Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
File: zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json)
Hash identifier: Gacv9vhoGoqfzHjxJxst1ugoN7ShrpZOVrsNtDYPEmg=
Subject key identifier: E4:E8:2A:31:2B:C0:E4:30:EB:C1:EE:B0:91:E2:CF:D1:FC:88:B0:AC
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Certificate issuer: /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial: 01A0E888F9D0497C8D1FB2BED46DA9641AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
Manifest number: 0946
Signing time: Mon 28 Sep 2026 15:01:25 +0000
Manifest this update: Mon 28 Sep 2026 15:01:25 +0000
Manifest next update: Tue 29 Sep 2026 15:01:25 +0000
Files and hashes: 1: C-10eoHVV_ERuNuHp1M0fCx__Ag.roa (hash: kJJFsA3C5xKnlbqZn0ozkgC1qO7Vwfq9ha16s0RBd0k=)
2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: 1b3DXQTUxa0Ckx/IeB5pdC+x77JJbR6e8pr/X2/JbFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:88:f9:d0:49:7c:8d:1f:b2:be:d4:6d:a9:64:1a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Validity
Not Before: Sep 28 15:01:25 2026 GMT
Not After : Sep 29 15:01:25 2026 GMT
Subject: CN=e4e82a312bc0e430ebc1eeb091e2cfd1fc88b0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:ac:70:a3:d1:6f:09:cc:06:f4:3b:5d:ce:
cd:79:1f:de:01:d9:db:a1:a0:b3:eb:eb:5b:0c:93:
d5:da:ec:22:24:78:e6:ba:43:73:a1:b3:28:dc:18:
de:e5:7a:b2:e3:f1:9f:04:1d:17:e6:90:45:67:af:
e4:e6:a1:64:f6:78:af:74:1a:ef:00:07:8f:b7:d6:
c3:1f:ae:ef:07:91:de:8e:39:ac:8e:28:c4:ee:fb:
4f:f0:0b:53:b5:b4:62:70:f7:b4:97:c2:e8:9b:4d:
4b:f7:63:a9:8d:68:43:f6:b3:6d:77:0e:a5:b3:d1:
b2:dd:05:b5:ee:20:62:e8:ea:d5:bc:da:81:1a:ae:
3e:fa:66:ce:b7:d7:34:cd:0b:67:06:13:f7:02:43:
7f:76:ea:2e:4e:9f:de:90:cf:dc:66:b1:95:4d:de:
96:f4:8f:42:1f:52:23:c1:2a:d1:0a:05:04:35:0f:
4b:32:47:c3:7d:18:f1:44:f2:fe:bf:70:e0:12:f1:
35:78:f3:ed:a8:58:20:db:48:b5:9b:be:aa:44:d1:
77:31:6e:b3:4b:23:55:29:ca:18:9a:5e:83:a7:c1:
a6:4b:3c:55:bd:cb:ee:3b:54:1d:fe:a1:6a:6c:82:
0b:ae:24:f9:19:58:1b:b3:da:63:34:79:5c:c8:2c:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E8:2A:31:2B:C0:E4:30:EB:C1:EE:B0:91:E2:CF:D1:FC:88:B0:AC
X509v3 Authority Key Identifier:
keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5d:18:d5:62:1a:b1:f2:7c:2f:6d:05:6f:b8:d6:10:25:a6:
35:ec:b4:75:dc:fd:98:22:98:d0:66:4f:73:2e:5d:7d:9e:f7:
cb:47:d5:05:4b:bc:2d:cf:03:2a:9e:22:be:00:28:b3:25:c5:
87:ba:7f:69:f2:54:35:b2:e8:9f:df:73:db:3d:60:f4:ff:34:
79:0e:a1:ba:a5:7b:ff:63:a8:b3:be:63:4e:53:65:e1:b1:39:
11:1a:58:bc:23:97:3c:ff:01:5e:58:1c:e2:fd:30:41:8d:80:
b9:20:77:e4:77:f5:f5:b6:d7:c8:28:41:4e:56:44:ae:c4:14:
0b:97:12:37:22:90:bf:62:f1:c0:0c:f5:c7:38:59:bc:41:f2:
11:52:d7:b0:89:c7:5e:c6:a8:6e:84:5e:bb:35:e5:8c:95:a7:
3c:f0:9e:8d:dd:e8:bf:4b:fa:53:8b:44:ec:35:eb:80:da:7d:
9e:e3:3f:fd:17:53:c7:80:09:79:79:d9:ec:66:ed:1c:71:4e:
f7:49:23:ee:50:d3:15:4e:42:ea:31:02:83:87:78:91:d6:48:
fb:ff:b1:c1:c5:7c:96:67:fc:ba:ec:bb:54:b0:3f:ea:87:79:
e0:a8:96:ed:9d:f7:b3:13:1b:19:a7:10:76:42:70:72:6f:c8:
0c:0b:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:02:50 2026 by rpki-client