Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File: ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier: jUm5S/ytqEtBM+hDK3T0kjZEIBER77//AG9YbdxmhR4=
Subject key identifier: A3:37:93:57:C4:47:2D:DC:EB:2D:98:D1:03:E9:5A:61:2C:49:12:4C
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer: /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial: 01A0ECD3A9E2623B9819C52DB6C5B8D55951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number: 1205
Signing time: Tue 29 Sep 2026 11:01:29 +0000
Manifest this update: Tue 29 Sep 2026 11:01:29 +0000
Manifest next update: Wed 30 Sep 2026 11:01:29 +0000
Files and hashes: 1: GwZ9dNA86AIDNnsAq70FiAkZYj8.roa (hash: qnSiAyQRIBiRzYavimYlFJSyS25EakQKaTIGVx1R3tU=)
2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: gmvJluJo8o60vkuAaiMi9lrKFA61b76LlOjnK7g/RF0=)
3: irQyC0ot9r4PxzPSLvST2QH-X0Q.roa (hash: kwnqay2aLOiYKa/WS1eZrTNeCkIkn0WSXDieMB7/M7Y=)
4: yw5w5uCdPdnhgVsaZXUZ6mCgC8k.roa (hash: /944unZ7CSMOwiuR6yhIgpH4mt1fcLA58yVZkErRY/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:a9:e2:62:3b:98:19:c5:2d:b6:c5:b8:d5:59:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Validity
Not Before: Sep 29 11:01:29 2026 GMT
Not After : Sep 30 11:01:29 2026 GMT
Subject: CN=a3379357c4472ddceb2d98d103e95a612c49124c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:6a:95:df:5d:0d:ff:60:57:31:51:90:68:
eb:ac:e8:0a:06:ef:91:6d:43:ef:23:7d:57:e1:af:
4e:74:9d:77:83:bb:a1:d2:c2:d8:64:a2:5c:70:4b:
77:e7:ea:82:63:70:9f:ea:07:4c:c3:80:39:79:86:
d4:5e:44:1e:d9:bd:a9:97:26:67:2e:47:42:8e:03:
80:4f:c9:9b:0d:2a:a2:37:00:b4:95:e9:98:0c:30:
5c:4f:be:bc:29:b2:42:82:3d:82:51:8b:ed:4f:cf:
48:f4:5b:98:d9:fb:6d:91:51:e1:06:e4:8a:a8:88:
3d:44:1b:e9:54:11:61:66:a5:e6:e3:87:2a:ab:87:
77:29:6a:4b:89:94:7f:07:4c:7e:9e:fe:76:ad:0d:
ea:12:3a:7b:84:ab:24:bb:bc:03:e0:8f:59:93:d6:
6c:c7:6a:27:03:77:b2:d4:39:0b:0e:14:50:57:c6:
f5:b4:d1:73:89:cd:fd:57:2e:1e:5a:c5:06:cc:7e:
ec:f4:61:f2:b9:6f:45:34:04:82:f3:a8:9a:43:5d:
1f:2f:7d:87:82:7c:15:93:9f:bf:42:46:ed:10:c9:
21:6d:d6:87:2e:11:34:61:e0:cf:5b:ef:13:36:73:
e8:35:70:86:d3:79:46:50:02:9d:35:ac:f8:3d:55:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:37:93:57:C4:47:2D:DC:EB:2D:98:D1:03:E9:5A:61:2C:49:12:4C
X509v3 Authority Key Identifier:
keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:38:13:1d:c3:63:f3:76:9a:6b:c4:3d:01:3a:c1:a0:41:5d:
9b:ae:cc:0d:91:b7:21:00:73:f7:72:af:72:99:4a:c4:b1:2d:
5b:b7:e9:c1:8f:7f:50:5f:64:34:f6:6f:b2:4a:6e:33:87:88:
84:13:c7:7b:39:c3:27:81:a3:a8:f8:4d:01:64:4d:17:79:51:
84:48:b9:c5:1e:c8:60:34:0a:c6:e8:e6:94:fe:a1:b5:8c:7f:
a9:25:97:ef:07:ee:e3:23:ba:66:95:ab:83:98:8d:b2:0f:cc:
6e:2e:22:5d:78:52:cf:63:75:ac:4a:46:76:a3:d2:fc:66:20:
ca:70:d8:ea:67:60:be:e8:50:48:17:4a:47:fa:57:5e:f1:bc:
f8:ed:f6:c7:b0:ae:70:52:c7:ab:49:77:45:4c:48:b5:ba:93:
30:bc:0c:7f:40:a8:e8:49:c1:37:f2:89:d2:c5:d0:8b:94:22:
83:bb:76:a9:cd:d8:ee:33:f0:e2:e0:fb:84:2e:a8:68:9a:6f:
af:fb:e1:7e:3e:a0:48:c0:f1:3e:a0:31:ec:30:5a:51:c2:47:
00:6e:3f:bb:65:67:67:73:a3:27:7d:aa:f2:14:91:86:6f:17:
06:d6:89:2c:41:ff:e9:31:09:8a:70:29:87:c7:ee:37:bb:93:
8f:9d:0b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:36:37 2026 by rpki-client