Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File: zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier: pTuEco1NApv0v1GLzvshqEyjthFgYky175zfdP0hLl8=
Subject key identifier: 6B:7A:16:43:F9:BB:33:52:C3:97:E1:28:4B:E9:19:DC:4D:AD:42:1B
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 01A181870E41D8F8934BF231F8EF3C798D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number: 13C3
Signing time: Wed 28 Oct 2026 08:01:14 +0000
Manifest this update: Wed 28 Oct 2026 08:01:14 +0000
Manifest next update: Thu 29 Oct 2026 08:01:14 +0000
Files and hashes: 1: 1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa (hash: uFFlZsAMKLJKDEktW5ybjbZi8RHcBaE5UQZ62izVnr4=)
2: G9U4X93rXqstWDjqCmr74O0MOOc.roa (hash: lHIU6yFEQWHJAGlwWMO/pP3VoRev0tS4Byvjv7Nl/Nk=)
3: SV_A5OMf5Dv_YVGf3i03i121qDE.roa (hash: Yx1VNJorHPI+3bEwTwwZMtNZ1vpLF6jyHjPFF9j0vFs=)
4: u0VefA4FNPAM3OaDOe1uGO8G7GM.roa (hash: L/EGbgrpKOwV4dXB0O77kAg3sNSvZROrNTY/PmdUGpM=)
5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: K2eWrtnTl74d0wBCf4MCUISwdNgBqgUYrT5Imleg0js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:0e:41:d8:f8:93:4b:f2:31:f8:ef:3c:79:8d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Oct 28 08:01:14 2026 GMT
Not After : Oct 29 08:01:14 2026 GMT
Subject: CN=6b7a1643f9bb3352c397e1284be919dc4dad421b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:4a:ec:04:c1:0a:cd:e1:01:28:72:d8:3e:
57:14:32:18:e9:3a:5b:fb:4b:1f:aa:ae:6f:82:29:
0d:ad:71:5d:0a:85:ce:00:0b:67:77:ff:02:48:45:
5b:fa:a5:f7:5a:9d:49:a4:c9:39:32:e6:4b:f1:0b:
28:9b:a8:12:bc:2a:76:4c:fd:0d:3a:a4:5f:00:0e:
5e:e4:52:cb:78:f0:ea:54:37:7e:c8:c1:14:81:7e:
5e:c2:81:f7:bf:c9:22:88:ea:06:c7:9e:1e:bd:74:
7d:1f:df:21:b8:2e:21:43:0c:43:49:d9:07:cb:15:
52:cc:d8:00:e7:0d:72:43:92:23:d1:01:a3:bf:8e:
51:57:4c:5b:20:9e:f0:e4:4e:4a:42:84:34:24:5e:
bb:3e:93:27:7b:4b:47:92:f2:0b:19:37:2a:b1:7d:
4a:ac:c2:a5:18:8d:fb:ff:0d:63:31:ff:54:d1:01:
0c:61:a7:f1:a5:7e:05:6d:49:32:21:a7:fb:48:ee:
46:ac:35:42:2c:22:e7:91:d5:81:fc:d7:17:e0:9b:
11:c3:84:b4:04:5e:87:44:52:7f:45:cd:20:9b:7a:
ed:c8:ed:4c:08:cb:e6:fe:aa:8b:21:0e:c6:c7:e9:
26:b5:56:a6:23:5d:56:89:5c:a4:5c:c1:e0:88:52:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7A:16:43:F9:BB:33:52:C3:97:E1:28:4B:E9:19:DC:4D:AD:42:1B
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:03:9c:9c:65:6d:9f:f3:7c:0b:f9:ed:fb:e6:b7:4f:09:9e:
79:c9:35:8c:22:92:97:ca:3e:fc:0c:18:2f:b3:47:37:48:a1:
85:88:5c:1d:f9:e4:18:ee:83:4b:5b:2b:bf:56:1b:e6:30:d7:
3f:a5:e0:69:53:47:95:7f:28:9a:5e:47:50:f4:89:55:aa:ec:
de:92:45:a0:6b:af:cd:df:ef:b9:7a:e2:1a:79:2e:20:ed:ea:
c6:24:a0:58:9b:63:8b:97:70:59:e0:12:50:07:c2:03:d1:24:
55:23:9b:28:e0:7e:d7:76:81:d6:e3:75:08:dd:4e:2f:03:d5:
64:2b:91:86:6b:bc:23:76:36:4c:c9:47:fe:01:7d:f5:95:38:
87:1b:56:a5:b4:0a:e0:0f:90:0c:f1:72:3c:ec:ed:9f:22:54:
16:91:4a:db:43:55:40:11:e6:54:08:c2:72:9a:54:aa:f0:14:
37:bb:9f:e8:84:b0:6f:d3:09:10:c3:ee:d2:de:33:75:9c:f3:
b0:cc:b5:ad:8f:2c:7a:83:bb:f7:78:79:86:e0:d4:94:92:b1:
f0:99:a3:b7:fa:de:21:61:d3:5b:8b:b1:e5:59:4f:c5:87:b5:
5d:df:07:45:01:4e:1b:01:60:5d:db:7d:e5:09:46:89:6c:3a:
94:50:69:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:54:48 2026 by rpki-client