Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
File: 8zk0PMbVHduONjgpmhu0lfRYCSE.mft (raw, json)
Hash identifier: Zs9iTLCA0T47mpH+/yItF7WpqVB3iGWcyknZNwQHXX0=
Subject key identifier: 6B:74:B9:77:96:0F:BD:44:64:E4:46:5F:1A:20:46:D9:15:72:4A:47
Authority key identifier: F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
Certificate issuer: /CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Certificate serial: 01A0C3324DD0055B240C8FDB33A6128B7439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 09:00:48 +0000
Manifest this update: Mon 21 Sep 2026 09:00:48 +0000
Manifest next update: Tue 22 Sep 2026 09:00:48 +0000
Files and hashes: 1: 3ZbP8D4oyhCe4u5mlugxkhUP_G4.roa (hash: mYQ4ggMgVLrFbz01ZBuOhgHTwYfwTmz0/Kv0k+37TBo=)
2: 8zk0PMbVHduONjgpmhu0lfRYCSE.crl (hash: UaqQJGGt3Krs4xhMHwCGZCjeIOuwaIwihOj+3DrcGak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:4d:d0:05:5b:24:0c:8f:db:33:a6:12:8b:74:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Validity
Not Before: Sep 21 09:00:48 2026 GMT
Not After : Sep 22 09:00:48 2026 GMT
Subject: CN=6b74b977960fbd4464e4465f1a2046d915724a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:4f:cb:cb:fe:8b:22:a4:e7:fa:86:4c:e4:
4f:fc:13:da:dd:f8:1b:d8:66:fc:8e:50:e6:a0:8a:
54:c3:49:3a:fb:79:3e:bd:12:6a:2b:7a:43:71:3b:
45:c7:74:ac:31:98:5b:a9:32:3c:f0:8f:bd:5b:0a:
a7:b9:e4:c2:81:d5:0a:2b:3c:5b:55:66:c8:57:46:
5e:62:8e:73:c8:a5:6e:3a:2b:e5:2c:89:4b:5b:d1:
db:36:8b:05:68:b3:ff:0f:ad:f7:b0:3e:0e:2c:87:
67:0d:c8:1d:79:04:2a:55:5d:77:63:98:ac:d7:74:
7f:11:74:6d:db:bc:a9:85:44:f7:0a:e2:05:de:2a:
5f:f7:6c:41:ae:61:4f:1a:8f:85:7f:35:81:b0:f4:
33:72:de:47:13:ad:b6:bf:1d:f9:b9:4c:f7:23:f6:
9b:5b:52:5e:69:47:b6:e9:bf:11:40:af:4b:69:b5:
5b:8f:30:9c:9b:72:e1:a7:66:54:ff:fc:3c:3a:c8:
25:14:2b:f5:51:9a:2d:9f:55:e6:ce:82:f8:8a:3d:
60:69:e7:36:8b:5f:41:20:e2:c9:75:ed:2f:e8:84:
4d:fe:f7:dd:c2:64:01:48:42:e5:e0:30:a0:11:d6:
c8:bd:95:a2:a8:bd:00:45:8d:ed:60:8a:4b:5a:b8:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:74:B9:77:96:0F:BD:44:64:E4:46:5F:1A:20:46:D9:15:72:4A:47
X509v3 Authority Key Identifier:
keyid:F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e2:7a:b9:c6:db:2b:1e:c8:dd:1d:ae:d2:5d:55:f7:36:84:
16:5d:70:ab:47:12:9b:eb:63:0e:aa:9d:02:42:61:1f:5e:a9:
79:c0:73:ff:f2:f1:81:8f:d7:ea:be:f5:ba:09:a6:f4:5b:cd:
cc:52:df:c2:e8:e0:c0:0a:c8:03:fe:46:38:e7:89:b2:3c:c6:
20:e9:f8:ae:03:e3:23:63:fb:b6:dc:8c:e3:be:e7:99:ee:20:
c4:72:c0:e9:99:2d:3a:d9:da:bb:87:4e:aa:b9:24:50:6f:10:
a5:86:1c:90:ef:b6:c9:60:b1:86:7b:22:c6:48:bc:c8:0e:75:
29:44:de:cf:43:49:d4:96:4a:c3:a6:7c:67:27:c6:09:73:ea:
33:03:aa:70:01:66:d4:e8:e1:d3:c0:21:9d:f3:69:11:e6:dc:
07:6c:ea:bd:c7:b8:2e:59:71:d4:7b:b8:69:cd:9a:e6:56:4a:
98:db:b2:97:87:15:26:fc:45:3d:65:c3:22:a1:62:19:55:59:
6e:0b:45:0e:f2:98:e0:b4:42:e4:bf:07:19:fb:f4:be:bb:a3:
84:a9:e3:10:a4:ac:1b:f8:6e:80:ae:f5:84:a4:59:ee:83:11:
8b:2c:c6:f2:ef:56:48:82:6e:50:f9:81:02:c7:8c:4e:04:1a:
30:75:7a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:45:01 2026 by rpki-client