Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: pzISd/caSVb1kPSCDWyczmpInslrlBTIhc8OTRRhk94=
Subject key identifier: 90:8A:9A:88:F3:47:45:01:C5:7A:AB:74:C5:59:16:37:95:C0:4A:69
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 01A0C66A8FA0254786544A0D3A8FFAF039B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 0A03
Signing time: Tue 22 Sep 2026 00:01:07 +0000
Manifest this update: Tue 22 Sep 2026 00:01:07 +0000
Manifest next update: Wed 23 Sep 2026 00:01:07 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: IAnS6bEzch3TIofLALz1ygB0iyo.roa (hash: lyXUvYyQfJt4aH/SJqViQQv03gKvKKB5vsWtq0xG3Ro=)
3: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: AKKdXfil8dkqwgcSqTxGwwwdYhcOaXUU5rlmqgQLonI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:8f:a0:25:47:86:54:4a:0d:3a:8f:fa:f0:39:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Sep 22 00:01:07 2026 GMT
Not After : Sep 23 00:01:07 2026 GMT
Subject: CN=908a9a88f3474501c57aab74c559163795c04a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:24:95:e6:72:5d:81:73:7c:72:64:60:8c:
87:02:03:e9:b0:f9:57:40:ec:29:47:d6:63:3d:3e:
05:76:8b:05:b4:26:65:dd:e9:34:07:0f:53:bc:7a:
a3:69:6b:f7:e8:2c:46:fd:2c:cf:9f:05:ac:18:4d:
23:4d:63:11:9c:93:33:bd:04:5f:3c:fc:6d:21:bc:
53:73:59:1f:86:bb:ac:31:08:db:83:8f:23:26:bf:
5e:e3:ea:b6:1e:23:d6:fe:47:9a:f6:bf:c4:ae:09:
82:35:87:d1:29:13:a7:74:da:62:ae:45:8f:84:ba:
5f:4e:56:ce:a3:2f:e8:c9:ed:a2:91:ef:cc:94:36:
97:d0:e9:88:21:05:eb:50:d3:bc:e2:54:56:0c:de:
44:e3:c6:7a:7b:5a:d1:25:a6:bc:f4:49:c3:fc:10:
cd:d2:f5:8b:ef:c7:77:76:42:89:85:a6:72:7a:ea:
b0:c1:0a:57:4b:18:1e:6d:b2:6a:41:03:92:7e:c4:
78:3f:bb:00:aa:e7:1a:8d:d7:26:b0:4b:16:0e:30:
ba:2b:81:06:6a:73:6b:8e:83:8a:58:00:57:ac:3c:
d4:c9:7e:dd:5e:a3:97:4f:2c:af:fb:67:f8:cc:7d:
b9:09:76:8a:06:c9:75:de:3a:45:c4:a0:06:fe:87:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8A:9A:88:F3:47:45:01:C5:7A:AB:74:C5:59:16:37:95:C0:4A:69
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2d:fc:9a:11:48:6f:40:a5:d8:87:c1:ab:6f:4d:5a:e0:fd:
34:a8:ef:7d:92:bb:c5:19:c8:35:e0:ce:0c:b0:a4:51:62:0c:
60:5b:21:a8:81:2c:85:28:43:c9:b7:af:67:8e:bb:a6:50:5b:
c5:d8:9e:c1:a8:7d:5d:b0:5a:56:04:e5:7a:19:75:2b:eb:df:
b1:ab:cf:cc:09:93:7a:79:ea:af:dc:a3:65:5d:f5:78:e1:f9:
a1:f2:ff:fa:dd:3a:01:82:0d:3a:76:63:f3:72:93:58:f2:c7:
c5:3a:6c:d4:b3:4c:6f:59:e6:a3:5c:3d:0d:6f:3b:4c:86:a7:
59:34:87:9b:77:d3:49:5d:71:03:21:e9:e2:2e:01:29:10:67:
0f:62:69:24:5b:5a:08:ae:2b:61:f8:a5:2a:f7:37:0d:d0:26:
b1:a5:1d:45:68:45:99:fc:de:0f:2a:cf:bb:ff:d3:2a:19:e6:
16:4a:f2:c8:45:49:84:32:03:fc:09:63:d5:5f:31:7e:f9:38:
bc:6a:67:27:70:db:14:d8:d6:1e:7a:75:f3:b0:a1:65:e2:58:
17:ef:e8:61:02:3b:f8:ea:0f:fd:42:22:98:18:83:86:0e:bb:
27:c1:15:5d:e5:92:c9:8e:ec:53:d0:c1:fa:e7:55:bc:e3:b3:
d2:65:46:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:51:49 2026 by rpki-client