Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.mft
File: zX8aXqfR0w1axu1LjqyJsezI-dY.mft (raw, json)
Hash identifier: GT/I898Dh1a2RsiptKdoDhgxVj40m3oSExAXtYMeE98=
Subject key identifier: 4D:D8:C7:E8:78:B9:77:54:1F:84:C9:79:39:F4:32:3D:5E:AB:EB:05
Authority key identifier: CD:7F:1A:5E:A7:D1:D3:0D:5A:C6:ED:4B:8E:AC:89:B1:EC:C8:F9:D6
Certificate issuer: /CN=cd7f1a5ea7d1d30d5ac6ed4b8eac89b1ecc8f9d6
Certificate serial: 01A0CAB530BBCC334CF55CEA76A466F02695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX8aXqfR0w1axu1LjqyJsezI-dY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.mft
Manifest number: 11
Signing time: Tue 22 Sep 2026 20:01:07 +0000
Manifest this update: Tue 22 Sep 2026 20:01:07 +0000
Manifest next update: Wed 23 Sep 2026 20:01:07 +0000
Files and hashes: 1: LAlwfScrj210Zj_YjjVP1IMy-Ts.asa (hash: TDEsF7QpfzwbNHSJA9Ww5ZKSL4vcaKQcJiaTOoq+ljk=)
2: zX8aXqfR0w1axu1LjqyJsezI-dY.crl (hash: k8BRO7rfwpjGEgpLQ+4YmKvQog9/xmXmo0s0Puhbloo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX8aXqfR0w1axu1LjqyJsezI-dY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:30:bb:cc:33:4c:f5:5c:ea:76:a4:66:f0:26:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f1a5ea7d1d30d5ac6ed4b8eac89b1ecc8f9d6
Validity
Not Before: Sep 22 20:01:07 2026 GMT
Not After : Sep 23 20:01:07 2026 GMT
Subject: CN=4dd8c7e878b977541f84c97939f4323d5eabeb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:83:01:c3:3f:7d:5b:9d:2b:5b:dd:bc:93:
53:c6:5f:31:7f:26:ad:c4:a2:7f:65:90:09:5f:67:
91:37:f3:51:e8:43:6a:3c:5e:d7:c1:6c:da:8e:c3:
e6:b0:dd:4f:3e:3f:c0:77:c9:e0:2e:dc:9c:b0:af:
e6:a5:ce:dd:40:32:c6:25:d8:1d:0a:29:bd:37:bc:
5b:f8:c4:28:18:01:32:01:fa:fd:47:fe:4b:9e:47:
18:4a:2e:1a:0c:79:6f:97:cf:8a:26:21:6a:d7:5e:
3a:4e:8f:a6:e7:51:bd:2a:0e:96:a9:04:5d:9f:0c:
0e:aa:ee:45:37:8b:08:ff:02:61:56:80:aa:26:be:
0e:25:09:de:29:38:94:da:2f:2d:32:ae:5f:34:dd:
cb:a9:61:7d:a9:92:b3:02:40:15:a6:ea:13:80:20:
89:53:ef:5d:f1:20:95:d1:a3:0c:d5:85:98:b7:d3:
ad:e2:40:90:67:00:f8:16:60:cf:69:14:af:2b:93:
a2:2f:ff:05:7f:13:3a:30:ed:d0:53:47:1a:5d:6b:
da:3d:c2:9d:e6:8b:99:d3:cb:cc:1a:bc:b8:da:a8:
23:90:a1:e0:1f:2f:5f:65:af:27:b9:a5:2d:0e:61:
48:29:69:b1:b1:a3:e3:fd:c6:9d:f2:5c:6f:b7:ee:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D8:C7:E8:78:B9:77:54:1F:84:C9:79:39:F4:32:3D:5E:AB:EB:05
X509v3 Authority Key Identifier:
keyid:CD:7F:1A:5E:A7:D1:D3:0D:5A:C6:ED:4B:8E:AC:89:B1:EC:C8:F9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX8aXqfR0w1axu1LjqyJsezI-dY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:25:ea:c0:7a:1d:aa:93:4b:7b:a5:05:ce:c3:dc:cf:48:8a:
1a:72:21:4b:0f:d1:98:2a:a3:43:2d:d5:53:8c:50:76:b0:52:
6c:15:40:3a:5b:af:9c:72:d2:84:89:cd:98:bb:f3:5f:ff:1c:
72:10:42:bd:c0:5e:1f:8f:74:ea:22:38:35:be:49:80:b2:5e:
a2:07:b9:c0:1c:f6:84:f3:fa:90:e6:94:4b:a2:96:dc:18:e0:
7b:2f:a7:08:e4:5e:3b:36:b8:6a:0b:78:73:1f:3f:c2:f2:a1:
ba:c4:03:ba:7d:8a:0c:f5:78:fb:85:3c:83:c8:71:e7:33:95:
71:cc:0e:a0:3f:b2:ca:2a:a9:59:86:e2:23:73:a9:11:68:1a:
26:37:2e:63:d1:60:74:78:64:75:66:d7:9b:2f:b1:c4:81:23:
42:1e:b7:8d:e8:52:30:88:a1:3d:06:0b:b2:8c:0d:fc:01:24:
90:2b:ff:b6:7f:c4:7b:8c:d2:56:cf:93:76:55:20:15:29:e3:
34:15:9c:1b:b3:5f:1e:ee:08:a3:9f:19:ff:df:e0:2d:6a:8f:
71:7d:cd:d5:8c:f4:b0:1f:43:59:30:91:f3:a2:da:fe:25:35:
ce:22:95:0b:34:1e:2a:9e:7e:68:ff:a6:03:7c:91:cb:05:b8:
2e:94:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:07:07 2026 by rpki-client