Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: GwZORcuTFziK0j/cxoa0x2175dqVe5sKufr/Lcar0Sc=
Subject key identifier: D6:5E:7B:BD:85:A3:BB:9D:3E:19:8A:EA:26:56:C0:6F:96:1C:7D:E0
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 01A10BF02B488AF1A5C4A45E579151DE40FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 1A89
Signing time: Mon 05 Oct 2026 12:00:51 +0000
Manifest this update: Mon 05 Oct 2026 12:00:51 +0000
Manifest next update: Tue 06 Oct 2026 12:00:51 +0000
Files and hashes: 1: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: ObMF1faN/E5jRQvb9IDr4Jnr3ugLArq0yQabKJS+Y94=)
2: tF-2EeR_Sloua9VRcDrOJtjCE4c.roa (hash: SRucPtbp0q4X2q4N9kPCOOMgbw4idYsb5wYcEAqop+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f0:2b:48:8a:f1:a5:c4:a4:5e:57:91:51:de:40:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Oct 5 12:00:51 2026 GMT
Not After : Oct 6 12:00:51 2026 GMT
Subject: CN=d65e7bbd85a3bb9d3e198aea2656c06f961c7de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:8d:d1:30:5f:cc:57:17:69:b1:c6:63:f4:
9b:ab:07:fb:3e:14:db:5c:1c:f9:0a:d8:f6:f7:ba:
54:d1:4e:4f:a6:f2:b5:2a:f0:30:59:a5:8f:a6:f4:
9a:45:d0:69:68:54:7f:76:21:5c:59:12:e5:ae:96:
3d:32:55:f5:e1:26:6c:bb:63:2f:7d:b1:10:57:a1:
63:74:3d:9a:c4:e5:59:4d:2e:b7:fd:2d:22:30:78:
dc:c4:92:0e:a1:3b:f5:99:ed:79:0f:3d:8a:7e:0d:
91:0f:f9:b4:5a:19:84:19:0d:0b:c0:e7:75:d9:e6:
5d:94:47:e5:57:a7:12:0f:f4:ec:4f:e3:05:d5:30:
03:8a:a6:45:51:ce:cd:c3:5c:89:0a:4e:76:92:72:
d8:17:5d:88:24:6f:92:71:5b:01:54:ba:a3:51:fd:
6c:8d:fb:3b:0e:4c:df:22:ee:25:4b:33:22:3b:96:
f2:be:e1:8d:4c:8d:62:c2:cd:6c:9b:24:07:bb:15:
7f:20:fa:34:84:49:cf:af:f8:b0:9d:22:b1:b7:35:
e9:aa:fa:79:17:22:35:c2:3f:6b:dd:36:a2:03:64:
93:0f:32:d7:3d:e5:7c:51:01:71:df:f1:40:9c:9a:
10:3e:bb:bc:42:ad:61:93:50:c2:c4:95:5b:bd:13:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5E:7B:BD:85:A3:BB:9D:3E:19:8A:EA:26:56:C0:6F:96:1C:7D:E0
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a8:f8:a6:a5:97:18:9f:d0:3a:06:05:44:99:3e:ab:76:f7:
b5:35:b2:ce:63:23:49:c2:7f:69:ba:8e:2f:b4:ea:05:18:db:
16:6b:1e:86:30:d2:bd:2e:ba:1a:54:e5:d5:1c:7c:fd:c9:78:
d0:40:80:ee:05:40:d1:8c:c8:59:0b:1c:99:39:ae:5e:26:7a:
2b:74:13:3a:f0:82:24:57:bd:0b:3a:0e:cb:97:0e:86:75:b9:
74:df:87:46:02:43:d4:0d:c0:d1:27:83:92:3b:9e:d1:d0:e5:
ab:b0:a0:ca:28:43:82:93:7d:7f:b5:c0:de:bd:72:7e:87:f7:
e0:28:67:18:78:f1:c2:1d:30:15:e7:de:e1:23:13:1a:69:37:
e9:dc:85:f8:29:90:3d:98:c5:d4:ae:99:23:cb:24:e5:ee:dc:
f4:2d:05:8e:75:76:f1:78:06:55:cf:da:fe:84:97:fc:64:d9:
98:c7:b0:b1:e7:d6:e8:94:4c:0d:2f:f8:56:23:32:15:9e:2a:
3d:0e:29:78:08:48:51:6b:c9:17:d3:88:27:c9:27:9c:85:34:
4e:6b:fe:e9:02:47:09:90:66:22:5d:02:af:97:ad:e2:d5:0b:
04:2a:21:54:8d:01:c0:7e:f1:94:51:fb:5a:bc:c4:bb:25:ca:
8a:b0:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:47:43 2026 by rpki-client