Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier: ttPTwHKE4Q5rn5PsqbbQVVqge1GdQIZGZU7cU7gDni8=
Subject key identifier: 89:A6:3E:91:E1:EC:CE:5B:E1:DA:05:0E:60:7E:31:31:A0:C1:33:80
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 01A10EBAA96EF7D8526070D349BAA6B6B03D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number: 1A8D
Signing time: Tue 06 Oct 2026 01:01:16 +0000
Manifest this update: Tue 06 Oct 2026 01:01:16 +0000
Manifest next update: Wed 07 Oct 2026 01:01:16 +0000
Files and hashes: 1: 1-ar0P82ef_StXuE7zueriWBD8hE.roa (hash: u9ZMHFdbfeEonEHEjHmh9TkFg76are6Y/T2IPG1BknM=)
2: HmIJXkixJ1rahF7EYYPCTla8Klc.roa (hash: gwb50AaVi0ThYCb3TRftn7wyLBQSCU21VtQTQhMGtAM=)
3: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: Er9fYMYPzLgQfLpXYg+7sbLjtt8/DxGwAUZNmV4Xd2o=)
4: g95v2zig0ZqaQU7eeusrbdTK5G0.roa (hash: cLTgf25tE2pedm+NWY4o5xvbCdWa6GTqSbkhECMQQmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:ba:a9:6e:f7:d8:52:60:70:d3:49:ba:a6:b6:b0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Oct 6 01:01:16 2026 GMT
Not After : Oct 7 01:01:16 2026 GMT
Subject: CN=89a63e91e1ecce5be1da050e607e3131a0c13380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:5a:1b:d4:6f:3a:c1:0d:55:dc:ce:c1:09:
70:f2:b1:41:47:f9:99:54:b5:00:ce:30:cc:d6:8b:
1c:7e:76:22:2c:5b:d1:26:c1:eb:67:de:d1:c4:ef:
da:6c:4d:1f:29:3e:83:c2:f8:16:33:2e:73:2a:00:
b8:89:75:20:26:08:67:66:a8:34:f7:80:17:41:05:
4c:4a:8d:51:33:58:ce:96:bd:c3:b7:8e:3f:2e:10:
80:df:14:ce:b2:ea:cc:58:80:83:e2:67:56:13:92:
38:31:a8:ae:2a:60:42:38:7b:67:b2:2b:d1:aa:8e:
28:b6:e0:94:98:8e:41:de:91:ad:7f:da:56:6c:52:
f7:a0:c9:94:90:1a:c2:a0:3d:91:3a:d5:b9:48:5d:
d3:75:ca:f4:a4:6b:31:f0:88:49:21:32:12:d0:66:
7f:3f:c5:f8:24:83:69:29:92:08:50:27:b0:68:6a:
a1:47:61:27:60:5f:3c:08:42:1a:cb:4d:6b:af:7a:
a0:55:ba:de:7f:28:bd:bd:1c:a6:ca:fe:96:7c:f7:
6c:bb:11:df:85:e9:e0:9a:ec:02:f2:06:8d:46:c9:
f4:fc:38:ae:7c:79:37:10:77:64:a5:d5:8a:f2:51:
57:78:ff:cf:30:fc:8b:32:36:a0:83:2b:15:5d:fd:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A6:3E:91:E1:EC:CE:5B:E1:DA:05:0E:60:7E:31:31:A0:C1:33:80
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d8:1f:cd:bb:91:79:d9:05:c7:4c:5e:87:ea:07:6a:9f:b5:
2d:45:ec:67:31:71:4a:4a:1a:3c:56:64:5b:c1:7c:6f:97:75:
d9:ec:1e:8c:5b:62:f3:b8:ab:e1:db:3e:d8:69:20:60:49:6c:
a8:ba:aa:b1:51:b8:c5:68:7f:98:23:26:54:e6:02:17:26:0c:
32:8c:19:85:07:fa:c2:af:4e:61:cc:bd:c1:10:f4:1b:98:6e:
ab:b1:7b:bf:0e:0b:e1:8f:66:b5:09:d3:c8:4d:47:7d:72:63:
3e:22:13:4f:57:2d:42:7d:f6:39:01:3e:81:f7:cf:f3:3d:f9:
3a:2d:da:3d:bb:1f:93:f8:ab:76:ad:12:6a:ca:e5:ca:bc:3e:
f5:bf:c6:e6:7b:7f:7e:f7:59:66:2c:43:16:ef:ba:b4:a9:ac:
6e:34:72:a1:56:f8:4d:cb:4a:67:af:68:86:cb:02:5e:08:19:
06:96:b5:14:89:b7:c4:17:90:cd:ea:bd:0c:4c:a6:d0:f0:8c:
13:2f:6b:fa:91:fb:c2:dc:dd:3e:21:1f:e3:3e:82:77:89:9c:
61:8e:08:c2:4d:7d:97:d1:54:6f:8e:29:e7:17:a8:eb:79:2f:
8b:61:da:a2:b5:0f:2e:01:6e:4a:40:67:c2:eb:ec:6f:5f:c8:
83:af:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:26:50 2026 by rpki-client