Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
File: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft (raw, json)
Hash identifier: 3i8A/oB9sbeR6sGxa/1X5tvXTHKTr7u9NaQWR5EnknI=
Subject key identifier: ED:7A:AE:03:16:5E:98:0A:E1:2D:9D:DD:49:D9:17:24:8C:B1:2E:4D
Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
Certificate issuer: /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Certificate serial: 01A0DB720C07DDD49EFEA8B76A9A95E930B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
Manifest number: 05F6
Signing time: Sat 26 Sep 2026 02:01:19 +0000
Manifest this update: Sat 26 Sep 2026 02:01:19 +0000
Manifest next update: Sun 27 Sep 2026 02:01:19 +0000
Files and hashes: 1: 5_mNKvnFKLC3DW1kpn5M97s_rV8.roa (hash: YSn080K1AyDozT4ZZIR3FUMOs0H/Uq7H2U6XVLEbIes=)
2: NS4bJSf8JtisPPo4E4AUvgYiJkI.roa (hash: kNAqy7sfsX/DzrejY1IHLtdhRNkU/dXjQEKN71zDd5M=)
3: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl (hash: ONkuI9wDexAoyuiSPgaKmIEikI/ieH6B4zEmpz8wizM=)
4: m0S48tEBv9nFzVOV38xvVb-7W24.roa (hash: kgq2gT5y50cbq7aH/NdH+FdCNYhuUI9iaSWsZs757h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:0c:07:dd:d4:9e:fe:a8:b7:6a:9a:95:e9:30:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Validity
Not Before: Sep 26 02:01:19 2026 GMT
Not After : Sep 27 02:01:19 2026 GMT
Subject: CN=ed7aae03165e980ae12d9ddd49d917248cb12e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:6a:5a:5d:24:8f:e6:33:4c:81:d3:e6:0d:
66:bc:3e:4b:1c:57:a5:6e:15:9f:d6:3e:7c:56:c2:
2f:16:f9:c2:b4:89:46:78:12:98:ae:09:ec:90:5e:
61:12:0c:01:c6:54:9f:88:1b:a4:ab:5f:de:37:6f:
66:f9:69:28:f0:2a:a0:94:7d:20:89:4d:a0:5b:df:
76:1b:6c:62:25:9f:fe:e7:7f:3b:f5:7a:57:61:38:
47:4f:b0:2a:23:32:dd:57:2e:53:d1:bc:67:dd:08:
72:db:c9:72:32:ce:94:ad:66:4f:99:74:db:ca:93:
9a:2d:f9:ea:a7:73:ca:ec:4a:e9:35:f8:d9:40:02:
99:76:9e:fb:35:df:b0:c8:43:37:78:aa:f9:86:87:
75:1e:90:4c:eb:14:74:c7:c7:a1:e2:dc:74:58:9b:
64:4a:0f:06:6e:9f:c6:4a:38:ee:c4:43:69:41:5d:
fd:3b:1c:16:44:72:ef:1b:c4:2b:a1:b3:22:6c:5a:
1c:c1:fd:36:cc:d3:c6:bb:00:5f:03:d9:8c:f9:73:
f3:e3:a7:0c:bd:3d:0f:fd:76:51:c6:f9:11:ef:c4:
e9:7a:75:6d:46:8d:5f:5d:02:d4:5d:e9:5c:4f:47:
ce:f7:ca:9c:1e:f6:7a:40:d8:f0:1d:9d:44:96:6b:
ac:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7A:AE:03:16:5E:98:0A:E1:2D:9D:DD:49:D9:17:24:8C:B1:2E:4D
X509v3 Authority Key Identifier:
keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:13:23:0a:27:59:63:9a:86:b3:20:62:61:6f:14:96:ad:fd:
c3:6d:87:1c:bf:65:31:90:0d:12:68:67:d8:c4:de:57:1e:81:
4b:90:eb:76:c3:66:4f:27:61:51:7f:2e:08:9d:e6:cc:48:05:
4e:bc:9e:33:28:ce:e5:62:b0:72:a5:c1:5e:eb:ae:f1:63:29:
d9:89:20:50:cd:00:90:bd:8e:b8:9b:e8:a5:8e:cd:b6:80:21:
06:8b:2f:48:85:55:f3:f8:a2:d8:43:19:76:10:25:47:a7:88:
f6:4c:6c:89:93:5a:af:fe:4e:5f:ba:6a:2c:74:95:01:d4:97:
b5:43:4d:67:6d:69:c7:33:71:a2:62:85:62:ef:d6:68:c9:b5:
f9:97:3b:e4:e1:2e:2d:eb:3b:7e:06:5e:fe:c0:48:58:3e:86:
0f:f0:16:e0:98:cf:ad:99:23:26:85:f3:9b:76:e9:15:8d:b1:
74:4d:e9:2c:63:8d:12:2c:22:7f:bf:91:4b:44:be:fb:ef:ba:
96:10:cd:2f:5a:02:89:8d:f0:00:23:07:a8:42:fb:e8:5f:63:
87:19:53:eb:2e:da:92:18:f5:e0:ca:6c:92:ac:bd:64:82:66:
14:ab:f6:6b:15:95:07:5d:14:63:7f:9b:39:37:a0:c4:3d:74:
3d:95:70:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:16:56 2026 by rpki-client