Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
File: ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json)
Hash identifier: s9uLENh2JL9v7G12WbIu52VYJs75FpB4eRsCq6SErOw=
Subject key identifier: B7:A8:56:1E:84:55:9E:67:6C:73:49:08:C1:CD:81:75:9E:65:58:78
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial: 01A0C369845E4EB8534CBCE88981111F8BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 10:01:07 +0000
Manifest this update: Mon 21 Sep 2026 10:01:07 +0000
Manifest next update: Tue 22 Sep 2026 10:01:07 +0000
Files and hashes: 1: LT7SpeHVHrImIlmvmDypryVJsMA.roa (hash: UY3Bc5Ii8P52rm9NhIsYSUCYO4P4gv1+uleYch2vT5A=)
2: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: U+L5Hmvvr6deywp5COP2wifjzdWyHZmad3kemktbMW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:84:5e:4e:b8:53:4c:bc:e8:89:81:11:1f:8b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Validity
Not Before: Sep 21 10:01:07 2026 GMT
Not After : Sep 22 10:01:07 2026 GMT
Subject: CN=b7a8561e84559e676c734908c1cd81759e655878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:43:1d:e1:62:93:e6:8d:84:7f:56:bf:3c:81:
57:d2:bc:61:af:46:b7:56:50:ce:ae:21:60:77:6b:
38:08:5a:6a:d5:12:25:6d:e4:01:d6:b7:e9:78:4a:
c9:70:39:ce:9a:5f:a6:d8:70:c9:77:40:51:ca:f7:
ba:b9:6a:6a:e2:2c:ea:89:bd:6c:b2:2a:af:55:98:
12:c0:06:f4:9d:59:ab:f4:4d:ba:34:8f:81:9c:3c:
eb:3e:4e:6f:57:5f:cb:ca:6d:36:4e:08:0d:d7:52:
5d:5d:21:cf:13:39:d9:7b:01:15:23:19:05:9e:dd:
1a:4e:29:c0:71:72:dc:7d:d9:40:22:10:bf:e1:21:
be:f2:fd:92:66:d9:8a:c3:a4:af:eb:ec:2f:7f:d0:
05:0d:c5:37:5b:d2:e6:ae:c6:df:88:28:bb:78:db:
e8:51:15:d0:c8:e0:9a:74:0a:26:62:dc:4a:c0:f2:
14:22:d5:f3:bf:2b:d7:39:29:b9:de:39:3b:52:ff:
d3:3e:ac:c8:c5:fb:97:c8:43:92:01:63:cd:af:59:
59:79:c5:ee:ac:f1:5e:0f:f1:36:8e:cf:a5:6a:ce:
20:c3:aa:43:2f:67:2b:7d:45:a4:1a:3f:f5:f0:33:
b2:77:72:ef:17:cd:f5:42:75:45:97:fe:1c:75:8f:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A8:56:1E:84:55:9E:67:6C:73:49:08:C1:CD:81:75:9E:65:58:78
X509v3 Authority Key Identifier:
keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9c:af:87:37:84:f0:0d:83:2d:95:ae:ca:c7:f7:f9:4a:dd:
35:f8:eb:95:29:e3:ad:cf:cc:bc:73:87:47:5a:ad:16:f5:c7:
b6:bb:52:28:3f:7a:8f:b0:e6:41:a1:42:4d:4c:1c:a8:7b:26:
ed:90:1c:26:90:4a:1b:09:58:53:00:f0:67:b7:b0:85:43:c8:
ce:0c:58:3f:d2:5b:50:1b:61:04:fa:ee:49:72:44:e2:43:b6:
2d:15:06:33:3e:f4:f0:08:75:68:76:5f:cd:f1:aa:5c:f7:a9:
05:b1:cd:30:12:7f:c9:28:1d:45:34:12:6c:7e:c7:3e:66:72:
55:93:f6:f2:75:2c:58:62:16:68:07:98:7a:4e:37:fe:9a:de:
a5:1e:76:1a:7b:7c:61:34:6f:c3:5b:72:34:3c:59:96:4b:06:
10:e1:a2:2d:10:fd:69:03:4f:17:92:3d:7f:36:88:d4:2d:33:
0b:c7:34:7a:a8:64:d6:9e:81:16:3f:fe:11:ba:81:33:95:ec:
2b:7a:ed:f5:5e:31:94:49:1a:67:38:a4:bc:3a:41:47:fd:93:
58:a7:4e:da:c1:e3:5d:90:66:43:d8:95:5d:69:8c:da:48:e3:
1f:d0:63:33:28:04:5a:62:0b:e5:9c:d0:e0:0f:1a:b9:23:b7:
ee:d4:ad:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:08:39 2026 by rpki-client