d:69:25:51:
4c:00:e9:de:e3:15:78:be:40:57:0a:12:9a:76:2f:0e:0b:45:
f9:dc:0f:da:75:07:97:6e:04:1c:31:53:a4:0d:dc:a1:7a:d5:
ac:bb:c2:30:fc:2a:ed:59:10:f5:61:51:76:62:46:1e:b9:6c:
e1:d0:d7:04:0c:54:12:50:e0:0c:4d:1d:c9:2f:35:2d:3e:ea:
2b:8e:d7:08:fc:98:0f:fa:37:27:97:6c:6f:9c:fb:52:bf:33:
8f:38:1c:92:d9:7a:e2:b4:05:a7:34:7c:a7:20:bf:f4:37:f0:
3c:1f:d1:66:0a:f9:89:ce:40:54:b6:08:d4:cb:3c:65:51:0d:
b0:ea:ac:1e:5e:56:0a:00:5d:d0:3b:bf:a3:34:38:96:ab:21:
62:4f:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:46:10 2026 by rpki-client