Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: zanMBQqMCRgrsZEmS+edob/PO9qGg/EGdHel2ZTYcEM=
Subject key identifier: 2F:80:D7:62:C1:9F:05:4A:B4:4C:73:98:CD:82:70:DB:90:8F:D9:92
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 01A0EF66A81FC6FC084942CF2A15700B24C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 02CF
Signing time: Tue 29 Sep 2026 23:01:17 +0000
Manifest this update: Tue 29 Sep 2026 23:01:17 +0000
Manifest next update: Wed 30 Sep 2026 23:01:17 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: 2IjWQxIXsb69S0NKwvkErsrxjUkBR6C5+hzRpO/dHic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:66:a8:1f:c6:fc:08:49:42:cf:2a:15:70:0b:24:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Sep 29 23:01:17 2026 GMT
Not After : Sep 30 23:01:17 2026 GMT
Subject: CN=2f80d762c19f054ab44c7398cd8270db908fd992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:f1:be:43:59:53:37:68:63:13:db:99:34:
f9:3e:e5:15:f5:05:43:02:62:c5:ed:36:0e:b7:d6:
7d:32:5e:82:ef:fd:cd:64:7c:38:30:ad:aa:53:7a:
41:4a:ef:52:85:fb:ed:d2:6e:2b:7a:cc:5c:6f:16:
a1:20:f0:1b:c4:6c:80:32:27:02:da:c9:76:ca:42:
90:bd:c3:d9:12:3a:98:02:ad:30:0e:7a:c4:43:2d:
9a:4c:68:47:b1:92:8b:f0:ea:18:55:05:1b:2e:e4:
e4:66:f8:91:83:d4:79:ac:5e:c8:67:9a:14:c2:a4:
d3:d6:0b:30:44:ac:76:36:8d:ed:02:57:be:34:8a:
c2:41:3a:60:fa:6b:0f:6c:10:ee:57:03:0f:7b:9d:
f1:d8:e0:34:c5:8b:1c:e6:e0:fd:8b:bf:19:86:47:
01:b5:46:06:4b:52:6e:0a:a5:b5:80:13:09:53:fd:
ed:c3:96:99:08:8a:58:c7:87:94:c1:f3:3a:e4:f6:
13:54:0b:d8:57:6e:66:98:3d:d2:df:5c:5e:ef:eb:
13:4c:c2:76:51:e3:a4:7d:da:ef:01:8b:98:6b:5f:
15:5a:c4:c7:5c:02:92:65:de:54:97:da:c4:37:bb:
95:76:79:cd:b2:59:b9:2e:74:67:79:34:56:0d:5a:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:80:D7:62:C1:9F:05:4A:B4:4C:73:98:CD:82:70:DB:90:8F:D9:92
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4c:d2:72:b2:47:a6:c3:f6:5d:8e:c1:60:e0:8b:4f:96:93:
aa:55:d6:02:d1:83:02:ca:83:e3:a3:cf:96:d9:ad:5e:2e:52:
80:f4:4c:9f:63:bc:87:30:b5:1e:33:97:fc:0e:17:d6:de:da:
3f:04:fb:7f:8d:22:0e:f2:79:f0:d0:1f:b0:08:30:eb:de:87:
d6:0c:e6:2d:a1:21:9a:0e:5f:08:16:6f:61:19:de:81:6a:ee:
d9:e8:c7:b6:bb:ea:23:5f:07:8c:b8:7a:5f:36:9f:35:5f:48:
dd:ec:58:91:ff:a6:f6:07:7e:cb:9f:88:96:0f:0d:4a:70:14:
22:cc:5e:f7:51:ec:54:8c:5a:fc:da:74:0b:79:67:b0:4e:87:
a0:9a:fb:a9:0a:a2:85:f1:35:74:fc:d7:e5:30:d4:c6:ce:9c:
7a:0f:df:fc:62:69:10:49:e0:13:15:ac:88:0f:02:aa:5f:19:
07:b5:5d:a4:07:fc:aa:1d:b8:87:04:0d:07:53:94:57:16:e0:
90:b5:ed:9e:b5:23:09:67:97:c4:fb:ca:69:de:37:0d:32:2b:
db:87:07:5d:76:1c:ca:57:75:8c:61:45:f8:5d:8e:ce:37:39:
56:5f:d8:94:ee:5d:7e:82:f0:82:fb:06:26:09:70:63:cf:bf:
07:80:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:14:30 2026 by rpki-client