Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: 3e4ywKd0LRbmW/zLt9jLG9cAAe5ex0soPxdUUpvRhJk=
Subject key identifier: C8:0F:77:21:92:B6:1A:A0:8A:3F:61:03:97:08:BC:FF:3B:B8:A0:DD
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 01A0DA5FB3B01BED804C8B3D75CBAD9098F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 1A7C
Signing time: Fri 25 Sep 2026 21:01:39 +0000
Manifest this update: Fri 25 Sep 2026 21:01:39 +0000
Manifest next update: Sat 26 Sep 2026 21:01:39 +0000
Files and hashes: 1: 0GL7DdIdoFqMUjvFhCRfHpKPMbA.roa (hash: pZia0ALckAxbVwXjSvk9ZitHob5JnbAYRMcyTh/GAHw=)
2: 4CJ3InuHwPxMIYug15LfFjf4TFE.roa (hash: AqjwYTvPMHv8KhwXl422zB5jGiNZqfOiCwgbFsHZ07g=)
3: H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa (hash: z0WYajZ68GEteUnmX5OmcBfJ0ynCGdGVIvLSKmVhonU=)
4: VxmBydPNDVkjAwNW0HlCl0mcW2A.roa (hash: 2uX2f6w9d7FkhAQJ79lByeDaz04Av+toag4OFSNYkF8=)
5: X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa (hash: rE1Gy+5Y3N/6nRhiVvsTgzmZ/j4C83X5X1jx7h+hjs0=)
6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: ORAXuTkTOK0Lt2o3SoNFb2LQ18iggI2xA/4SRKxq/Wo=)
7: srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa (hash: WOqlcZKIxr5sVUqyyKJNHMiLfFbk3vNnFX+UsNkt18I=)
8: zPyNAFdQmlJqV2qKRKA-eSuuTJY.roa (hash: WQ7fB4l+y3xXDPGETnFXWLdLLeTLH4yREUZKhvFa6Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:b3:b0:1b:ed:80:4c:8b:3d:75:cb:ad:90:98:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Sep 25 21:01:39 2026 GMT
Not After : Sep 26 21:01:39 2026 GMT
Subject: CN=c80f772192b61aa08a3f61039708bcff3bb8a0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:8e:4f:43:d5:bc:e5:19:5f:69:23:6c:7e:
81:c3:db:9d:33:47:2a:58:df:fd:7e:48:9c:36:ea:
9c:87:0e:05:9b:a1:41:6e:d9:37:ad:55:36:a5:8e:
d6:8a:32:69:55:af:3f:33:43:d1:b3:7d:02:17:42:
8d:ae:ed:4f:74:34:ef:25:df:4f:86:40:f9:ff:df:
7c:d2:5e:0b:fc:5b:f3:f1:0b:5a:dc:cd:1a:83:da:
b2:8b:d9:f5:1a:b9:45:c0:95:0b:04:be:74:e9:43:
0a:fb:d4:2a:5f:40:da:17:fd:38:48:a5:f1:f5:ca:
bc:79:0e:cc:4e:84:12:fe:45:ba:61:4d:ae:dd:71:
6e:28:54:25:d7:c8:12:e3:2f:a1:6e:a1:a7:49:b5:
c9:72:f9:8e:fe:0c:d0:35:df:6a:5b:8c:0b:4d:9a:
8c:67:3e:3c:a5:95:40:0e:c3:c7:21:a2:80:99:75:
6e:bf:b8:dc:91:9f:bc:ef:b9:59:53:cd:24:65:ff:
a0:ba:5c:fb:c3:e4:79:0e:5c:2f:67:d7:65:27:37:
83:3e:77:cb:f0:6c:66:ec:89:da:fc:80:4b:09:1c:
7b:23:e8:01:13:37:27:a0:4d:a0:90:08:51:8d:4c:
45:45:76:43:29:e2:ab:e2:0f:b7:6b:cd:77:0d:61:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0F:77:21:92:B6:1A:A0:8A:3F:61:03:97:08:BC:FF:3B:B8:A0:DD
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5c:97:60:7e:d1:bb:ac:9b:ff:0d:54:06:d7:81:39:d6:90:
8f:da:21:ce:2e:b8:7d:9b:cd:74:9e:dc:c0:66:38:63:71:bf:
72:c7:06:c4:11:d9:34:63:c3:a2:ec:ec:8d:9f:8d:a6:fb:bc:
03:db:dc:a6:4f:45:5d:ab:9d:cf:ca:b0:b7:62:d8:1a:5c:38:
ae:26:82:d3:4f:87:bd:65:ed:de:33:e9:e8:0c:3e:3f:e4:a0:
29:d9:a7:16:2f:30:2f:45:fa:c4:ea:85:75:80:fa:02:3d:d1:
e8:d2:7e:0b:ee:52:4e:84:f9:ac:66:ba:e4:d0:b4:82:3b:69:
f7:8d:80:5e:60:67:24:c7:d1:80:af:15:36:f2:bb:3a:ee:58:
96:2c:a1:df:b0:0d:bb:1d:63:96:e8:c5:0c:db:a6:ce:a5:86:
ae:61:ef:76:48:48:c4:28:dc:ac:19:e7:46:9d:e5:38:d9:2a:
e6:9e:78:79:bc:c8:be:a1:94:f6:1c:e3:f5:5b:79:ec:9c:39:
e3:fc:21:63:0d:c9:2b:0e:97:d0:1f:78:3d:cf:a6:ae:2c:14:
e9:e8:07:bf:28:1a:c8:67:ce:6f:2b:cd:92:ae:45:78:47:87:
13:83:19:81:6b:86:60:13:5a:a8:a4:e1:51:5b:5f:b4:5a:9e:
d0:44:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:53:28 2026 by rpki-client