Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: q6dvN68bv/Y8wm0fix2Orjz1Ct6/8x6WoWOPvAUYfcM=
Subject key identifier: B4:DF:7F:A6:0B:8F:2A:87:7A:A2:72:DB:50:43:61:0C:06:4D:6C:33
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 01A134ECC7E54AF6D4CF7C4BCF034B9C5835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 0A50
Signing time: Tue 13 Oct 2026 11:01:35 +0000
Manifest this update: Tue 13 Oct 2026 11:01:35 +0000
Manifest next update: Wed 14 Oct 2026 11:01:35 +0000
Files and hashes: 1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: /1SNHECDBa9x9En2v8NwNCbyWiqLAfIRsygP8Catb8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:c7:e5:4a:f6:d4:cf:7c:4b:cf:03:4b:9c:58:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Oct 13 11:01:35 2026 GMT
Not After : Oct 14 11:01:35 2026 GMT
Subject: CN=b4df7fa60b8f2a877aa272db5043610c064d6c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:2b:a8:91:61:a4:ec:3a:43:a0:23:6d:ea:
fd:53:0a:85:c2:4a:11:ff:3a:70:3f:53:64:37:ee:
86:bf:c1:8d:ff:0b:45:e2:de:81:35:93:38:86:52:
18:f4:c4:48:35:42:76:e7:70:63:57:6f:dc:7a:f8:
6e:61:d6:df:ff:c3:12:91:6c:d8:c1:eb:2e:cf:c7:
5f:14:32:10:75:df:22:9e:85:fc:59:fa:72:5b:2a:
6a:0c:36:d5:64:ad:33:42:f3:07:bc:73:90:a8:c8:
07:5d:79:f3:18:a0:48:47:f3:35:b8:ab:ab:ac:a9:
65:70:3f:23:5f:e5:8e:96:a1:37:d0:72:9f:58:1d:
c3:79:07:1b:3b:df:8a:a8:65:1e:b1:ce:2e:8a:a6:
ae:a5:00:75:3c:95:8d:c0:47:51:64:98:d1:2a:01:
a6:c4:65:c3:06:81:17:dc:66:d9:91:2f:26:18:15:
df:90:11:a2:6b:e8:21:be:11:bf:2e:01:6e:18:ba:
94:fd:cd:bc:d2:34:c2:b4:e3:25:77:d6:fb:ce:ae:
bf:49:cc:6b:cc:bb:3a:86:aa:90:d3:9f:02:c1:92:
1e:4f:f3:5f:1c:9c:3c:22:eb:6f:07:02:cd:ef:e8:
51:97:10:3a:c1:d8:5f:20:3b:66:92:4c:e1:76:dd:
f5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:7F:A6:0B:8F:2A:87:7A:A2:72:DB:50:43:61:0C:06:4D:6C:33
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:15:2f:cd:18:aa:39:12:2f:54:22:3f:9f:37:79:9e:92:7c:
f1:ce:74:70:28:40:71:14:46:bb:c4:32:45:41:76:bd:6c:2e:
a8:c0:c7:4f:e3:ba:19:d2:ca:82:13:33:e9:d8:91:2f:f1:5a:
4d:c7:f6:d1:f3:88:13:45:d4:e0:1d:b9:e8:ec:e6:90:03:a5:
82:a9:c4:9c:c6:db:0a:77:1f:2b:28:a9:d0:45:df:81:49:db:
f3:b3:3d:7a:47:ad:bb:90:73:7f:9c:9c:e3:2b:80:fa:7b:22:
33:7e:4e:6b:b2:05:ec:9c:1a:55:9c:fd:1a:f6:18:4a:d3:1a:
24:f1:25:26:12:b2:9a:bb:28:82:ae:b3:51:08:97:d5:f0:59:
15:55:6a:a1:76:39:48:80:6b:0c:0c:21:11:d2:5b:8e:fc:0f:
fd:8b:4a:ee:62:c0:6c:aa:8f:17:fc:ef:7a:d8:ff:6f:95:dc:
db:aa:d0:0b:bc:bc:08:e2:db:58:6b:45:41:f5:56:1c:e7:d9:
c6:eb:16:17:8c:dc:2e:7b:c6:f0:80:63:ef:f0:7c:69:65:59:
c3:cc:cb:16:20:63:93:11:a1:c6:43:55:9a:ef:03:11:ab:1f:
57:62:36:f7:d5:28:0f:75:ac:6f:3a:0e:26:d4:e4:d0:91:2c:
8f:1b:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:09:38 2026 by rpki-client