Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: 6YKkWK1gFEZ0zSI/PSKGrQiH7JiOad51n0pxyoqcd/E=
Subject key identifier: 7E:DB:02:3E:34:37:60:CD:22:43:4B:45:E6:68:46:43:0D:D0:76:00
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 01A17B4D46CB439A0529B4DFD17A40A4F8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 03:00:24 +0000
Manifest this update: Tue 27 Oct 2026 03:00:24 +0000
Manifest next update: Wed 28 Oct 2026 03:00:24 +0000
Files and hashes: 1: J17vSIqgoHZS2f6yqb_8iHjCu5I.roa (hash: ZkWmb6GvJuOMu21GNU2YeN23B5AtCQQY8+AStJbeGm0=)
2: XPQJlFedERmTF9acUC88HcZi7Y8.roa (hash: Np32ynKS0t+KcWpS0Dq9Cf6zaeFo8lW4iSnM2fxcrEY=)
3: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: W+8Qj7bdmFFwf4tOkAZxIH6Hr7Q6cStDAbbN9ojTMZU=)
4: ipCoEXo6uW0pr_TclF-YMNfjy1o.roa (hash: Vq4dXFhds74U9HS3KjpxidXdPv7ObFMg2YYb+3p543I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:46:cb:43:9a:05:29:b4:df:d1:7a:40:a4:f8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Oct 27 03:00:24 2026 GMT
Not After : Oct 28 03:00:24 2026 GMT
Subject: CN=7edb023e343760cd22434b45e66846430dd07600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:5f:06:df:06:42:51:39:4d:9f:16:d2:47:
0b:44:bf:c5:57:47:d5:80:ac:ef:98:c7:83:8a:eb:
8c:ba:5c:cc:ec:02:cb:cd:d8:7f:9a:94:c4:5b:f4:
73:71:af:fd:a3:ad:05:53:30:f4:b5:89:1a:2b:c5:
21:79:49:e7:83:5e:43:ae:62:58:c6:0a:22:81:37:
be:19:6c:d3:ed:dd:a3:ab:41:87:21:31:70:e8:92:
13:a2:0b:45:24:a3:4f:ab:8f:be:84:e7:97:2d:fa:
79:18:d2:67:5a:79:0b:e2:84:27:3c:63:de:be:7f:
3e:8f:1a:90:96:cd:28:7d:88:57:ba:3a:fb:e0:02:
80:76:a7:fd:4f:5a:4b:94:8b:64:4d:a4:d5:7a:9d:
0f:88:a9:61:70:8f:07:2e:b9:e1:5c:53:cf:b0:10:
89:88:b3:c1:78:5e:2d:04:70:3f:9f:ed:b8:8c:51:
3a:11:d6:7a:d8:e8:bd:06:61:43:e4:89:54:85:f3:
91:72:23:a6:20:98:cb:07:95:c9:80:fd:25:ad:b1:
ae:21:a9:c5:c9:27:d1:b6:40:5d:4e:c8:09:48:f0:
33:9c:63:c0:fd:b9:28:ff:af:4c:be:f0:d8:56:1b:
cd:d0:97:9d:96:e0:56:05:fb:33:42:0b:52:87:a6:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DB:02:3E:34:37:60:CD:22:43:4B:45:E6:68:46:43:0D:D0:76:00
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a2:3b:c6:ff:73:3d:c6:93:58:27:56:1f:cb:2e:b3:5f:99:
a1:d3:c7:4a:12:68:b2:90:94:d8:f6:d7:fd:bc:10:c3:b9:47:
e1:72:98:0d:d7:28:5e:fa:3b:40:61:aa:1f:97:32:5a:66:5e:
bf:79:36:21:87:b6:c8:eb:70:7c:87:3f:79:9d:9c:13:63:a5:
bd:75:a2:27:f6:21:c2:54:66:f8:d0:3e:76:22:25:e6:7f:14:
51:bf:f8:45:2b:54:d6:62:9d:3c:e2:27:f8:55:8f:0c:d8:69:
7a:77:2a:01:8e:eb:8a:8a:68:d6:5f:26:99:74:ac:77:3a:74:
26:07:4d:12:b7:e8:21:f0:58:75:27:05:9f:54:f5:a1:3d:c8:
3a:ff:7c:ae:c9:ee:8d:0f:ab:6c:83:42:da:43:6e:50:79:27:
df:7f:04:a4:b2:24:e7:61:71:30:0a:6e:ea:4c:40:61:4c:ec:
f4:04:38:65:32:9f:34:1c:fe:24:c3:bd:c7:fa:cd:e1:88:b9:
d5:38:e7:78:31:63:87:d3:c4:bb:43:c8:a4:4b:b3:a0:89:92:
99:33:07:3d:a2:d3:b9:26:c4:dd:ec:b5:a1:5c:1b:39:84:6e:
a9:83:c6:20:54:da:9a:79:92:7a:9b:10:eb:f7:74:d5:cc:5c:
68:4b:87:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:35:56 2026 by rpki-client