Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File: zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier: HK3sb9Zc0cTNLPrdKWsx5soMliE77Rnbo7DZjEeky+s=
Subject key identifier: DA:1E:55:78:1A:84:2D:66:70:FF:E9:73:1A:07:70:50:13:23:B7:04
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial: 01A1306A85CE3A2C574E846D81FBF0B74A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 14:00:49 +0000
Manifest this update: Mon 12 Oct 2026 14:00:49 +0000
Manifest next update: Tue 13 Oct 2026 14:00:49 +0000
Files and hashes: 1: hP6LOiB-JXjzIxcAoNUeheYCC_w.roa (hash: Am0rp7j+BYvMadHXe785VdV8wLgqVi6auP8kJTGDcRE=)
2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: Or+vSsF9pBTsqFfpRBjE0//3mqa2pi+NyKsxYEv5+zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6a:85:ce:3a:2c:57:4e:84:6d:81:fb:f0:b7:4a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Validity
Not Before: Oct 12 14:00:49 2026 GMT
Not After : Oct 13 14:00:49 2026 GMT
Subject: CN=da1e55781a842d6670ffe9731a0770501323b704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:10:e0:a7:e8:83:2e:14:89:61:90:1e:b4:06:
68:65:b8:8b:4c:26:43:5f:42:45:8b:a4:86:ac:50:
80:b1:48:72:31:7a:e6:67:cf:2b:b3:c0:c5:66:30:
b3:03:26:89:45:ed:b6:c9:ee:19:e7:77:32:5a:be:
9b:6b:08:94:71:98:d6:2d:73:ce:8c:85:64:a8:22:
2c:e7:c2:d3:20:e6:a8:ce:4e:e6:29:09:2d:cf:0c:
63:18:11:8a:fc:2d:76:72:ff:cd:bd:83:16:5f:30:
8b:2a:50:15:a0:8f:1f:87:8a:8f:33:e0:56:7e:38:
6d:f0:e1:45:51:10:ed:a4:c1:fc:3f:32:ea:42:3b:
e9:1a:a3:72:56:5a:35:4b:1a:50:ad:b2:73:99:86:
99:93:20:d7:23:30:5c:9f:4f:58:e7:af:5d:98:19:
71:39:2f:f2:74:37:d9:f6:31:8e:30:63:bf:98:f9:
09:c2:95:b7:41:7d:46:41:f3:33:77:01:97:94:7c:
5c:ea:17:93:8e:b8:79:f8:97:20:cf:0f:a5:42:89:
5c:6e:9f:e2:f4:ba:36:f7:fb:5c:ad:f1:51:08:a1:
c3:c8:37:00:9f:69:78:6e:6b:e8:81:13:57:fb:26:
d4:8d:ca:d6:df:e3:2d:c4:75:ed:0a:4c:fa:c0:96:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1E:55:78:1A:84:2D:66:70:FF:E9:73:1A:07:70:50:13:23:B7:04
X509v3 Authority Key Identifier:
keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4e:4f:ad:45:82:0b:52:8c:2b:0d:fb:97:f5:17:f8:e8:9d:
4c:e7:8f:92:92:6d:63:ef:de:6c:15:69:1a:13:6a:0e:27:b8:
75:69:61:26:1b:61:4a:fd:75:c4:45:6f:47:66:d0:17:d4:5a:
ad:7a:41:07:22:e4:d8:81:25:d8:e6:67:3f:81:1d:19:85:8f:
5a:f8:71:4e:e0:72:9d:e1:60:17:fc:9d:a7:79:03:b7:e3:b7:
b9:58:8a:9c:75:87:2a:17:6d:62:e6:9a:22:b7:e0:51:9c:41:
35:40:16:06:17:2b:87:49:b4:71:ed:f8:40:0b:d8:f3:bc:d7:
51:f5:ed:e2:c1:e4:e6:2d:10:fe:34:62:9b:a3:47:44:68:39:
e3:85:1b:93:e3:72:06:48:4a:db:4b:e3:aa:01:53:8c:4d:0f:
ab:0d:65:55:60:e5:0b:a5:1d:6b:2e:9b:98:52:3d:63:71:76:
14:49:63:59:e1:3d:93:c1:23:96:4c:07:29:bf:00:ec:96:22:
5f:4c:23:80:d5:6a:1b:22:c7:9a:e4:ba:c1:b0:cc:cb:a9:f1:
c0:5d:8e:7c:59:8c:9b:08:6e:64:91:07:f1:44:8d:8a:88:48:
3b:62:bc:1f:fc:fb:a2:b6:55:ce:5b:2e:a9:84:d7:10:6a:8f:
5d:3d:40:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:35:01 2026 by rpki-client