Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
File: dZSaAgpSrHxVFICFzj7-LQKq09k.mft (raw, json)
Hash identifier: kwrQ122zmfX1KlbtZDUalFN93UmUP08rITkE6gFaAUg=
Subject key identifier: AE:18:7A:C1:35:D2:8B:39:28:61:8E:8E:15:DA:45:F5:96:95:B1:45
Authority key identifier: 75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
Certificate issuer: /CN=75949a020a52ac7c55148085ce3efe2d02aad3d9
Certificate serial: 01A0DD97D99C2A068932CAB2C72B9BCBE130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:51 +0000
Manifest this update: Sat 26 Sep 2026 12:01:51 +0000
Manifest next update: Sun 27 Sep 2026 12:01:51 +0000
Files and hashes: 1: cfG8GDhSC5IbhMcmwnrArCxDK5A.roa (hash: FkrvdsSSTjBBdNtO3cQ3OTlfM00z/ndv4EdJpdqE/pM=)
2: dZSaAgpSrHxVFICFzj7-LQKq09k.crl (hash: KqESeS/lAx8HbWLJWHgFTtm4wWVja53bnrw1eBmiqgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:d9:9c:2a:06:89:32:ca:b2:c7:2b:9b:cb:e1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75949a020a52ac7c55148085ce3efe2d02aad3d9
Validity
Not Before: Sep 26 12:01:51 2026 GMT
Not After : Sep 27 12:01:51 2026 GMT
Subject: CN=ae187ac135d28b3928618e8e15da45f59695b145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:1b:42:9c:47:33:3a:e4:d3:20:40:df:d9:
0a:92:fd:c7:c5:73:b8:76:65:bf:49:8f:bf:82:5c:
0c:4f:55:2c:88:27:2b:43:b3:9e:2b:53:57:8e:80:
58:50:d3:9e:1a:de:49:26:ee:a8:df:f7:87:a6:6c:
b3:30:c4:85:f3:34:1a:3a:f7:95:ff:60:05:2b:6e:
eb:a0:f8:95:32:86:79:5a:a3:29:3f:11:4f:7d:41:
64:8d:e8:40:e5:f8:9e:ba:f9:0e:e2:0a:1a:ba:e6:
8d:4f:bc:9b:39:9b:43:fa:35:e4:c4:16:86:79:c5:
03:6f:74:93:4f:e8:26:0b:89:b9:1d:e7:82:52:8b:
7b:62:53:40:8f:cf:30:a6:6d:12:db:cd:fa:d2:50:
8b:a9:b3:53:d9:d1:31:83:dd:91:b5:2d:89:ac:32:
ff:89:20:94:42:91:5f:e9:8e:b7:2c:3e:95:50:37:
fe:c8:09:d2:0b:aa:2e:d2:72:4c:cf:57:78:14:7b:
17:bf:8a:b2:9c:c6:9b:7a:64:61:a2:cb:c3:7f:76:
8f:d1:02:5c:74:e1:09:b0:4b:9b:92:e0:6b:32:a6:
c7:24:03:b5:8c:04:b6:c5:04:94:64:3a:10:c1:cc:
69:b4:c4:12:77:7f:ba:59:4d:bb:fb:2b:75:2c:fc:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:18:7A:C1:35:D2:8B:39:28:61:8E:8E:15:DA:45:F5:96:95:B1:45
X509v3 Authority Key Identifier:
keyid:75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:79:33:0c:5b:d3:2e:16:5e:82:dc:04:54:97:7d:ef:71:82:
48:4d:63:8d:5e:66:e1:41:7f:ab:f0:4d:5e:22:35:64:5b:c1:
3f:cc:95:2f:b2:00:22:4c:7e:95:31:b0:ba:fc:e7:fe:ae:03:
8a:82:82:ba:c4:c7:a3:45:88:64:a0:51:12:b4:e9:62:78:ae:
38:0e:d5:1c:64:09:b3:61:8e:e6:a4:f8:58:8f:e1:7b:23:bb:
9c:81:b8:84:9e:e1:37:2a:bf:c2:3e:4a:93:19:e4:1b:dc:e8:
da:cb:d3:03:ea:2e:42:d0:77:9c:9b:ef:42:bd:cd:aa:21:81:
8d:4e:e6:f6:b0:59:92:4c:36:5e:39:21:aa:04:27:c6:ff:36:
9f:33:d3:65:3f:03:88:9f:15:7a:9c:ab:c9:be:8c:14:39:19:
f6:cf:ff:be:62:2a:1e:23:3e:bc:42:74:7a:78:a5:1d:28:6d:
c6:8e:ca:0b:58:04:20:63:d9:c4:14:9d:11:3e:63:c5:ba:4f:
e4:b7:1f:17:bc:e2:4d:2a:45:d5:51:16:87:60:16:f0:1f:75:
6d:d8:22:6a:a5:a3:95:7b:30:33:b2:45:6e:35:85:14:5a:f7:
b1:fd:16:3b:a1:e6:27:b5:bb:9b:37:68:14:f0:14:2c:ba:0c:
64:18:5b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:08:37 2026 by rpki-client