Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
File: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft (raw, json)
Hash identifier: 4datWJjfHUUw0TukJF59AuPMBh8Uzu+PX0ur9r4JB04=
Subject key identifier: 71:63:28:F4:CC:82:2F:D1:80:8A:EF:FD:57:8D:16:E5:DC:95:13:AE
Authority key identifier: D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
Certificate issuer: /CN=d191557a20d3299613c702e9993e9d59c39b4708
Certificate serial: 01A0D0ED876A44E479C1C399795DC9DFD2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
Manifest number: D7
Signing time: Thu 24 Sep 2026 01:00:22 +0000
Manifest this update: Thu 24 Sep 2026 01:00:22 +0000
Manifest next update: Fri 25 Sep 2026 01:00:22 +0000
Files and hashes: 1: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl (hash: UT32xjaYaCpNpCyVl+smAGLyePvRyv1IzV8CF58Sths=)
2: sxcdm8hMPFs7hwfFtctneyGAbtY.roa (hash: qSfMKSLLYHXoos50NdW6B+8JG0v//N7ZW2DTOD6cmAA=)
3: zKunQbH1Pi1kuPKcXi66B2kK2GE.roa (hash: IW2iL6xlGt6vOJU5K2L4rfi0KiuOBllyiIH+ctseSa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:87:6a:44:e4:79:c1:c3:99:79:5d:c9:df:d2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d191557a20d3299613c702e9993e9d59c39b4708
Validity
Not Before: Sep 24 01:00:22 2026 GMT
Not After : Sep 25 01:00:22 2026 GMT
Subject: CN=716328f4cc822fd1808aeffd578d16e5dc9513ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:40:25:53:25:b3:2a:7f:a4:51:c8:50:5e:
f0:56:8a:0a:e9:e2:08:3d:1b:ce:09:1d:0d:d7:d7:
97:26:7e:6c:66:28:e4:1f:d5:93:b4:71:7f:d4:31:
0b:70:dd:d6:3d:47:67:71:e1:38:23:fe:14:67:4e:
41:15:fa:58:48:a5:44:94:4e:21:74:b2:77:b3:ef:
0e:bf:de:bb:80:43:1c:d6:38:71:7d:9b:bd:6d:08:
c4:7b:35:35:bb:24:da:7b:7d:f3:1c:40:bf:a7:63:
40:8a:bc:96:96:95:bb:60:d0:87:48:3f:23:44:aa:
6e:42:ef:1f:e2:84:25:e3:ad:c9:88:fc:17:f8:e2:
41:f7:83:08:c7:8c:23:fd:2a:c8:57:7a:5c:80:3c:
9e:50:e2:59:91:f4:5c:c7:90:d0:70:95:9a:07:a4:
76:d4:f1:f0:eb:84:92:5c:f4:34:0b:da:0c:8a:7a:
1f:9b:ad:a4:9d:d0:10:4e:d7:83:b8:c6:2f:a5:da:
6b:81:c2:cd:65:c1:79:1c:a5:5a:8c:ee:19:d8:fa:
32:3a:d5:35:4c:62:4c:5f:44:59:32:77:46:bb:db:
b5:8a:f3:c6:02:b7:42:6e:22:b5:84:e1:9f:69:e3:
22:32:84:12:d2:a7:07:3c:87:fa:0f:c6:a4:00:81:
5d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:63:28:F4:CC:82:2F:D1:80:8A:EF:FD:57:8D:16:E5:DC:95:13:AE
X509v3 Authority Key Identifier:
keyid:D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0a:1a:af:2a:8f:cf:71:5e:ae:27:76:a8:ab:fe:e4:79:df:
23:9d:65:ab:4a:d9:98:5e:db:db:a9:13:99:5c:99:71:da:51:
81:41:52:a1:78:56:fc:52:a4:df:8e:72:d7:3d:d2:48:62:b1:
77:d1:44:df:66:93:b5:7f:1d:9e:c6:6a:bd:fc:94:fe:f5:78:
71:01:1f:94:ca:b3:35:34:3a:d5:0a:2d:d0:1c:58:2a:38:e8:
a5:d1:09:d5:52:1c:27:6a:09:76:01:b6:37:1c:70:98:4c:1a:
e4:69:ad:e4:7c:24:99:69:8b:76:72:fb:8c:ac:98:4c:f0:90:
35:f4:98:f8:64:e1:62:fa:5a:85:48:4f:3e:a4:6a:cc:c6:0d:
d1:85:5b:5b:61:e5:ea:dd:1b:0b:6d:0e:e7:a3:b9:6f:a8:aa:
51:28:fc:c5:31:45:21:87:00:3b:55:9f:c6:d6:21:f9:9d:53:
89:13:cb:79:0d:01:3e:0f:a8:ca:63:6c:e6:ba:17:fb:b2:42:
a7:f6:56:3d:dc:bb:1b:39:1b:8b:96:e4:42:33:4b:1f:8b:68:
65:1e:ad:a2:15:ec:9f:78:ea:7c:51:42:28:4f:13:d0:d3:4c:
30:7d:27:a4:cd:6a:92:3d:85:17:43:71:b2:83:b6:2f:73:70:
38:23:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:33:21 2026 by rpki-client