Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: 6IeLx5c+g/lNkACRg7TDC5ABLKaNR1VE1Zp13tY3uTM=
Subject key identifier: A5:DD:6B:B7:D6:82:73:FE:CE:B9:FC:28:69:9A:A9:A7:A9:14:65:8D
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 01A0E10731A1ECE40D5DBDFB516A2A38BD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 1373
Signing time: Sun 27 Sep 2026 04:02:19 +0000
Manifest this update: Sun 27 Sep 2026 04:02:19 +0000
Manifest next update: Mon 28 Sep 2026 04:02:19 +0000
Files and hashes: 1: v7WcqpRYWHh239LPGmTnapW7Q_w.roa (hash: xmjmImowRyBXLpG11gkpyM1tBT1YhUEBnShnhTtDYrk=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: hT4QaJlSTg1ifME4yLw7NMFl6NVxxnrC5WUck+A/RcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:31:a1:ec:e4:0d:5d:bd:fb:51:6a:2a:38:bd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Sep 27 04:02:19 2026 GMT
Not After : Sep 28 04:02:19 2026 GMT
Subject: CN=a5dd6bb7d68273feceb9fc28699aa9a7a914658d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:4b:0d:e9:ea:99:bc:62:ff:37:e9:ae:fc:
d3:a1:e3:83:e2:a3:9d:67:6d:ce:ce:61:1f:2f:21:
22:3c:f8:44:e6:6e:57:f1:a1:46:22:e6:e1:c5:6c:
67:b2:9c:ad:61:6c:40:03:1a:4c:3b:bb:8c:b3:a7:
c8:0d:0f:57:93:a8:f3:8b:b2:c6:4c:5c:4c:21:15:
7f:f0:fe:47:50:f5:49:35:03:37:59:23:5f:12:45:
d5:92:aa:e0:84:cf:ad:ea:e5:de:78:bf:4e:12:f0:
bb:9d:bf:4c:c1:79:e5:72:46:e2:80:2d:3c:50:c4:
14:84:63:80:ff:6f:0d:73:d7:79:a9:f6:ab:19:d4:
e2:c2:6b:73:6c:6a:44:e5:da:de:5f:db:02:4a:2b:
f5:e2:0d:e3:ac:1b:99:90:23:22:e6:30:04:31:57:
8d:2b:07:00:c5:0e:a5:be:72:31:7a:55:d8:8c:cb:
07:7d:0d:7c:01:d4:c7:38:a1:a3:3b:9b:48:fc:10:
ca:ce:02:f2:cb:ce:87:6a:45:f3:75:19:69:15:50:
ff:d5:8e:fc:cf:48:82:ff:f3:11:b5:b4:7f:f5:fa:
bc:e7:49:e6:9a:e8:cc:50:f4:be:7b:6d:57:45:0e:
89:39:44:3f:01:de:bd:8a:7b:2a:f3:86:d1:16:9e:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DD:6B:B7:D6:82:73:FE:CE:B9:FC:28:69:9A:A9:A7:A9:14:65:8D
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c4:60:ec:de:a2:b7:de:cc:b0:fa:e3:cd:60:b3:7c:ac:ce:
ab:81:ba:7b:60:75:07:cf:a1:ef:d3:24:96:25:fc:cc:65:73:
7a:a0:5f:61:e9:bc:fc:a9:10:53:de:00:ef:ac:4c:5f:82:c6:
11:5e:9e:eb:39:12:82:53:69:5c:44:2b:1c:95:95:bb:7c:2c:
28:bc:d0:81:0a:9f:f4:6f:2a:e2:09:54:72:4c:ad:ce:d3:76:
49:a6:64:28:5e:cb:7c:33:51:be:63:8b:ba:ab:2a:de:74:f3:
11:56:7c:e2:09:03:61:76:f0:dd:64:42:ac:ee:a5:36:b7:64:
b9:1a:e9:37:a0:a6:be:05:ab:f8:68:01:14:4a:ad:4e:72:30:
89:58:b6:6c:41:8f:ea:d7:27:ae:95:a2:e1:2b:6d:eb:99:e7:
06:ad:44:1c:0f:5b:2f:91:11:1b:8a:ee:97:f9:46:55:1d:0c:
e4:5b:a9:d0:1d:79:d5:d8:ec:94:2c:89:5e:90:d3:b4:28:e7:
d6:ff:db:89:d4:20:3c:0f:48:3f:51:49:1e:96:9f:99:67:45:
65:a5:af:2d:71:94:29:48:dd:bb:2b:98:06:5f:91:5d:04:bb:
80:3e:e0:16:cd:1b:32:6d:1b:74:88:97:35:6e:40:4c:90:35:
aa:81:58:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:58:25 2026 by rpki-client