Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
File: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft (raw, json)
Hash identifier: ADAR+lI2vdoHtDdGQSubrLiOVWoxZHIIEKpAS4kcBwY=
Subject key identifier: 89:9D:63:03:D6:FB:8C:1B:7B:9B:84:39:12:75:47:6E:AB:C1:0F:61
Authority key identifier: 66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
Certificate issuer: /CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Certificate serial: 01A11B636C9F6A3986A303D02889A2129BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
Manifest number: 010C
Signing time: Thu 08 Oct 2026 12:01:03 +0000
Manifest this update: Thu 08 Oct 2026 12:01:03 +0000
Manifest next update: Fri 09 Oct 2026 12:01:03 +0000
Files and hashes: 1: 65lyhfcnUeev5X-4CcMUdWujCvQ.asa (hash: Q5VU2hVKSklyugtCkKPk1YQjPGPSs0Bldy1d061Ftg4=)
2: PQUU7wS6Dnj9yIlgV8Xc2NVBH64.roa (hash: KhnDFB03h86ec4eUqmqIrwmEs0JGq+ImfCvKHB/LolY=)
3: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl (hash: 98xQKbPeTcU53KtHWLn1jfrHMfVZZF27qTwtVYMIR/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:6c:9f:6a:39:86:a3:03:d0:28:89:a2:12:9b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Validity
Not Before: Oct 8 12:01:03 2026 GMT
Not After : Oct 9 12:01:03 2026 GMT
Subject: CN=899d6303d6fb8c1b7b9b84391275476eabc10f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:a0:7e:43:a1:e1:8b:50:ba:d3:36:01:8e:
2c:51:db:e2:cc:27:87:33:e9:72:c1:39:ba:8d:81:
d4:80:3e:a0:7d:f8:d1:cc:0e:cb:c9:2d:03:fd:29:
87:2c:ff:b3:9f:97:06:57:2c:a4:85:20:cc:0e:90:
06:ac:24:80:c1:0b:f5:27:17:6b:9e:51:d9:ad:b8:
14:8b:2d:72:07:8c:61:07:50:ab:a6:4c:ad:63:63:
7e:25:be:b4:ce:35:ec:4c:87:1f:26:ba:c5:a9:75:
e8:cf:ff:d4:25:d7:51:3b:bc:80:36:ed:1d:76:19:
ec:c1:9b:11:00:b9:3b:1b:45:9c:ae:11:33:39:8d:
89:b6:15:ad:b1:a4:b7:2a:dc:2e:93:63:f3:0c:38:
7d:7c:b6:95:04:61:b9:a0:fd:68:9c:c9:43:96:1f:
eb:4f:47:c0:3f:fc:7d:71:30:a2:db:8c:30:76:64:
32:35:31:9e:ed:1b:be:78:0a:1a:99:ad:5f:2e:5e:
3e:a5:e8:e0:fd:65:27:eb:01:8b:99:f5:32:9a:f6:
8c:e0:a6:fd:d0:b4:b4:b7:83:5a:f4:82:ba:13:ab:
ce:1e:7d:63:c7:51:fd:a2:dc:b6:19:f7:cb:47:3a:
9b:99:5c:ad:41:30:89:c6:a4:fe:b8:7b:83:82:ab:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:63:03:D6:FB:8C:1B:7B:9B:84:39:12:75:47:6E:AB:C1:0F:61
X509v3 Authority Key Identifier:
keyid:66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:39:e6:d4:c5:92:aa:3a:ec:31:48:b8:62:d4:5e:be:4e:63:
24:ac:5a:82:31:d1:60:d3:fd:da:77:2a:ea:3b:d0:49:d8:0b:
a8:13:d2:91:3d:5f:96:6d:fa:82:38:20:b4:5e:37:ab:e9:8a:
fd:fc:aa:13:c3:50:52:9b:0b:62:a7:95:cf:1c:ca:82:c4:e4:
5a:8c:89:79:57:bb:c2:60:04:11:54:3a:a6:db:c2:bb:1b:3a:
bc:10:9a:33:31:8d:a2:56:92:4f:5a:3f:5f:2a:53:08:d3:65:
c0:88:a8:51:28:f7:c1:16:05:40:32:05:2c:bb:74:4e:00:6a:
07:db:1c:da:af:3e:93:89:ca:e2:c0:10:9a:e2:d5:2f:df:50:
2f:91:17:cd:13:1e:39:1d:1c:21:eb:c1:f1:52:34:2e:7d:fd:
9c:c3:fc:73:2f:7d:d9:75:1a:22:95:59:54:46:ad:0f:37:99:
21:00:61:32:7e:43:bc:bf:36:df:ed:d7:96:02:0f:d0:8e:14:
95:87:7e:21:e7:4f:f9:83:8f:d8:27:25:d6:dc:99:36:15:f9:
d5:45:0c:8b:5c:1b:5b:b3:6e:86:b9:8e:38:a4:45:89:be:b4:
7f:fa:32:3d:6e:bc:42:e3:4d:ef:90:f7:13:88:c3:2c:5b:2e:
f7:46:c5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:29:58 2026 by rpki-client