Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: nozrqQNDYQETdgFjVoaEpDrerjSj0COAVeu08IFAMuc=
Subject key identifier: A2:98:F3:B5:99:59:83:AE:C4:13:53:6F:59:D3:B9:8A:82:3F:B7:1D
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 01A0C6D872FED4F8CBFB75D7519584897C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0FB1
Signing time: Tue 22 Sep 2026 02:01:08 +0000
Manifest this update: Tue 22 Sep 2026 02:01:08 +0000
Manifest next update: Wed 23 Sep 2026 02:01:08 +0000
Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: 4toYk9QN8SSq/SlcNiQ6R64VZymVoMGvn9SHhRKoAkQ=)
4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:72:fe:d4:f8:cb:fb:75:d7:51:95:84:89:7c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Sep 22 02:01:08 2026 GMT
Not After : Sep 23 02:01:08 2026 GMT
Subject: CN=a298f3b5995983aec413536f59d3b98a823fb71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:2e:be:ff:67:02:c5:93:90:7d:f2:30:02:
35:96:c9:86:68:fd:19:f2:a4:f4:e8:99:1c:d4:96:
85:27:11:fb:a8:60:81:7b:2b:9e:55:7b:62:a2:f7:
3f:ac:f6:22:32:d3:59:72:9b:cd:cf:44:29:5a:53:
f7:2d:40:34:9a:2d:5f:70:12:9a:b0:f2:73:1a:a8:
7e:6b:9e:7f:02:0f:68:0b:79:69:fa:e8:a6:ca:e3:
a3:ba:18:ba:9b:ee:1f:86:80:20:cc:7e:6a:76:d4:
7b:63:72:c1:34:e0:15:13:48:58:a9:a7:08:1f:be:
15:90:df:af:77:f9:5d:44:06:6d:34:87:6b:65:72:
c7:c0:e0:79:50:fb:0d:da:c3:ea:83:92:da:77:70:
55:5c:26:be:8d:5d:d6:a9:05:40:cc:2c:d1:71:55:
5b:fb:d0:57:90:ea:f5:ff:e1:f4:d1:44:fb:85:b4:
e6:8f:31:5d:77:4d:9d:0d:19:64:3f:f8:29:f2:1c:
ff:34:37:00:c5:88:e5:de:1e:9f:c6:cd:71:e2:3e:
85:a5:38:3a:01:c0:14:a0:32:07:85:38:72:31:e8:
f7:0f:ab:f5:99:83:ea:09:61:5b:28:06:b1:23:9f:
15:7d:33:3b:ef:bc:3e:dc:5a:53:25:f5:c3:ac:92:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:98:F3:B5:99:59:83:AE:C4:13:53:6F:59:D3:B9:8A:82:3F:B7:1D
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c0:22:d2:86:c2:50:c1:be:ec:48:85:d2:55:93:30:da:8d:
ca:68:07:b4:cd:90:06:63:b4:69:6f:be:15:e6:40:0f:fa:56:
1d:77:5a:be:5c:c9:bd:c1:d2:ef:f9:18:76:e8:c5:0a:4d:64:
2f:3e:6e:50:5b:b7:ec:30:f1:ec:a7:47:fd:f4:10:2c:43:bd:
a1:62:d7:20:fb:78:17:12:9d:96:24:43:37:b9:98:76:76:31:
93:c5:a3:23:cb:88:bb:87:59:5d:5c:28:c5:f0:49:5d:6b:7f:
9f:2f:8b:bc:cf:41:3c:45:7f:36:63:c8:de:0e:9e:da:46:e7:
40:d7:52:12:b9:e2:5f:30:14:70:00:fe:17:9a:12:d1:09:14:
ac:26:5f:45:3c:7b:53:37:9f:48:93:58:4a:a6:75:1e:24:0b:
a1:81:53:da:be:55:ad:59:af:ea:e5:15:b2:ee:70:bf:2e:6a:
f3:e0:43:ee:57:14:0b:6d:a3:31:86:00:5e:03:2f:a8:5f:d3:
66:ff:bf:8b:3f:e6:2f:0b:13:42:e1:56:47:22:ad:56:e4:fd:
f0:c3:46:95:b1:7f:df:af:c0:e9:3b:e4:d9:75:9c:93:63:90:
b3:f6:e3:0b:f0:e5:d7:47:fb:ba:91:79:6b:2c:78:f6:18:b5:
ba:4f:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:02:28 2026 by rpki-client