Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File: zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier: ULZ28Y9Tr/lWQAzjsBaJuTqQOJ6RjjNlGh/1OdegE/M=
Subject key identifier: 5D:63:03:0B:44:D9:43:E0:E0:F0:4C:6E:D9:67:29:4C:2D:4A:5A:49
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer: /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial: 01A0B688F2DEED9DD2BB3D5940310BA8BB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number: 0609
Signing time: Fri 18 Sep 2026 22:00:23 +0000
Manifest this update: Fri 18 Sep 2026 22:00:23 +0000
Manifest next update: Sat 19 Sep 2026 22:00:23 +0000
Files and hashes: 1: CVwCEsbzumpXgEnKDDCCAaIDrYM.roa (hash: lxu8mh9bo97HPFI+56oJ6vzMl5ukNpSkTrJqrOGog30=)
2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: nkqy9CM7z3LPIfkLppKVI+HtkyK4PW1KLfu7U6x99FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:88:f2:de:ed:9d:d2:bb:3d:59:40:31:0b:a8:bb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Validity
Not Before: Sep 18 22:00:23 2026 GMT
Not After : Sep 19 22:00:23 2026 GMT
Subject: CN=5d63030b44d943e0e0f04c6ed967294c2d4a5a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:94:c5:e9:01:25:ed:0f:7c:01:78:9b:85:
ee:af:a8:ae:db:2f:b2:71:d6:8e:23:d0:44:bf:c2:
fc:a2:12:4b:c4:84:3c:8e:38:c7:0f:ac:1b:0c:fe:
f6:48:52:38:68:d4:06:0c:b6:f9:ef:64:0e:a7:37:
00:43:41:96:34:09:93:a6:43:b3:fb:ed:ab:4a:97:
7e:f7:cc:c4:7f:ee:5a:61:66:c4:fc:f7:24:76:24:
45:cb:e5:b5:9e:d6:c6:b8:fa:08:c0:d0:a7:de:08:
49:22:97:8f:63:fa:95:5c:a9:ff:ea:6b:ab:28:cc:
27:e6:24:19:f5:3d:ae:98:1a:2b:bf:45:ac:4e:99:
06:2e:d2:7a:48:58:ff:44:34:5d:64:8b:9d:10:e7:
22:ba:df:b2:b4:e9:d2:60:77:eb:83:b7:50:68:d3:
2c:19:01:75:39:82:63:75:14:d3:6f:36:76:0a:36:
5f:1b:bd:7d:2f:1d:33:31:82:d2:8a:8b:70:4d:97:
0d:9c:dd:cd:3a:d0:84:db:80:48:ee:a4:47:e3:3f:
ee:90:e1:d9:b6:fb:80:f3:bb:23:f1:bb:72:93:97:
26:76:82:eb:7a:85:22:c7:ab:54:4f:f8:9b:a2:c0:
60:60:23:cf:62:73:d1:e8:df:f1:ee:e7:e1:3e:b6:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:63:03:0B:44:D9:43:E0:E0:F0:4C:6E:D9:67:29:4C:2D:4A:5A:49
X509v3 Authority Key Identifier:
keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:17:aa:b3:f6:6b:69:70:77:08:29:82:c5:9c:4a:87:94:14:
3f:28:2b:95:92:06:c4:fd:9b:51:ad:74:76:53:cc:3d:e6:04:
82:1a:b1:7d:a4:52:19:85:10:7e:f5:a8:8e:98:b4:b6:37:23:
c0:25:53:5d:55:80:73:33:1f:ed:72:5c:75:b7:c8:d7:cc:16:
36:77:70:0d:a0:e8:0a:b6:ec:49:e2:1a:b5:b2:d7:f4:cd:98:
9c:72:37:8f:eb:8c:dd:2f:6e:84:c1:f8:2f:06:c3:ae:cc:87:
53:3c:eb:28:6d:a1:db:35:57:38:e4:c8:3c:4f:85:06:49:9d:
50:f1:e4:49:c7:a2:c7:e8:24:27:8f:34:99:38:08:40:d0:e8:
57:b2:b2:80:09:f7:3a:14:a4:4f:9f:fc:ce:c5:24:07:34:a3:
8b:c9:f6:60:7e:f6:8f:4b:42:ef:90:93:1b:f3:09:6a:93:d3:
d7:57:40:09:41:f1:7a:81:fc:4c:66:74:2d:42:dd:7d:f5:9c:
13:5b:54:61:e4:01:58:a0:c8:16:3f:ba:ac:83:35:db:59:1d:
a6:ea:c5:71:98:38:15:6e:70:07:8f:42:d5:09:42:db:a0:1f:
9a:1f:7b:9e:45:d3:9b:30:b5:b9:11:1c:3f:16:a8:95:40:cc:
67:4f:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:12:32 2026 by rpki-client