Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: ExIylb8ZcKAmPNOV2GJ9cnW53FWd9l+mecg+dv9mVbI=
Subject key identifier: 48:72:6F:E8:60:60:01:09:57:F9:6B:01:7C:46:2C:98:2E:8C:87:C5
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 01A0DD29CB64FF193469669F208AE20E48D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 110F
Signing time: Sat 26 Sep 2026 10:01:38 +0000
Manifest this update: Sat 26 Sep 2026 10:01:38 +0000
Manifest next update: Sun 27 Sep 2026 10:01:38 +0000
Files and hashes: 1: BcIjFBUMP6CBeWgUBi0kiP8mMD4.roa (hash: AnrLYQrWg/R3TPt/tXnLy7bKSyCDh8qfOknLsoHKVr0=)
2: tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa (hash: LFx80Ot89ti4/nAcgN280XkSiewCdAO+iihbkS/s85Y=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: CXYNWyDqHOwUVEQjZXBLuGmzQxDMLkvHDt8wNMIoOjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:cb:64:ff:19:34:69:66:9f:20:8a:e2:0e:48:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Sep 26 10:01:38 2026 GMT
Not After : Sep 27 10:01:38 2026 GMT
Subject: CN=48726fe86060010957f96b017c462c982e8c87c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:22:24:3f:60:86:26:96:b5:ee:06:75:fd:
6b:bc:d2:8c:d9:89:03:c1:f3:bf:80:0f:c3:9e:ca:
bd:73:be:67:0d:69:fd:92:82:d2:80:2c:1c:5f:77:
fa:c7:94:54:2c:79:62:0c:83:6b:6e:a9:36:19:ea:
91:32:56:82:d4:bf:80:65:35:eb:b8:03:3f:0c:b8:
85:14:e1:0b:cc:15:c5:6c:0d:df:63:4c:a6:12:60:
22:84:16:93:4a:c4:66:66:1e:ad:e3:2e:a7:fc:db:
52:50:14:fa:4f:d4:62:2f:c0:08:aa:93:7a:fd:a3:
70:82:8c:7e:19:62:0a:f9:60:29:a3:cb:d2:19:41:
be:d8:87:89:fa:0f:c9:27:6e:dd:07:d5:33:62:4a:
48:76:5d:af:d4:49:09:87:65:c8:c3:df:50:4e:46:
a9:4e:c1:3e:7a:c2:ac:ec:4f:0f:3a:a4:30:b5:76:
4b:b0:61:03:05:b6:8e:f2:f3:a8:e2:61:86:c4:fe:
14:1d:6d:f5:03:8e:a7:dc:91:c2:0b:6f:fd:ba:6d:
14:3c:2f:51:82:8a:e5:e2:89:b8:9e:cf:51:92:d4:
5c:8a:ea:d5:62:63:ea:42:a7:15:06:23:af:2b:c8:
0a:47:fd:2b:4c:c8:f1:bf:6a:dd:f4:10:e0:10:8d:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:72:6F:E8:60:60:01:09:57:F9:6B:01:7C:46:2C:98:2E:8C:87:C5
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:10:ee:a3:1d:a0:14:90:dc:09:c9:31:4b:a0:fa:f0:f9:55:
9e:32:cb:ec:65:20:d4:a9:dd:b6:55:a0:0c:8d:3f:4a:92:70:
78:a4:d1:9a:37:6a:35:8d:68:02:11:aa:c4:d4:9f:d0:89:08:
12:fe:02:00:b4:88:4c:e6:1a:7e:36:1a:b7:37:42:b0:e8:12:
2e:08:9e:3f:83:7c:d6:48:21:88:c0:4a:ff:eb:cf:dd:33:fa:
72:f1:f7:2b:77:40:12:75:ae:45:47:83:7e:8b:3d:7c:46:1e:
94:f0:ca:22:20:0a:d1:4f:d8:22:45:14:93:f0:de:41:fb:b7:
e8:08:bf:5e:40:29:57:78:25:e3:84:76:0e:e6:04:c4:0d:bb:
9a:4f:8e:a6:c5:01:98:2a:7d:5d:23:d7:ec:48:c5:0d:6e:ba:
d8:1d:66:c8:5c:80:0e:c5:c0:8c:88:03:95:8f:8d:6e:19:6d:
b7:4e:f8:0b:86:0c:2a:1a:51:8c:69:f7:18:32:84:76:0a:46:
6b:ae:35:e6:c4:02:9d:cd:c0:43:51:da:96:26:34:f7:49:35:
2d:bc:1d:4e:02:2a:9e:bf:da:74:bd:a8:fa:dc:a9:61:b2:de:
c4:0c:c0:94:f3:60:83:29:f0:36:6f:a0:d4:22:60:68:42:4b:
69:ef:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:05:39 2026 by rpki-client