Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
File: zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json)
Hash identifier: QVI26cHLPlqvm52SNYahAxqv4JRvirrQyF7tDBOfxjk=
Subject key identifier: E9:7E:C8:0C:87:9F:B8:7B:E1:CA:65:2D:91:58:3F:E9:23:D3:57:62
Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
Certificate issuer: /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Certificate serial: 01A08AC2F4685FE70426F6C957A070D1C6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
Manifest number: 0BB8
Signing time: Thu 10 Sep 2026 10:00:27 +0000
Manifest this update: Thu 10 Sep 2026 10:00:27 +0000
Manifest next update: Fri 11 Sep 2026 10:00:27 +0000
Files and hashes: 1: VO_sy6lKNExx4MzaK89ZPuk6eio.roa (hash: ECDK2vLnh8ZsV57MTxVkPJ7GlNwC4JIO9uqNonE5Yrs=)
2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: jyq8taMPjyO0/2H2gbJ86ndMZM2RxngS3Yn74zuG3XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c2:f4:68:5f:e7:04:26:f6:c9:57:a0:70:d1:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Validity
Not Before: Sep 10 10:00:27 2026 GMT
Not After : Sep 11 10:00:27 2026 GMT
Subject: CN=e97ec80c879fb87be1ca652d91583fe923d35762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:f5:2d:08:b4:6c:26:fa:b4:f9:68:44:48:
0d:44:42:d6:2e:92:ed:38:67:e7:53:17:11:4a:45:
b7:03:41:55:b0:3d:f7:20:2d:04:90:94:d7:45:18:
fa:96:13:e7:b7:c4:98:56:11:ad:c4:75:75:d2:13:
39:e0:b4:17:7b:c1:f3:b7:34:ec:9b:6e:4f:04:38:
e2:32:5c:97:6d:5f:d9:0d:7e:fb:6e:1f:9c:4f:27:
0a:98:f5:d7:b8:1e:7c:a4:70:18:d5:dd:a9:1a:7e:
6d:9a:a8:9c:22:fb:90:4d:92:c6:60:93:e6:b6:84:
12:ef:1f:b9:e8:ec:83:dd:13:9e:93:1e:5c:16:0a:
ee:60:43:55:f5:73:e6:55:60:c9:67:8c:0d:8a:49:
62:7c:e4:6f:29:41:46:1a:7e:09:34:09:16:a3:34:
1e:74:4b:84:05:12:5d:92:f3:1c:6a:ab:49:aa:4f:
74:a0:7e:42:ee:a9:7a:05:b5:81:ae:bf:79:be:e2:
55:40:f3:28:52:3d:0d:8d:10:13:b2:13:6a:7c:4c:
a0:d9:12:44:f3:39:75:13:9c:c9:ac:51:68:23:aa:
b9:f4:99:5f:e8:ab:52:f8:f4:bc:c5:33:37:51:5c:
93:f8:25:44:09:c3:33:87:30:6c:70:c4:98:8d:fd:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7E:C8:0C:87:9F:B8:7B:E1:CA:65:2D:91:58:3F:E9:23:D3:57:62
X509v3 Authority Key Identifier:
keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:db:69:92:ca:12:09:82:fc:92:be:71:99:31:4c:9b:8d:2f:
cf:5f:87:73:cf:7a:1f:03:01:2c:c6:43:d5:d8:b3:8a:e7:b5:
8f:76:08:4b:10:67:17:bb:17:70:f0:98:38:42:37:17:09:90:
c0:fa:68:03:d4:a4:6e:68:b3:0f:49:11:c5:7d:6e:6c:8b:4f:
9c:fe:79:9e:51:b8:0f:57:df:6a:6c:3f:84:63:d0:b5:d9:c8:
3f:7f:50:74:3e:cf:50:5f:57:af:fd:69:13:32:12:a5:3e:d5:
2a:ab:63:03:16:9f:6c:e9:83:a9:f5:6e:95:16:23:c4:24:e8:
e0:30:d4:b2:4e:6b:3e:6d:44:e2:37:3f:83:a8:f5:9b:ae:c3:
fd:48:e7:7e:a7:e6:dc:29:84:ef:ea:50:67:b0:66:84:ac:47:
0b:25:a5:d1:18:c6:8b:60:57:2c:d0:cb:34:d0:b5:18:04:8f:
26:3a:40:ea:b1:88:24:e9:fa:cc:0a:b4:af:ec:48:50:2e:b2:
74:de:ba:7d:11:05:56:4e:47:0e:4a:a4:95:09:f0:71:05:d6:
d8:04:2a:0e:65:a5:ce:c5:e8:10:dc:6d:31:0e:76:fd:ef:cf:
ae:9f:91:6b:46:4b:0b:40:5e:a7:da:d6:9c:b3:ef:7f:04:bf:
b4:31:79:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:21:07 2026 by rpki-client