Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: PseChdJNaHxWGk0ogr6mBkcUhVVSelTpRXXtzxx/PE4=
Subject key identifier: EE:B2:EC:98:99:24:D7:63:BB:E3:6B:21:D8:CB:36:3E:0E:E2:13:93
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 01A0C067A4B508F10DB2B82B94FA58F5DA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0D58
Signing time: Sun 20 Sep 2026 20:00:12 +0000
Manifest this update: Sun 20 Sep 2026 20:00:12 +0000
Manifest next update: Mon 21 Sep 2026 20:00:12 +0000
Files and hashes: 1: 4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa (hash: 1DrymcOv7aoritq27aJXxxGAaxiSifi94Z89A2CC9Ow=)
2: KaN7RLL5KVyq30qD32Rnb_nls78.roa (hash: bzsFsGck1pscarjTWs0d9Ebn5ZXqcM8xKvGnRO+nPFk=)
3: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: t5BJHDJWXleHdmOFY7ugxXfD9Dt3AqPrlPVyfWbawpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:67:a4:b5:08:f1:0d:b2:b8:2b:94:fa:58:f5:da:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Sep 20 20:00:12 2026 GMT
Not After : Sep 21 20:00:12 2026 GMT
Subject: CN=eeb2ec989924d763bbe36b21d8cb363e0ee21393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:f6:2f:c9:7b:86:ea:1c:32:7c:41:f0:f4:
f7:6e:0f:c5:c0:ab:d0:2c:2d:eb:69:c4:cf:71:04:
18:0e:41:4b:f6:78:f1:37:a6:03:ae:36:13:08:89:
58:51:af:b9:b9:c8:c3:14:cc:5a:7f:d1:92:c6:ff:
69:8c:e6:51:f2:84:83:94:2c:2b:9f:93:03:55:27:
9b:88:48:dc:7e:9a:0a:d2:47:ea:d0:21:e0:43:30:
6f:f4:10:a3:9d:b2:80:db:c0:ab:86:a3:7a:fa:2d:
6a:99:34:48:64:75:ed:dc:57:c7:7f:a0:28:51:40:
25:e7:56:5c:f8:de:67:0b:cd:7c:71:00:f3:e4:4b:
ee:3b:0e:04:f5:7d:b4:5b:f6:4f:81:8d:05:ff:02:
c1:b4:b6:12:ea:02:1e:01:ce:24:37:79:c7:fa:c4:
c5:cf:e8:d8:c5:b4:60:2a:98:ae:35:b7:c4:70:a4:
d3:75:8d:e1:4c:0c:07:d4:cc:2d:04:3e:f8:ec:85:
06:17:d8:6a:63:6d:b9:8c:d6:68:ed:df:ed:98:98:
ed:a9:6d:66:14:81:68:90:77:5c:5d:e2:37:fc:7c:
1c:96:be:b4:ac:54:23:67:e2:4d:c2:53:61:64:fd:
fd:6b:ea:60:4d:78:fc:0a:72:c4:dd:72:b7:77:dd:
94:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B2:EC:98:99:24:D7:63:BB:E3:6B:21:D8:CB:36:3E:0E:E2:13:93
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ff:03:00:4b:e3:93:03:b0:21:e4:ff:02:6f:23:56:37:20:
de:d0:09:03:6c:1f:72:c2:22:71:5b:f7:e5:37:d6:2f:51:e4:
f7:0a:38:3b:75:08:42:f9:f4:12:c4:aa:20:84:64:40:29:4b:
01:14:f5:8f:77:8e:3e:42:30:c0:5d:1f:ca:48:e4:45:69:a5:
67:41:d0:d8:84:81:b7:41:c2:55:82:b6:17:ad:4e:ae:fd:d2:
7d:b1:1c:1e:12:08:53:89:bd:2d:ad:dc:6c:63:e4:5c:21:71:
88:f0:00:98:54:ce:58:07:1a:01:67:99:4c:fb:ab:7e:cd:76:
00:72:72:4b:ad:43:86:c9:42:b3:ae:e7:50:dc:35:3f:c9:91:
72:92:9e:9b:9a:a9:49:8c:29:2c:88:f4:7a:7f:18:b8:d9:b3:
9b:f6:38:e4:01:ed:2a:01:cc:93:b1:57:52:e4:64:c1:c9:56:
63:f1:05:e0:2c:62:89:b8:6d:5d:c3:04:ce:1a:d5:bb:d3:45:
05:75:f0:8b:fb:95:28:ed:27:45:dc:3b:f1:37:9f:8b:7c:28:
62:82:3a:15:1f:bd:9e:93:b6:40:e9:a2:16:d4:8d:22:ef:8b:
65:47:21:b3:92:b4:21:f5:6a:82:c8:68:97:cd:15:2a:c4:59:
a6:bf:bd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:13:15 2026 by rpki-client