Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: aZUYGv/EOQkeE/3G3QUAUq8unXOVTJdJYQDwrPbVy4Q=
Subject key identifier: 93:E7:29:8D:A9:4D:D7:B5:7D:EF:4F:BA:4F:9C:DD:35:F2:DB:94:BB
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 01A17C97C1451E209C068E14A5DDC2AFE6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 06D8
Signing time: Tue 27 Oct 2026 09:01:22 +0000
Manifest this update: Tue 27 Oct 2026 09:01:22 +0000
Manifest next update: Wed 28 Oct 2026 09:01:22 +0000
Files and hashes: 1: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (hash: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: norczfyVB8+cRAQjvGDIMXUUbDq3XCc6FYVm3dTgr8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:c1:45:1e:20:9c:06:8e:14:a5:dd:c2:af:e6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Oct 27 09:01:22 2026 GMT
Not After : Oct 28 09:01:22 2026 GMT
Subject: CN=93e7298da94dd7b57def4fba4f9cdd35f2db94bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:ad:2a:ef:1d:0a:a2:3e:f9:0a:fa:66:a6:
a7:b4:96:8c:93:8a:94:9c:c8:db:d7:9e:6e:a1:e6:
f6:ef:a0:21:9d:bb:a2:11:14:50:b3:a3:b0:0f:19:
25:b5:b6:ff:a3:22:87:5b:fa:fd:dd:70:55:91:a1:
36:ea:19:7c:8c:3f:21:aa:73:a3:2c:e6:c9:6f:23:
4e:c1:1b:a9:60:0a:b0:ef:11:73:df:45:60:2b:c1:
9c:0c:7c:19:c5:ee:fe:00:12:b6:53:53:be:69:60:
f9:4b:78:a4:ad:73:b6:9c:09:26:a5:18:83:27:b1:
23:d6:a5:6c:4e:5f:a3:82:14:c1:6e:24:49:17:a2:
d7:20:37:1d:60:0c:98:78:11:54:c0:0d:30:05:30:
1d:e6:8c:53:9c:10:a5:3c:04:da:5b:6f:58:9d:02:
08:38:cd:4a:68:54:2f:dd:02:f8:11:ad:33:d4:0e:
5c:00:02:2b:87:d2:bf:54:94:ee:88:07:4a:8c:5a:
8e:de:61:3a:e0:81:6a:f2:61:9f:be:ed:18:4d:13:
af:ef:f1:6a:af:b2:0d:3d:d4:15:04:08:a2:3e:b5:
93:42:f1:6a:6e:2a:c2:9f:e9:82:29:a6:d7:bd:2a:
56:b4:96:66:dc:7d:ff:be:b5:df:0c:d1:1b:b4:cd:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E7:29:8D:A9:4D:D7:B5:7D:EF:4F:BA:4F:9C:DD:35:F2:DB:94:BB
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:51:8f:34:27:d4:c0:53:fc:c0:04:06:45:ca:38:2b:11:18:
7b:24:23:fc:88:44:48:c0:40:9f:11:96:58:62:bd:92:ee:08:
1f:97:5a:0e:76:e6:b0:b6:4c:d4:e6:37:b0:18:1c:15:be:0d:
fd:72:a3:fc:95:30:74:72:42:6b:b5:91:a0:17:10:9a:ea:df:
d7:77:49:5b:9c:56:90:fc:b7:88:0f:94:2e:66:b9:6b:23:65:
92:73:c4:de:f5:3b:ce:bb:12:08:db:bb:9d:b0:6c:59:64:fd:
46:20:cc:92:66:28:c0:d7:93:db:59:72:01:2a:b0:d1:67:ea:
9e:79:65:6c:c5:2c:44:60:4d:27:57:c0:2a:a3:ee:ff:d2:be:
3d:28:54:7c:ef:57:c0:ce:9e:b7:fd:75:0d:f1:a7:f4:34:22:
88:49:0e:0a:6e:52:4a:2d:ed:54:36:7a:09:8c:e9:1a:df:38:
1a:e1:ba:a4:76:69:c3:0f:bc:57:f6:b3:ff:87:57:68:0c:5e:
b8:cd:f0:54:a6:61:66:b4:59:94:9b:1e:b6:eb:5a:5c:3a:7e:
d7:41:98:43:7a:35:10:46:8c:79:a1:f2:d2:b0:2c:d9:ad:42:
67:eb:62:9e:a8:a2:59:50:08:cb:9f:c4:37:e0:f0:7c:94:76:
2d:a4:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:50:59 2026 by rpki-client