Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: TUeijF/Ie2N6JOVje0iAhjL5LKIKX36FaUqTTHRMayg=
Subject key identifier: 8C:CE:D2:4C:55:D1:59:BA:0F:F6:E0:3D:1B:F4:7C:BA:9A:D9:5F:95
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 01A08A8CA21C40DF7F4229B24C257B091A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 0A00
Signing time: Thu 10 Sep 2026 09:01:07 +0000
Manifest this update: Thu 10 Sep 2026 09:01:07 +0000
Manifest next update: Fri 11 Sep 2026 09:01:07 +0000
Files and hashes: 1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=)
2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: iAFuCj/yYAgTcoko+fK/4eH2A+IQChnoAq0pqBqIldc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:a2:1c:40:df:7f:42:29:b2:4c:25:7b:09:1a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Sep 10 09:01:07 2026 GMT
Not After : Sep 11 09:01:07 2026 GMT
Subject: CN=8cced24c55d159ba0ff6e03d1bf47cba9ad95f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1c:c8:75:16:10:bb:31:df:a4:5f:ed:35:b8:
df:98:7b:db:7d:4a:ff:fc:46:a6:5c:b6:3c:7e:8a:
72:51:79:13:58:70:9d:12:3b:80:e2:51:ff:73:2c:
e7:48:08:c7:2a:3e:e3:fb:a5:85:10:e2:bf:df:e4:
00:74:cd:59:60:00:90:d4:d4:24:c1:ed:92:14:24:
30:83:71:19:79:db:2d:e6:c0:06:9c:d9:05:6d:cf:
98:5e:15:2f:a4:03:d7:67:84:0a:1c:dc:ed:06:6e:
a0:fe:56:49:05:13:22:19:ea:5a:97:ea:a5:b7:a1:
04:37:9b:35:dd:49:76:fa:a4:b0:49:f3:d6:71:24:
f0:c1:54:9e:3a:d2:1d:e2:c5:e7:1f:f2:da:81:b8:
71:81:ec:6d:88:05:38:ea:f6:50:cf:b3:e3:36:78:
8e:83:8f:e1:e3:3a:76:e6:7b:21:21:0a:da:9e:72:
ae:44:4c:d1:a1:2f:a7:b3:f0:d3:d3:14:73:e8:e8:
1a:fd:f7:e2:8c:77:8e:ce:b4:76:7d:40:ff:d4:2a:
43:b9:c2:7d:0b:2d:56:4c:86:cb:69:07:4e:a8:58:
b1:b1:ce:bd:d6:c1:56:1e:2d:56:14:c2:a8:b8:64:
35:37:58:3c:56:7b:b0:c8:f7:e7:c7:73:6f:a0:24:
a1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CE:D2:4C:55:D1:59:BA:0F:F6:E0:3D:1B:F4:7C:BA:9A:D9:5F:95
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e8:08:b5:8f:74:f4:36:2f:d8:33:41:68:23:a6:e6:dd:99:
c4:b5:f9:f4:eb:1b:ae:e8:ef:30:56:37:15:ee:08:90:1f:62:
3f:6c:0c:71:b2:46:77:90:85:06:69:aa:0d:da:81:b9:d4:56:
10:76:f6:84:5c:22:34:aa:d8:d2:1f:1f:7e:8d:cc:71:ce:13:
db:d8:4b:1a:a5:20:9d:04:c6:d2:7d:72:2c:5b:a4:a4:e2:22:
36:31:90:9e:21:91:dc:d4:4a:aa:ae:6f:7c:47:ee:3a:d5:89:
92:76:b0:97:d5:94:1f:4e:c7:e9:ea:a3:53:b3:87:6e:cf:fc:
5d:31:9c:39:a6:da:2f:ba:aa:81:78:4c:15:3c:d3:81:d8:57:
57:7f:eb:4c:52:99:91:5f:e6:39:a3:2d:6d:fb:1b:9c:12:4e:
6c:ce:db:13:64:2f:43:1e:6c:5f:a7:5e:89:3f:eb:24:be:d5:
2b:33:80:0a:eb:4d:9a:d2:73:b8:f3:49:81:56:e8:37:2c:b5:
d9:b7:0c:4e:db:99:c0:40:c0:db:c2:e1:55:fc:1c:3c:6d:ab:
cb:7a:b6:da:fb:f1:f6:f6:ab:9a:d8:fa:17:e8:28:3d:37:98:
80:b3:ed:a0:e8:59:4f:74:05:82:d0:66:ae:e1:32:7b:ca:e4:
a9:fc:e9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:14:43 2026 by rpki-client