Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: TmFvyscPaC4nSPc+2Uyz7TXMrrBzLvt8QDlzWhWWJ18=
Subject key identifier: 2D:18:68:1A:73:81:C9:7F:BE:25:38:B0:71:0A:E6:8E:17:2A:3C:00
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 01A0D26EBF222473DBCF4F7FFA824DBDFE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0A81
Signing time: Thu 24 Sep 2026 08:01:08 +0000
Manifest this update: Thu 24 Sep 2026 08:01:08 +0000
Manifest next update: Fri 25 Sep 2026 08:01:08 +0000
Files and hashes: 1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: B+Kd10hUYWvR3o8dcLn6p48LL4kTel6/1YkuKiE/Q20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:bf:22:24:73:db:cf:4f:7f:fa:82:4d:bd:fe:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Sep 24 08:01:08 2026 GMT
Not After : Sep 25 08:01:08 2026 GMT
Subject: CN=2d18681a7381c97fbe2538b0710ae68e172a3c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6e:2a:c6:49:f6:58:4e:1b:f4:3b:b9:96:f1:
52:e7:db:0e:52:44:0e:1d:c2:6c:d3:1d:74:ac:07:
bd:24:3e:bf:95:23:87:92:9f:9e:a3:d0:00:dd:b2:
64:f6:f0:4a:88:4f:8b:e8:a7:2f:ab:f2:3d:79:36:
2d:25:68:b6:2d:a0:54:a7:a4:80:63:18:93:ec:97:
85:6e:87:3d:50:65:b1:e6:1c:5c:68:17:02:31:3e:
20:e3:54:26:55:43:7d:6d:c3:f1:d2:1d:c7:b3:04:
17:a4:89:54:96:5f:01:d1:8b:e9:49:69:1c:45:6d:
e3:30:fa:d1:e6:d2:10:bc:f8:aa:b6:ec:59:f6:5c:
57:f3:ce:37:25:bf:f7:dd:5d:37:54:17:7d:17:ba:
26:11:79:77:e1:95:8e:4e:89:f2:7a:1f:9e:86:5d:
5a:a6:cc:44:83:cc:be:15:dd:55:a6:c4:3b:93:9f:
5b:42:49:31:b1:17:a7:7a:78:79:19:16:75:e7:de:
a3:41:29:76:da:e5:64:63:85:ac:33:a4:f0:14:3b:
03:a7:f5:b9:5e:fb:23:68:06:02:dc:8c:ea:17:cc:
d0:80:7f:04:a6:0c:ba:3b:99:af:0e:ea:a8:0d:3e:
d1:05:e2:61:0c:ef:91:07:83:61:fb:89:87:d8:fc:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:18:68:1A:73:81:C9:7F:BE:25:38:B0:71:0A:E6:8E:17:2A:3C:00
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2c:0c:e7:c2:e9:12:31:b2:0d:28:8a:7b:c6:f9:92:88:8d:
00:6b:e3:26:85:44:ae:63:9d:f5:75:26:63:00:3a:05:6e:25:
1e:3a:23:6d:17:8d:8d:cf:6c:71:d3:54:cd:ed:64:1f:fd:d3:
0c:c8:72:e0:40:8d:06:01:a0:19:69:18:14:c4:e2:04:14:b5:
5f:22:52:c9:93:95:10:f3:80:d3:c5:a7:de:03:c8:45:29:40:
c3:0d:fc:12:fc:17:06:90:c6:94:39:84:00:2c:93:89:d0:2c:
9b:c7:3f:24:38:7e:ef:8d:a5:91:7a:b8:f6:32:ce:c4:a5:e9:
64:c5:97:b1:d2:81:77:93:37:5c:6b:6c:ea:43:f1:9c:db:d3:
62:ec:e4:a7:dd:7e:4c:f9:14:0c:0b:fc:8e:34:22:d9:d1:16:
84:12:f7:72:66:22:56:f4:78:b2:49:74:78:d0:c0:cd:a0:41:
3e:df:7c:49:d7:b4:53:8b:af:39:b4:44:8d:b4:ad:eb:cc:02:
78:d0:a7:78:fe:44:d2:19:7c:90:9a:f2:5c:ab:c9:83:29:fa:
f5:12:8d:52:ef:9f:4d:a5:4b:c5:78:81:d2:a8:44:47:62:a7:
65:70:44:e2:60:ed:a1:74:55:7a:f2:89:4f:2d:e1:a7:79:d1:
d5:f2:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:50:41 2026 by rpki-client