Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier: qE7iLykjo9QC2tu+GgtlatFzbz7IyVLj/rKfgFRtpVU=
Subject key identifier: D1:C1:F5:4C:68:C3:0C:CD:F0:0F:B1:68:65:D0:A5:1E:DF:82:A0:60
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 01A0BD307FCCF8830F717285BA1D5827F1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number: 1764
Signing time: Sun 20 Sep 2026 05:01:07 +0000
Manifest this update: Sun 20 Sep 2026 05:01:07 +0000
Manifest next update: Mon 21 Sep 2026 05:01:07 +0000
Files and hashes: 1: beStaP3U9BouVtR6HKL7Bht809g.roa (hash: 9C0Yz+gtWBKD86eXJ/yNK0jQEWAJqpkTW4DLxbpVN08=)
2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: mFwPI+HyEimkN8WluVTf8cCCFStw7bQSe3VCdLicHbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:30:7f:cc:f8:83:0f:71:72:85:ba:1d:58:27:f1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Sep 20 05:01:07 2026 GMT
Not After : Sep 21 05:01:07 2026 GMT
Subject: CN=d1c1f54c68c30ccdf00fb16865d0a51edf82a060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:d5:d1:09:70:3f:6d:27:99:77:16:23:e8:
aa:32:d1:40:82:39:17:a6:f1:85:3b:2e:4f:fd:ea:
f8:29:0d:50:d5:36:ce:ec:ec:cf:18:df:46:88:cb:
db:26:c0:43:ee:79:2f:36:b1:55:53:f3:06:69:16:
af:a2:19:93:42:f0:08:8c:31:e7:1d:88:b6:78:ee:
14:4c:1f:2a:6e:7f:ed:aa:65:8f:b2:3b:4c:b8:b1:
7a:16:8b:69:7a:87:e9:1b:c7:f8:9e:8e:b1:88:78:
de:b7:11:e8:3e:ae:84:38:02:c7:83:67:a6:6d:7c:
1f:59:16:b7:ed:70:b0:5f:5f:fe:74:8d:6c:d3:07:
4c:e5:15:48:2d:b2:f2:6b:97:a7:a9:95:01:e9:8e:
75:df:ef:8c:8e:50:19:30:d5:5f:28:ab:a9:aa:75:
eb:72:23:0c:50:51:e7:11:42:e0:b3:10:9e:8d:c9:
90:a2:32:af:05:52:25:44:33:cc:bd:67:12:b6:fe:
cb:65:d5:12:bf:f8:c7:66:70:b9:c5:9e:84:e5:03:
d3:73:9b:7e:5d:e1:82:02:77:77:ff:a6:25:26:b5:
c9:8c:09:68:80:0a:ea:77:88:90:b4:a1:92:50:83:
80:67:4c:fb:77:0d:73:9d:59:7a:9d:4a:ed:74:66:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C1:F5:4C:68:C3:0C:CD:F0:0F:B1:68:65:D0:A5:1E:DF:82:A0:60
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a6:a0:0f:57:dc:8b:88:84:c9:e6:e5:e9:75:4d:c0:02:fc:
01:db:9d:78:8e:76:5f:c0:18:fa:a2:c8:7d:4b:26:ca:61:ed:
35:f5:d7:3d:25:67:5d:6c:2d:6b:f5:fa:59:c8:ef:ee:e5:fe:
21:93:d5:c1:2a:2e:49:3b:f5:05:95:01:7b:de:1a:06:f0:41:
ba:a4:70:84:89:25:ff:41:26:64:1a:24:2c:ed:22:1d:2b:22:
fb:dd:8b:99:cf:38:e8:6b:73:4d:4a:32:55:d6:14:b3:48:25:
c7:8f:a9:da:d4:7f:a5:3d:69:93:4b:4a:22:7c:73:e0:9a:54:
b9:4c:e8:17:c4:0d:44:d9:9b:d3:ab:81:02:b5:6f:95:76:c0:
e3:5f:c2:16:25:6c:01:67:bd:f5:a2:a5:c1:b3:91:60:db:6e:
2e:86:1d:46:df:03:63:cc:37:c0:4c:29:b4:9c:11:db:3b:08:
9e:d8:0d:7c:cc:6a:8d:8f:eb:3e:56:4f:b0:57:57:55:3b:7e:
14:80:c5:e5:05:98:ac:75:d9:36:fa:53:2d:40:ae:17:68:69:
48:7d:32:6a:81:ee:6c:8a:bb:fa:f0:b6:75:05:0b:18:09:95:
b9:a6:12:50:98:da:e7:f8:46:4b:dc:a2:9b:d1:3e:86:5a:d1:
00:37:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:49:02 2026 by rpki-client