Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: CknoWwFfvFde+tyB3EqxUEdFnOg3A+MuKqnKgpamixE=
Subject key identifier: F1:F2:FB:16:77:03:B2:7A:28:3C:70:44:26:D5:94:3F:09:76:19:57
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 01A17E85CA5B09F0B58986AE2277E2B9AAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 18:00:59 +0000
Manifest this update: Tue 27 Oct 2026 18:00:59 +0000
Manifest next update: Wed 28 Oct 2026 18:00:59 +0000
Files and hashes: 1: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: khy23l0HgP4rsp+LV3mm7MuggcikGE+8zN8DdB2TVds=)
2: jq3mq-50R-JOu-sxSGPaEm55e08.roa (hash: taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:ca:5b:09:f0:b5:89:86:ae:22:77:e2:b9:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Oct 27 18:00:59 2026 GMT
Not After : Oct 28 18:00:59 2026 GMT
Subject: CN=f1f2fb167703b27a283c704426d5943f09761957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:09:2e:a4:de:c0:22:f4:47:1c:5e:c1:b3:
3e:4a:81:0e:83:fd:e5:79:dc:ad:1b:4d:79:92:0d:
4f:60:07:5b:db:8e:11:78:64:b9:d5:5c:b8:a7:63:
ba:4c:5a:e0:1e:ed:71:0f:08:6f:d9:ff:ed:c4:f2:
04:5e:bf:38:81:c0:34:ed:50:0a:2d:81:15:92:29:
90:4e:21:b9:85:f1:fa:53:fb:b5:b8:43:03:70:74:
16:b5:b2:06:1a:66:d0:41:1f:18:d5:17:62:ee:a3:
73:4b:47:7c:b2:24:7a:04:8b:a3:38:b3:65:2d:b1:
8b:ea:a3:3a:4f:16:32:4a:77:6e:95:b6:72:88:82:
ed:ba:3e:53:60:3b:1c:8c:cb:b5:fc:0a:85:e3:8d:
65:61:fa:bb:e0:f2:90:01:9c:b6:2c:59:13:c8:c1:
4b:d0:e1:58:f9:d2:92:62:a8:e1:f3:44:f7:bc:92:
b1:87:72:ec:58:ff:a6:13:44:0f:bb:57:4b:15:a1:
3a:6a:06:00:b2:c4:1c:93:86:b4:ff:9a:cf:24:f1:
29:5e:c2:67:4b:e6:d3:8e:28:45:0a:61:57:46:d9:
da:9e:fe:da:8d:61:aa:8e:af:67:4e:59:63:85:fc:
b7:68:19:8a:2c:65:27:29:b1:37:ea:3e:f8:c7:0f:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F2:FB:16:77:03:B2:7A:28:3C:70:44:26:D5:94:3F:09:76:19:57
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3e:2d:ee:7a:72:10:b2:a9:b0:42:ef:bd:a0:1a:6b:fe:5c:
b9:f4:09:01:5f:64:1b:f5:1b:30:36:c9:40:5e:5f:cd:83:0d:
7c:3a:43:75:35:c9:30:9d:b0:6b:ba:f9:bc:6d:a9:f5:4e:ef:
e1:c4:fe:13:43:84:10:db:9b:66:54:7f:c7:48:3c:cd:a0:7d:
7a:11:6b:77:4a:c5:a6:6b:f9:c6:c0:7f:f6:0d:9f:37:fe:33:
02:04:f3:03:e5:66:bf:9e:f7:ce:24:ff:60:79:e7:6d:20:f8:
8e:80:8f:84:5a:38:53:3a:9f:cb:ba:a3:5d:a2:d4:35:60:29:
2b:d6:1c:9b:85:c0:c7:2a:c7:00:04:5d:6c:9f:4c:b0:82:42:
2e:6f:6d:ae:83:b8:92:68:00:aa:77:40:cf:f6:73:74:62:e4:
93:46:f3:52:34:dc:ba:5c:cf:5b:d5:09:f7:7a:61:81:b9:1a:
a3:c8:48:d3:09:f7:10:77:1b:41:c2:e2:0b:a9:8c:01:d6:c4:
12:0c:f8:45:6c:a0:20:1d:92:e5:60:7a:93:61:64:d9:93:9a:
4b:69:ff:44:77:6c:4c:c9:4a:e6:a7:fd:cb:f9:de:76:bf:05:
fd:ea:24:05:7f:49:17:b5:7e:ac:14:41:1d:24:b8:a6:e5:79:
39:f8:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:49:15 2026 by rpki-client