Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: wtzuQgQirPPjRrquoxzYKtVsoVBZxDCYWufctqYrUDo=
Subject key identifier: DA:DB:B6:BB:B4:66:E8:E7:71:5C:C1:0E:4F:35:2F:4F:6D:F2:02:F4
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 01A0BF555C7593FFD470093083DF0A5ADDCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 170A
Signing time: Sun 20 Sep 2026 15:00:37 +0000
Manifest this update: Sun 20 Sep 2026 15:00:37 +0000
Manifest next update: Mon 21 Sep 2026 15:00:37 +0000
Files and hashes: 1: CmEbUhenhDmMKvHKSkFpe9LG8X0.roa (hash: Jsb+hfYBWXp4dm2lj3dTAoFqYAK6O+6kl4dBC77ANZE=)
2: GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa (hash: OD5qNfz5l9josRO/cRdoZZIkXHpha2NNc9udJTgh6/s=)
3: SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa (hash: MYiap9ADnfYQb/YwxbWyM4PVhhzPTbhg8edINlxn310=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: ogunBTkTrQczbGCcCLOM81wMDPVKlOe2ba2jjZV8/jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:5c:75:93:ff:d4:70:09:30:83:df:0a:5a:dd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Sep 20 15:00:37 2026 GMT
Not After : Sep 21 15:00:37 2026 GMT
Subject: CN=dadbb6bbb466e8e7715cc10e4f352f4f6df202f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:e5:06:48:04:58:12:ac:84:30:c8:23:d3:
de:b4:ff:ef:1a:7e:f4:94:dc:61:9b:b0:84:a1:82:
ea:04:3b:ab:2d:44:19:0a:96:ca:f2:1a:c2:be:17:
a6:1e:39:da:3a:1c:23:a6:57:bb:96:21:91:05:3e:
13:66:9e:17:c5:2b:78:fc:bd:87:25:a6:0e:dc:84:
e6:1e:3c:ea:78:02:eb:51:d8:3c:84:2e:60:b0:96:
91:8d:11:a1:31:af:8c:ab:75:ae:27:57:b3:3d:37:
ad:4d:48:59:0e:b2:25:bf:cb:eb:78:6e:a9:cd:43:
48:3a:a9:1a:32:88:7a:3f:96:99:f8:43:62:79:36:
eb:b8:17:1e:9b:22:c9:a1:1c:6e:55:45:50:b1:67:
82:ab:67:a4:b6:64:7f:67:5b:7d:19:e6:40:9f:d1:
14:b0:59:c6:e9:68:b8:75:19:8b:d6:f9:94:28:2f:
77:2e:9d:08:f7:56:1c:4b:86:9d:87:38:e5:e5:09:
a3:29:32:e8:43:1b:5d:1d:14:a4:a6:31:e4:01:ad:
15:d8:f3:c7:8c:66:e6:0a:d8:ee:b5:21:b3:a4:78:
8b:fd:a4:e7:f2:4c:70:fd:41:f1:b9:a2:cf:a5:28:
5c:fb:76:14:06:d4:15:c7:c5:1c:bd:32:44:7a:78:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:B6:BB:B4:66:E8:E7:71:5C:C1:0E:4F:35:2F:4F:6D:F2:02:F4
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0a:d7:68:a8:48:50:52:56:df:c6:d4:92:5f:2b:26:82:c2:
a2:49:0c:4c:92:f4:dd:b5:43:30:c6:9b:10:3d:f7:14:e9:73:
4f:bd:d6:27:4b:48:2e:7a:c7:a2:ac:31:54:b8:1e:e0:72:50:
ef:ed:70:c8:18:09:00:b4:4c:f3:84:6a:b0:c4:c1:28:e3:e3:
48:c2:b5:03:6c:8f:22:ea:03:18:dc:fe:24:b7:2e:2e:84:d8:
9d:e4:e8:03:76:1e:a2:f6:3e:ea:39:d8:94:8c:79:f7:a8:f9:
7c:89:1f:18:01:07:30:bb:ff:c9:98:0e:7c:7f:8c:18:c2:18:
2d:81:37:ee:f3:5e:41:db:df:06:5b:80:ee:84:cc:a4:90:cd:
81:ad:a6:fb:c5:c2:6d:36:6e:3e:ca:0c:ef:a0:ef:c9:f4:47:
4b:4a:12:f2:d8:4a:ef:35:1b:42:47:02:ce:e5:68:61:71:5f:
29:c6:0a:1d:45:0e:02:c3:e1:4b:ca:48:44:7a:0a:4c:5d:58:
16:27:ce:3e:27:5c:f5:64:d2:19:cf:42:06:a7:f2:c0:d8:99:
be:d8:8a:4f:20:f9:e1:5d:e0:08:7e:98:06:7f:91:93:00:1e:
ff:41:c6:8b:0f:07:74:93:69:4c:94:12:15:ea:5d:97:4b:17:
cb:0e:44:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:32:51 2026 by rpki-client