Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File: ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier: igkbK2Et8nZ/7J1DZQ8nh21hC/9mAG3hOSnFKR5Er2Q=
Subject key identifier: 9A:B8:9F:29:6C:8F:C8:35:DE:F0:32:99:F7:1D:39:98:BF:37:9E:44
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial: 01A0CA467B8F5A9D241A9DFA1E1216EC7CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number: 08E4
Signing time: Tue 22 Sep 2026 18:00:11 +0000
Manifest this update: Tue 22 Sep 2026 18:00:11 +0000
Manifest next update: Wed 23 Sep 2026 18:00:11 +0000
Files and hashes: 1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: 3MKngZ1BriOkkUmgVhbpznW37B15Ag8ARr6yMn3oFRc=)
2: t-CPneeaVHYgCJeN9aRr26OHu8s.roa (hash: i5R3976Bs/xCdmNx5+5wTM2K2LQaNxrVpxX02Fkd/C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:7b:8f:5a:9d:24:1a:9d:fa:1e:12:16:ec:7c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Validity
Not Before: Sep 22 18:00:11 2026 GMT
Not After : Sep 23 18:00:11 2026 GMT
Subject: CN=9ab89f296c8fc835def03299f71d3998bf379e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:75:07:c7:3b:38:e8:13:01:f1:87:cd:10:
53:f6:8c:ef:68:b8:1e:58:46:71:3f:4d:62:1e:a7:
a7:0f:54:94:b7:a7:9c:07:36:66:3d:eb:1c:3d:a0:
14:ce:f9:36:c0:b8:4b:ab:b9:77:9f:4f:32:fb:5f:
f4:cc:31:8f:b1:77:4f:8a:c6:4b:c9:32:c2:00:34:
eb:0e:e9:7d:c3:17:60:6f:66:25:72:c9:1b:26:3c:
b0:8c:43:30:8f:45:99:5e:f7:d7:85:8c:be:5f:d9:
92:ba:9a:ce:04:8f:94:a1:a1:98:a6:a4:fd:9b:7b:
93:68:67:8e:f3:4d:8b:07:79:0f:76:5d:e3:de:65:
07:c4:af:5b:06:7e:23:86:0c:a3:5e:ea:d9:5a:e1:
18:28:70:ef:79:bc:5d:8b:92:63:9e:0e:0d:ac:a3:
1a:e9:e1:fe:fc:f7:86:97:a6:e6:a1:8d:da:ac:08:
14:2e:01:a4:03:2a:ed:22:be:fc:52:a9:42:f5:79:
63:b0:4a:2a:b4:3e:77:90:ed:7c:da:88:5e:ca:c1:
47:09:5c:38:d9:22:68:f0:f0:63:93:33:99:41:e3:
b4:4e:db:09:ca:0b:22:be:51:3a:f6:5b:c3:a6:00:
db:50:48:06:bb:06:1e:d2:34:d7:06:e2:ed:3e:14:
08:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B8:9F:29:6C:8F:C8:35:DE:F0:32:99:F7:1D:39:98:BF:37:9E:44
X509v3 Authority Key Identifier:
keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e0:5b:0c:78:d9:5b:12:74:29:66:95:6e:45:e8:8b:09:90:
2f:9e:19:e9:b3:52:21:bf:b4:59:df:46:03:80:66:8a:5e:d0:
28:6c:57:c7:b4:6b:aa:7e:bf:47:b7:a6:68:b7:ba:c9:b8:f9:
a6:aa:21:b5:4e:ff:af:01:a4:6c:d5:c7:c0:81:e6:da:75:d5:
7e:57:d8:c1:87:a4:1c:16:ab:f6:aa:21:0d:5b:78:b7:b6:bb:
48:49:ed:02:de:fb:f7:ed:ac:12:f2:ab:34:2e:f5:bf:f9:3a:
e9:0e:76:b9:cb:eb:2c:81:23:37:89:52:e2:e0:df:7d:83:6d:
43:65:29:96:ca:0f:fd:06:eb:26:fa:43:a6:57:ee:60:43:f0:
8b:c8:cb:99:6e:39:20:14:f1:6d:00:9b:32:f6:ee:6d:bb:b8:
ac:93:15:5d:fc:7d:f7:cd:20:28:e5:d3:27:0d:b3:12:69:fa:
2c:4d:06:a8:46:ea:0c:65:42:23:63:6f:94:b4:13:52:e9:97:
1c:0f:da:2c:23:16:2f:96:cf:61:2e:08:71:9f:d6:d9:27:a6:
41:29:21:75:e0:c7:a1:07:b0:79:51:56:70:34:2d:9c:54:af:
6e:72:5e:15:da:c8:da:0e:06:35:e0:dd:37:ff:27:2f:12:44:
b6:63:69:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:23:45 2026 by rpki-client