Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: cKo4DPrCkYpSu2Ny7Njt7O/xFqeIMTTT+wu4uwaYxvg=
Subject key identifier: 0C:BB:A2:D0:45:A4:A6:0D:5D:87:AC:DA:F5:0D:8A:92:F8:37:5F:09
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 01A08E6A54DA24EAB9A8E88755395408FC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 161D
Signing time: Fri 11 Sep 2026 03:02:08 +0000
Manifest this update: Fri 11 Sep 2026 03:02:08 +0000
Manifest next update: Sat 12 Sep 2026 03:02:08 +0000
Files and hashes: 1: LKFdqAxekSyGKQc0Md8_7Xelo-E.roa (hash: hzROPb2XKPcBYg2mXSPUmlxSomnvcQdFm4oNZy6YiVs=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: rxkda6mNYTm0glehysbYyyFpSIxW90rsXdOo04Yz+C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:6a:54:da:24:ea:b9:a8:e8:87:55:39:54:08:fc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Sep 11 03:02:08 2026 GMT
Not After : Sep 12 03:02:08 2026 GMT
Subject: CN=0cbba2d045a4a60d5d87acdaf50d8a92f8375f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:09:72:49:23:97:cb:63:69:1c:0f:12:2c:
e3:e6:6c:fa:ff:cd:c7:5b:b6:87:89:8c:87:cb:69:
ac:0a:8a:84:09:0b:ef:c3:03:39:66:07:f5:dc:8b:
a2:75:96:81:32:2b:fb:60:64:19:01:41:9b:a4:bb:
71:4e:fd:f7:8c:b0:03:bf:b2:51:e0:fc:48:ff:47:
aa:90:57:9f:69:83:98:af:8e:b2:3d:ea:45:50:1b:
bd:40:39:6f:65:5e:66:1e:01:0d:d3:11:78:cd:11:
6f:94:54:5a:9a:38:eb:38:a8:32:0d:c0:73:84:5d:
0b:ac:6d:ca:a0:2c:5c:bd:bb:a0:3a:e2:18:99:4b:
e0:e2:d7:99:d1:8e:b9:b2:24:c2:d3:30:e1:6e:ff:
fd:4e:58:d1:53:4f:53:06:4c:df:ab:64:0e:4e:e1:
68:79:4d:d0:1b:c0:73:fc:ef:17:c5:52:45:f2:f7:
8d:ad:70:f6:77:48:17:d0:e0:a9:05:07:81:14:7d:
aa:af:a4:04:8b:22:57:1e:6b:30:6c:c5:fe:41:a1:
48:a7:a6:8c:28:bc:56:ce:f9:0a:7a:7c:8f:b2:5b:
a5:3f:9f:69:51:b2:af:9e:02:ac:94:c6:e4:af:85:
5c:b5:5c:4d:07:d5:ed:c3:b7:39:f1:9e:e7:b3:d3:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BB:A2:D0:45:A4:A6:0D:5D:87:AC:DA:F5:0D:8A:92:F8:37:5F:09
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dc:3f:a2:29:c4:8d:05:38:85:c8:b0:0b:c4:cc:32:93:65:
07:13:4a:1c:1a:f4:1f:07:a7:3e:c2:7d:5b:7d:70:0a:54:2e:
33:d1:7b:cc:4e:3c:c2:79:d9:23:31:76:d0:61:b7:7e:2a:eb:
ae:23:1b:dd:b0:e6:79:17:d3:f2:29:4c:eb:9d:82:7c:45:f6:
4b:cf:df:7d:35:8c:4e:b6:88:f9:49:c6:12:b0:07:2c:0c:44:
90:76:61:70:f7:f0:a6:58:11:a1:37:a3:95:47:1a:80:91:8e:
1a:f6:4a:07:c4:5a:66:a2:d1:67:e0:99:67:fb:a7:41:f1:a3:
f4:76:6a:93:7b:11:e8:0a:5c:c3:bf:8d:ad:6d:2d:07:0f:df:
2d:d3:05:fe:d5:25:ca:86:8c:20:6d:f4:83:e2:6e:3d:ed:d0:
68:c1:c0:c5:22:52:d5:55:5c:23:54:ad:e9:d7:2d:f2:96:08:
34:1b:87:8a:d9:87:c5:25:bf:c2:9b:e7:d9:69:17:ee:f1:ac:
fa:d1:9e:56:53:b8:83:48:2e:d4:c4:7f:8b:16:06:a7:ca:0f:
58:2a:cb:9c:67:10:ef:31:a0:e2:a1:d7:46:ae:2c:bc:d6:17:
67:17:08:5b:38:9c:b7:91:72:13:e7:d1:6a:3a:b3:b8:27:92:
a5:0d:05:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:27:52 2026 by rpki-client