Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: f3JSgQu8sLVWTmV6h9X872CKRejR38HggIyGVlxX1no=
Subject key identifier: BD:C2:CA:C1:B8:A0:7E:DE:D2:F9:74:10:27:2E:7F:27:7D:A5:EF:A5
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 01A0CA103D812697520BF7B9D8B6B62EECD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 17:00:56 +0000
Manifest this update: Tue 22 Sep 2026 17:00:56 +0000
Manifest next update: Wed 23 Sep 2026 17:00:56 +0000
Files and hashes: 1: 8r944bJqG_LM17rTDE1uGAYMcO4.roa (hash: US/6Z/+ktv9Mac1FJpsH2XS8YNAZ76aWDA9Ebr1o3lU=)
2: BcVatgINhehxpYUrBXABJ41nAt0.roa (hash: GcuNKsGTXhiIzKjZT1cDQ3vbaLRIxIZoGDWXVty3fns=)
3: YPjYJdppvJ-xVHyJ3v-XHJpuM2M.roa (hash: zURKZ3NvzQl2kZFa7NPOhYYc5nLxhkqpMkhOysGx3l0=)
4: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: MVcx/Ae9iLq4g0m4rT4ARyXx66zgR4HFq8AhhUniet0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:3d:81:26:97:52:0b:f7:b9:d8:b6:b6:2e:ec:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Sep 22 17:00:56 2026 GMT
Not After : Sep 23 17:00:56 2026 GMT
Subject: CN=bdc2cac1b8a07eded2f97410272e7f277da5efa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:9f:49:66:50:a5:9c:d2:b7:d2:d1:d7:bd:
ad:e2:41:a9:ef:0d:0f:72:87:a9:a3:a1:1b:ce:44:
b3:7a:4e:0d:5d:90:dc:36:01:dd:5d:b0:fc:f0:44:
07:70:99:26:f6:91:10:36:40:c3:3b:ca:91:8d:12:
f7:89:50:2b:a2:6e:ff:a4:02:9c:3d:cf:0e:60:0f:
de:9e:4c:92:96:9f:5a:da:a0:ef:e8:de:02:16:3b:
13:71:99:80:29:fe:8f:53:5f:52:24:96:c2:01:9b:
1c:f4:8c:73:92:ce:e6:5f:d1:32:94:a9:bf:0e:b3:
83:81:b3:b1:04:6b:b8:e2:ce:6e:28:21:e9:07:07:
13:69:cc:4e:52:03:bf:83:31:31:f7:bd:b0:16:38:
6a:52:38:55:1b:45:61:9c:5b:53:d1:eb:46:0c:e2:
b7:7d:62:c9:c2:42:20:da:88:3d:bc:91:75:31:72:
15:c7:a1:b0:00:d5:20:2d:c7:a8:70:0e:8e:96:a8:
7e:12:7d:b6:1d:59:8d:32:c6:26:76:4c:ff:a3:0a:
ae:55:69:aa:70:d8:06:aa:e5:66:70:d7:ed:e8:04:
cd:f0:18:9c:26:48:c4:fb:cf:57:a4:b9:62:05:7c:
9f:1c:6b:10:f1:93:a1:45:36:03:8a:f6:37:26:ee:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C2:CA:C1:B8:A0:7E:DE:D2:F9:74:10:27:2E:7F:27:7D:A5:EF:A5
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:23:7b:2d:d0:c1:a5:91:0e:21:62:ea:6f:2b:eb:ef:f4:f0:
a6:38:2c:75:85:9e:52:e1:57:59:29:54:d2:05:f6:f7:28:0a:
0a:9e:4a:b2:fd:e6:22:87:80:dd:f2:10:82:b4:f6:6a:6f:12:
b7:5d:f9:16:ad:62:7b:dd:15:3c:03:34:87:a7:bc:28:b8:76:
8e:a8:cf:6d:6f:b8:c3:b5:aa:02:3d:83:bb:0f:54:cd:f7:47:
c2:52:71:21:90:52:ac:23:dd:88:6c:f6:9e:28:25:e4:cc:11:
8b:a2:20:f5:16:3e:aa:41:e5:4f:3c:71:a6:8c:a8:74:98:b4:
87:fd:dd:f5:b4:9f:b8:98:33:fb:43:b5:85:c4:1a:f5:c5:74:
66:48:ab:df:44:cb:4f:f1:af:b0:0e:47:4b:d6:71:69:01:c7:
ba:aa:27:36:28:04:45:9e:50:70:30:65:c8:ca:6f:b5:c3:de:
e8:08:7a:c2:14:24:e5:01:5d:4b:35:6f:20:f1:ce:34:cf:0f:
2a:8b:a6:77:20:37:18:4a:73:3b:67:2e:ce:82:b2:3e:0f:dc:
da:b7:c0:94:8b:83:69:3f:13:ab:5f:df:90:01:e9:11:53:c7:
4a:3d:2e:68:e2:7a:75:65:a0:49:b1:f3:b8:56:45:37:92:fd:
3e:5a:1e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:15:22 2026 by rpki-client