Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: qVGvaRIvUv32LrkO4wz679xwGUhXctTKuIA2jHTeLs8=
Subject key identifier: 9C:D4:53:E7:98:0A:AE:89:BE:1F:7E:7F:0C:8E:AE:20:1F:E1:41:68
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 01A17927EF5ED7C21BF555D781FCA8428807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 1A58
Signing time: Mon 26 Oct 2026 17:00:22 +0000
Manifest this update: Mon 26 Oct 2026 17:00:22 +0000
Manifest next update: Tue 27 Oct 2026 17:00:22 +0000
Files and hashes: 1: mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa (hash: kpDbhBfOi3H13L7NCoXgIwXVigbDMdLQLlKaVJyFWOo=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: KSrK76kBhgyL56kKIq8FYxj9+AR9gNkzPThlhhcI4Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:27:ef:5e:d7:c2:1b:f5:55:d7:81:fc:a8:42:88:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Oct 26 17:00:22 2026 GMT
Not After : Oct 27 17:00:22 2026 GMT
Subject: CN=9cd453e7980aae89be1f7e7f0c8eae201fe14168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:8a:d0:30:57:51:0a:5c:7b:0e:63:a1:dd:
c0:f5:ef:02:b6:3d:2c:cd:70:dc:b0:3a:fe:51:5f:
fa:ee:81:cb:b9:78:ad:97:b2:18:6b:2f:12:59:bd:
03:56:ff:98:5e:86:42:0b:06:1e:ae:90:dd:97:68:
1f:af:f2:44:59:2c:29:08:d6:45:42:44:e7:3e:81:
34:8c:99:88:ac:59:8e:81:4a:22:b4:1c:d9:11:81:
e7:e8:79:3e:a9:d5:87:81:18:62:34:0a:11:29:5f:
e8:d6:71:52:18:b3:8c:5b:60:0e:44:02:c4:ee:92:
68:8a:39:1b:30:69:2d:ac:02:f8:9a:13:16:17:4e:
77:c0:58:07:70:80:7a:36:30:95:de:16:7b:6f:67:
1d:31:66:fe:da:3c:3b:f9:83:63:da:42:4a:9a:77:
94:01:61:b6:52:55:7a:9c:a3:d0:a4:d3:fc:28:9f:
c5:a5:14:01:80:16:c7:f2:49:17:24:8c:17:4a:ec:
37:e0:33:f1:20:dc:8f:65:2c:31:25:66:95:7e:0b:
84:74:7c:86:44:ba:40:20:8e:5a:d2:3f:25:e6:a4:
cb:cb:46:79:82:0d:44:e0:77:d8:05:14:a4:df:dc:
e1:07:d3:06:a7:d7:60:fd:c6:aa:20:a0:28:53:e1:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:53:E7:98:0A:AE:89:BE:1F:7E:7F:0C:8E:AE:20:1F:E1:41:68
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c8:b2:38:2c:31:b8:4e:f9:77:29:3a:41:b8:83:28:7e:57:
2d:d7:91:1c:84:88:37:ba:e3:c8:5c:e6:e0:e9:d8:fd:0b:44:
95:9b:49:29:b2:c6:16:fe:58:13:6d:25:78:6d:82:4e:b0:9c:
cc:a5:91:90:33:52:6d:ad:aa:cc:83:14:c3:88:78:79:0e:7a:
e2:dd:e9:b8:18:32:45:45:4b:47:eb:96:13:4a:26:1a:12:2c:
cb:98:de:d5:b6:62:f8:2f:2b:c4:82:1d:a0:97:66:03:e3:07:
51:18:8e:cd:12:4d:d7:ab:48:d0:79:f4:b2:90:2b:fe:65:0f:
5a:0d:76:29:c2:65:a5:a7:ca:26:7e:a0:9b:8a:e1:a2:26:90:
cb:cb:dd:5f:21:24:4b:65:44:4a:ea:da:d4:ba:db:20:8a:22:
79:0c:e5:ac:e7:db:2a:74:f8:1a:da:4a:09:dd:3a:8a:6a:48:
56:3a:ca:34:03:1f:f3:9e:e1:c9:96:dd:cb:0d:87:dc:e3:b6:
11:11:e1:bb:c0:1d:81:a0:fb:fa:81:00:69:37:18:d2:b9:87:
b7:4a:c5:ed:3a:f2:5e:ad:06:90:15:ba:cf:de:c3:32:67:3f:
78:06:d5:cc:30:de:96:2d:27:c3:53:99:76:34:49:fd:0f:f4:
9e:57:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:14:46 2026 by rpki-client