Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: q5pOUTcASKEWZobmxJPVEiTkFLPpOgBZMgEKvEHR6RA=
Subject key identifier: 3C:CE:6C:BC:08:00:D5:34:74:F2:56:53:46:A2:6F:99:3B:5D:B0:4C
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 01A08BD692A3A0D4553632576D2FBDBFC246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 15:01:30 +0000
Manifest this update: Thu 10 Sep 2026 15:01:30 +0000
Manifest next update: Fri 11 Sep 2026 15:01:30 +0000
Files and hashes: 1: J17vSIqgoHZS2f6yqb_8iHjCu5I.roa (hash: ZkWmb6GvJuOMu21GNU2YeN23B5AtCQQY8+AStJbeGm0=)
2: XPQJlFedERmTF9acUC88HcZi7Y8.roa (hash: Np32ynKS0t+KcWpS0Dq9Cf6zaeFo8lW4iSnM2fxcrEY=)
3: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: rC1Sj9+m4e6wKDiU3R4JqKmIqu1bM/BCC1iSC2ctj6g=)
4: ipCoEXo6uW0pr_TclF-YMNfjy1o.roa (hash: Vq4dXFhds74U9HS3KjpxidXdPv7ObFMg2YYb+3p543I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:92:a3:a0:d4:55:36:32:57:6d:2f:bd:bf:c2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Sep 10 15:01:30 2026 GMT
Not After : Sep 11 15:01:30 2026 GMT
Subject: CN=3cce6cbc0800d53474f2565346a26f993b5db04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:54:9b:50:0c:ea:21:ea:a0:15:cc:73:91:
00:9c:f0:99:b0:90:04:b3:43:24:5c:69:74:a6:cc:
97:87:7d:ed:96:07:bf:d4:03:f6:00:0b:42:c5:a5:
0d:bd:c7:a4:f8:cd:3d:74:b8:c6:ed:42:68:f1:f0:
e8:46:ee:b6:7d:1b:05:e5:e8:94:b0:f6:18:cc:d4:
91:d0:a8:d9:71:00:59:e6:62:28:b1:9d:75:38:83:
10:0f:97:2b:91:0c:7f:37:8f:b1:ba:64:dc:1e:b4:
71:0f:c6:82:6b:4f:30:c2:f0:df:81:55:11:a6:6e:
13:ea:f6:76:74:92:64:d7:4f:34:3e:8a:5b:2f:4e:
e7:53:7f:fd:41:56:62:63:1c:f8:ee:b4:4a:14:4e:
b3:d9:dd:23:5a:8c:23:c9:7d:ba:b0:95:b9:47:0f:
95:fd:fc:f6:7f:7d:d2:3f:ab:dd:70:dd:44:33:fb:
65:17:0d:38:09:11:47:2a:5e:68:fe:89:d3:72:f5:
d5:fd:65:ed:4d:e1:7b:8b:32:02:9e:ba:84:8c:0c:
5a:34:86:b5:31:4e:d3:2b:c7:88:0e:c2:38:e3:3c:
85:81:04:ef:37:9a:30:d6:a9:5a:ad:65:14:28:b3:
e8:3c:c9:af:ac:8d:00:3a:9c:ac:65:56:2b:b9:06:
05:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CE:6C:BC:08:00:D5:34:74:F2:56:53:46:A2:6F:99:3B:5D:B0:4C
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:60:05:13:ae:99:f5:da:96:92:7f:05:80:be:4f:4a:7c:41:
16:cf:a8:9c:ba:17:f1:2f:70:49:17:8b:b3:40:ce:89:4b:73:
ee:91:3f:de:a3:a3:5d:17:ad:87:07:40:7e:37:c8:04:b1:3c:
c5:97:cd:a5:d1:7a:44:e0:1c:06:62:0e:91:7f:15:84:7c:c8:
4c:39:07:a6:eb:1f:c4:70:a6:80:eb:3f:e5:4d:85:07:7a:24:
d7:5e:96:2f:6c:2b:ab:cb:f9:a5:4a:90:7a:ce:88:5e:55:d1:
ad:dc:7f:ad:a7:6d:d2:60:13:75:5f:9b:d4:94:34:d3:75:63:
25:ad:0e:9f:ec:16:48:54:91:7a:c8:8b:05:96:dc:08:a4:a3:
b3:26:1f:38:c6:f5:aa:94:f1:09:45:c2:e3:3a:b9:a2:bb:82:
ff:b8:41:bd:a9:bc:e7:a2:c7:38:13:0e:80:61:99:be:45:c1:
a2:dd:f7:7a:6d:7c:12:e2:a4:ab:e3:31:c0:2d:b6:fc:ac:95:
03:ff:e4:1b:7d:90:06:3b:c7:12:a8:b2:77:62:d6:e6:04:b1:
01:57:b8:38:31:77:89:68:48:0b:70:1d:f0:02:c9:d3:b7:0d:
27:d0:94:a7:3a:00:da:93:1b:12:66:c1:6b:35:1b:f3:13:c3:
96:5e:22:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:52:51 2026 by rpki-client