Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
File: ZxzQcdyWC9yCmwvn40trYc-LCx4.mft (raw, json)
Hash identifier: ZnQtka6+Kpof/eJ9o1/ofCtAKHkuA5r9TqEMoI0XKT4=
Subject key identifier: E2:CF:9B:7D:F5:44:1D:AB:EC:A4:3B:57:3E:6F:DF:B7:DE:3E:EB:BE
Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Certificate serial: 01A0F267DE8CEDF70E96203DE29896869052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
Manifest number: 0458
Signing time: Wed 30 Sep 2026 13:01:28 +0000
Manifest this update: Wed 30 Sep 2026 13:01:28 +0000
Manifest next update: Thu 01 Oct 2026 13:01:28 +0000
Files and hashes: 1: B0kj7SdwSZWmEU9GKPX-vqJAVao.roa (hash: UN4l73RmEx8CBEkdPrS/+GtzsuSkIQeGfMIfQBPpbKI=)
2: Mdx0wPKImju2r6Wn-sTkPv2XXCk.roa (hash: KkcVte1gTb6znaz/vnrVSs9UtNLYEStRQ8bGw7/kCho=)
3: ZxzQcdyWC9yCmwvn40trYc-LCx4.crl (hash: 8PXb5zm4bm5hZdpVw8/3OFsXNZApN8wrFn5CiwyawOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:67:de:8c:ed:f7:0e:96:20:3d:e2:98:96:86:90:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Validity
Not Before: Sep 30 13:01:28 2026 GMT
Not After : Oct 1 13:01:28 2026 GMT
Subject: CN=e2cf9b7df5441dabeca43b573e6fdfb7de3eebbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:04:b2:89:f6:ea:2c:5e:47:da:8d:ba:bd:
7e:c7:e2:d7:02:52:43:db:0e:45:d9:b1:d4:c4:3f:
a4:c1:af:80:ec:e4:99:59:05:eb:b0:f2:b0:04:48:
85:d4:1e:55:ce:54:a1:3f:4a:ef:70:c6:c4:09:64:
e9:6f:5d:9d:53:f3:90:80:f0:5d:8a:f8:9f:b7:2c:
ba:54:7b:00:1a:2d:7b:d6:cb:0a:80:5c:c5:4d:56:
db:40:e8:55:28:54:f1:f0:88:85:69:37:37:df:23:
26:6e:50:52:4d:a9:48:75:5a:aa:29:ed:b4:5d:41:
a8:6c:10:71:ca:27:d2:3a:2f:35:fb:dd:a0:d1:a1:
08:52:8c:2c:d5:3d:e2:e2:5c:49:f6:cd:fd:a3:b5:
7a:3a:6c:f6:fc:91:86:79:1b:b5:24:03:a9:d9:e8:
87:ae:9c:00:7a:69:d2:51:d8:ca:28:5d:0f:c2:48:
c0:18:78:da:83:b5:66:93:fa:a5:68:7d:e1:60:4a:
8f:c9:61:f6:71:d9:d2:61:9a:fe:56:ad:8b:e8:6d:
18:1e:b6:13:ac:3a:6e:10:52:0a:8f:80:13:09:09:
70:b4:da:a1:6f:fe:32:2d:69:b3:33:c3:fe:d5:5a:
e7:a5:cd:1a:8b:4a:de:ae:16:13:f6:8a:c6:0a:be:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CF:9B:7D:F5:44:1D:AB:EC:A4:3B:57:3E:6F:DF:B7:DE:3E:EB:BE
X509v3 Authority Key Identifier:
keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0f:be:45:44:2c:7d:08:80:df:f9:b3:b6:93:1d:c3:74:4f:
33:28:3e:a3:8c:44:fa:fb:c4:0d:89:8f:bc:55:35:cc:27:4b:
33:ae:69:16:d4:27:89:2a:46:58:2b:1f:22:cd:7c:d2:e0:3d:
7c:c5:ae:98:2a:65:3f:3a:28:34:cc:70:19:16:a5:2a:29:2b:
93:0e:d5:18:07:a5:61:ee:b6:81:29:9b:07:9e:97:7c:c8:31:
db:22:41:08:2c:5c:f3:6f:5f:30:48:54:24:a8:15:12:40:32:
ff:f9:c5:44:9c:d3:01:da:0d:cc:24:c4:9f:7b:67:6f:af:1b:
a1:dc:90:cc:ee:9f:28:f7:1b:cd:e1:db:25:7b:9a:99:54:19:
9b:8e:df:8c:41:bc:86:06:f9:d4:f7:8f:4b:1f:5e:58:dd:d9:
38:3b:55:28:ad:b2:e1:a9:6f:72:6f:e1:68:49:a8:20:1c:4b:
5c:cf:ac:8c:c9:f4:bd:8f:ff:2b:55:b1:43:43:0d:71:0f:48:
b2:5d:3c:b7:ad:cd:96:05:7d:32:ae:f6:d0:90:4a:0e:45:7f:
50:d3:b1:5c:54:f3:e0:4f:88:14:09:1c:6f:98:9c:94:3a:a3:
d3:2c:02:22:05:71:cc:48:8e:13:bf:3a:cb:e1:f1:1e:2e:e4:
03:1f:74:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:53:43 2026 by rpki-client