Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: Ggu30WwfWuWWP8y+19R82mlfVCr3fJdRv2HzRqIBY7Q=
Subject key identifier: BA:E3:A6:33:F7:CE:F1:FE:71:07:65:3E:D1:FE:54:0C:63:F2:18:C3
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 01A0BE42D51343D380DE04B3288766898C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 1A76
Signing time: Sun 20 Sep 2026 10:00:45 +0000
Manifest this update: Sun 20 Sep 2026 10:00:45 +0000
Manifest next update: Mon 21 Sep 2026 10:00:45 +0000
Files and hashes: 1: F_Dk1EXyZalcSUrQVrmmhufc-3c.roa (hash: Bud8p3xLXlXOrM2nbGi5ghblIRWjV7KfIKq7F8d9FoQ=)
2: P8VBM2Vt78MH0hTsTsDYoN1DCwo.roa (hash: BNrt6BqKbc/fkjdmpvHEP4BZdwanUa88eWbx1Ysrn8g=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: VS6eMhbcozBHkOsXfURh4ad9dyePl1s3m0asQe/luwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:42:d5:13:43:d3:80:de:04:b3:28:87:66:89:8c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Sep 20 10:00:45 2026 GMT
Not After : Sep 21 10:00:45 2026 GMT
Subject: CN=bae3a633f7cef1fe7107653ed1fe540c63f218c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:00:df:c9:47:68:5d:42:d0:24:2a:d1:00:
32:a5:e4:c4:b4:18:e9:21:15:69:f3:9f:2f:41:84:
84:f6:9d:d7:2f:29:ff:3b:c5:30:08:d0:4d:ba:6d:
2a:ca:ce:00:60:76:da:27:d1:85:e4:26:1f:58:e9:
4c:48:80:de:1f:91:42:2d:8f:d5:5d:ef:18:a7:1f:
5f:24:8a:7a:16:26:93:06:81:4f:05:bd:9a:49:cc:
20:c9:ee:04:a4:ed:a0:32:27:d4:db:e0:96:67:d4:
ff:59:a3:20:f8:f6:a1:fa:cd:d3:96:63:af:4f:6b:
1d:05:57:75:e1:72:16:f1:b8:86:48:bf:72:b3:d8:
6e:c3:5b:97:e4:39:8d:cd:f6:86:7a:19:a8:d9:aa:
03:14:55:e7:1b:0b:83:a9:4a:ee:7d:11:6b:fc:a6:
86:78:b3:31:73:0e:44:73:7a:d5:b5:08:0f:3c:5c:
a9:55:3d:70:bf:1d:3a:4d:aa:15:17:af:4c:44:80:
1c:8f:4c:e1:58:f8:62:7d:4b:a4:80:88:a7:f8:ae:
5b:54:e8:47:2c:6d:19:65:36:dc:6d:bc:d8:04:f9:
25:58:c1:b8:6d:47:94:1b:0b:0c:d2:30:54:ff:54:
2e:ea:57:ea:3e:73:0c:eb:f4:41:e4:ba:c9:02:09:
b5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E3:A6:33:F7:CE:F1:FE:71:07:65:3E:D1:FE:54:0C:63:F2:18:C3
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3d:d4:3c:36:e5:01:86:b3:30:14:b5:ae:52:af:0e:84:af:
78:5f:11:2f:87:1c:96:63:88:a7:f1:80:42:c6:03:77:c4:39:
3a:df:7e:f4:a6:f5:fa:e8:6f:d2:34:62:5b:f4:6c:60:42:61:
b8:88:31:f6:01:ff:55:dc:b9:66:d1:db:6f:98:f9:c1:85:b3:
00:eb:aa:64:f0:f4:c6:95:85:e3:00:01:56:2c:1f:05:23:54:
e0:0e:11:c9:fb:78:31:f6:f4:0e:b4:b4:fe:71:a6:0b:3d:56:
14:1f:a9:cd:72:e5:15:19:39:6c:0f:18:b8:31:ee:60:a9:89:
7b:36:14:2c:99:f1:60:8f:96:1b:b6:e3:bd:8c:25:40:65:84:
c1:f5:0f:15:0d:66:71:0b:e4:cb:17:96:9d:b0:a2:60:c5:a2:
37:63:0f:8f:0c:a3:0e:77:9a:d1:41:d1:8d:78:fc:78:16:aa:
b6:82:88:04:d6:bf:64:98:3c:42:ab:44:85:1d:af:5b:0c:c3:
59:9d:cd:50:1c:7a:f7:51:0e:aa:9e:c9:76:51:c0:8d:60:4b:
fb:28:45:07:dd:b7:d9:61:e2:75:f6:a7:15:90:9f:b1:3a:5e:
75:1f:2a:56:31:0c:0d:58:9d:9d:bf:8d:91:9d:01:32:61:07:
a5:6e:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:24:06 2026 by rpki-client