Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: VQw57GAcXIbFXPieHdpDqWkq5l0MvNGZqYzHZgObfCM=
Subject key identifier: BD:B1:85:50:4F:A7:63:79:A8:88:46:8C:1A:0A:39:80:1C:9C:27:E9
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 01A0CA46AFB812CE4F2FDF8623175FE9639B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 0385
Signing time: Tue 22 Sep 2026 18:00:25 +0000
Manifest this update: Tue 22 Sep 2026 18:00:25 +0000
Manifest next update: Wed 23 Sep 2026 18:00:25 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: wgLeJN4qfm/rWVHKk4+r4GzqpBs4EBfbwejBEbJMXY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:af:b8:12:ce:4f:2f:df:86:23:17:5f:e9:63:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Sep 22 18:00:25 2026 GMT
Not After : Sep 23 18:00:25 2026 GMT
Subject: CN=bdb185504fa76379a888468c1a0a39801c9c27e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:0e:79:9b:1f:97:7a:ba:55:c9:88:46:08:
1f:a0:e1:a4:b6:23:43:df:49:07:98:95:99:81:57:
14:41:36:25:97:21:b0:a2:39:3e:d8:f8:8c:a6:78:
2e:15:bf:d8:cc:b8:44:9f:9a:e6:e4:c8:d5:27:67:
4c:be:9f:8a:40:39:e7:80:18:71:5b:43:32:e7:ed:
9e:b5:8a:f0:b1:3a:ff:60:ee:02:24:d6:57:40:88:
6a:33:90:2d:39:72:2f:6a:41:e8:b1:e4:55:73:7b:
77:c5:f2:03:64:31:e2:32:00:20:e1:22:35:d5:c1:
0a:fa:3a:e8:fd:79:28:c5:eb:d5:20:b2:ef:a9:32:
86:ab:f5:8a:9f:52:43:d4:45:ca:1c:c8:b6:85:ab:
22:e8:d5:33:84:75:9b:fc:20:e2:d9:f9:35:22:b2:
fb:dc:52:e7:69:bc:ec:4c:27:a9:f9:41:f1:b4:39:
d5:66:af:b5:24:5d:f4:66:c4:ad:08:5c:e2:34:9a:
16:05:2f:ce:64:5e:00:bf:9c:db:ad:34:6f:c5:94:
43:a4:05:04:d6:3d:c3:6b:03:76:a2:e6:41:67:37:
e2:07:0b:8f:c4:d7:ce:5c:fe:da:e4:0e:8d:c2:63:
ed:96:64:e1:34:ed:dd:ad:98:10:8d:1e:8d:98:f5:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B1:85:50:4F:A7:63:79:A8:88:46:8C:1A:0A:39:80:1C:9C:27:E9
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:02:28:7a:de:fd:9d:62:3c:eb:83:bd:dc:f6:72:84:6b:cb:
ad:3c:43:53:42:cc:76:16:1b:0c:11:e6:ca:c2:43:65:2e:1e:
55:6d:52:77:c8:e2:5a:d1:1c:f0:71:4c:f9:48:59:f3:79:af:
4d:32:e2:a5:d4:21:2d:cc:ab:64:33:34:c1:32:c7:ee:fa:ac:
5a:b5:9e:48:9f:fb:98:4b:74:75:9a:f2:0c:7f:92:58:33:fc:
99:50:15:0e:40:73:35:e6:8f:1d:62:c9:9b:52:13:f8:f3:fb:
08:14:89:3c:bc:f7:1b:3e:2d:89:1c:e7:0c:32:8d:b5:54:7b:
df:c4:95:04:33:57:c8:41:81:a8:7a:1f:36:93:e2:6b:d4:29:
ad:2f:2f:c8:d7:63:66:39:18:e6:74:14:3d:06:af:d6:6b:a9:
69:6f:a9:b4:fa:4a:79:58:a7:48:2a:a1:06:37:8c:10:9c:d9:
e3:97:91:da:cb:de:c9:29:11:61:7b:46:ed:ae:83:9a:81:cc:
48:00:e3:71:7a:94:d7:db:3a:d4:59:99:8a:ec:b7:59:44:f1:
36:20:6a:9a:a6:ec:58:c0:28:53:77:47:dc:1d:4d:fe:cf:ac:
4d:e9:d5:a0:34:06:86:ef:68:66:91:b2:a3:41:15:6a:cd:12:
04:18:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:14:32 2026 by rpki-client