Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: 80mHdYQ/FUX8bDkfVOEB4DkAVtXJADq26T5mUXHNEiU=
Subject key identifier: 6B:D1:1A:36:65:8E:37:33:A3:61:F3:D9:B7:C8:F8:62:53:57:02:D7
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 01A0E2869049ECCD48102D2ED6604CA5FB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 0897
Signing time: Sun 27 Sep 2026 11:01:04 +0000
Manifest this update: Sun 27 Sep 2026 11:01:04 +0000
Manifest next update: Mon 28 Sep 2026 11:01:04 +0000
Files and hashes: 1: hS5Y9HzX910k9UpkCXgXK-DSHdc.asa (hash: 3kQjrGqXqHnzL6l9Be46QjhfSNn8qYwPe+6rsfQM6lE=)
2: sQDcvzwfINZL1YKhOjuNrTumwws.roa (hash: 1SADRpnWZPKf4KWSJGPvG1rU1NGMXTSVZgSGEdq16/Q=)
3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: ReqAKXg75oELc2OYInxeywKtc7qm/x4F/T+/L9fzYNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:86:90:49:ec:cd:48:10:2d:2e:d6:60:4c:a5:fb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Sep 27 11:01:04 2026 GMT
Not After : Sep 28 11:01:04 2026 GMT
Subject: CN=6bd11a36658e3733a361f3d9b7c8f862535702d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:8b:a2:1b:f6:e2:5b:40:fd:2d:42:e4:f1:
a3:f5:73:9b:e9:aa:ac:cb:a7:1b:83:6c:1f:a4:13:
75:e0:92:70:32:71:5e:e2:96:a8:28:fa:f5:0a:06:
35:00:c5:64:2a:0b:b5:42:b6:22:c6:08:54:ab:71:
99:13:ef:7e:c8:c1:1c:e3:f2:a4:e0:c4:51:85:a7:
81:93:a1:45:b2:92:21:ad:58:b9:1a:7d:3a:a5:98:
33:a2:8a:b5:b5:45:e1:02:01:48:74:9b:de:02:7c:
1a:60:99:c3:50:5d:3b:49:7d:12:78:78:d8:c6:45:
b7:34:b3:c6:a8:ed:23:05:ad:3a:e5:ff:1d:ed:2c:
5e:74:03:f8:e4:7d:d6:e3:eb:a8:a2:01:35:c8:8a:
16:ba:88:87:c0:d7:7b:ef:ba:24:63:6d:61:7e:1b:
15:22:20:1f:b7:9c:2a:26:89:a0:6e:e6:66:3d:3f:
e2:ab:0f:71:b4:e1:c6:c2:d6:c5:23:a6:8d:63:4e:
8f:1a:13:0b:15:3c:96:c2:10:4a:98:db:b7:07:98:
a5:4d:3b:09:17:c0:9b:2f:6a:b4:31:93:40:a3:a1:
5d:18:64:92:ef:2b:ea:95:4a:d0:de:35:c7:b8:e6:
46:5f:20:7b:fb:d7:c3:f9:57:e6:28:5c:9c:c7:4d:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D1:1A:36:65:8E:37:33:A3:61:F3:D9:B7:C8:F8:62:53:57:02:D7
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fd:c6:45:47:ff:5e:8e:03:f8:35:41:29:79:c7:e2:a7:c6:
c0:da:2a:3a:78:28:a7:fb:ad:f7:36:18:89:03:60:87:8f:0f:
bb:d2:25:29:b7:20:58:16:87:d6:bf:ea:2a:35:15:37:4d:8d:
24:74:0f:b5:13:ed:5a:17:cb:b7:ec:83:1e:86:5e:f2:4d:02:
01:8e:3e:b2:95:64:07:5a:19:13:d2:02:0e:cb:52:cb:04:21:
b4:70:68:be:00:47:27:14:a6:1f:fa:ac:0e:f0:42:19:63:f8:
28:d0:7d:25:31:df:b2:89:95:94:39:91:64:25:a2:ac:21:e3:
87:0c:b1:90:69:ae:de:61:ed:97:59:95:46:99:dc:10:77:c2:
7f:16:38:c9:53:14:ad:ad:59:ed:a9:9e:8e:cc:98:45:93:a5:
cf:61:43:eb:10:fd:77:85:4f:b6:be:6e:d2:e6:64:5b:5e:a7:
99:28:23:a5:ad:32:74:d6:d4:16:1b:24:b9:c8:cc:19:04:50:
0e:a7:2b:b3:a6:f9:5c:de:6d:14:8d:ab:fa:f8:20:d1:5e:e0:
68:7b:94:5b:ae:a6:7a:36:89:e2:b5:fb:ba:b1:2d:eb:c3:e6:
95:28:a8:83:99:65:9c:09:81:7d:df:20:84:79:cd:30:b3:7d:
7b:0c:10:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:43:27 2026 by rpki-client