Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: epwUhDQHXLnEVz26bO6Vnox0EQFPn3wQsUGXVBPSrYc=
Subject key identifier: A6:2D:C4:F0:38:D5:AF:77:EB:76:3A:7B:34:E4:68:A8:13:0F:DF:36
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019FFE6DBAFB4B412E66C0858F4D0322749B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1A0E
Signing time: Fri 14 Aug 2026 04:00:31 +0000
Manifest this update: Fri 14 Aug 2026 04:00:31 +0000
Manifest next update: Sat 15 Aug 2026 04:00:31 +0000
Files and hashes: 1: kLUG7I7zaleUboTqrqB19XXsTkQ.roa (hash: cKKeB+BIlOYQDOr355c8ocGK4xiw2EqpjCd7kzeueqs=)
2: ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa (hash: gVb5IHgLpvS8ffqO/hNhQNz/nK0f5pvRNLYLZEY7RQs=)
3: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: mHEYiM5W8tPfM6KNfCgbKy8YzI0fNSn4nw8eLtebaTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:6d:ba:fb:4b:41:2e:66:c0:85:8f:4d:03:22:74:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Aug 14 04:00:31 2026 GMT
Not After : Aug 15 04:00:31 2026 GMT
Subject: CN=a62dc4f038d5af77eb763a7b34e468a8130fdf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:fe:3b:cc:80:98:70:98:9a:62:1f:35:0f:
bf:7d:b7:17:ab:38:c5:f6:9f:d2:16:31:df:50:b2:
a3:d4:f1:9e:19:48:74:33:7b:fb:92:e8:4c:e2:7f:
40:86:29:b2:9b:60:9d:18:33:b7:1d:21:e9:03:b4:
8e:c1:cc:ad:1e:d2:aa:a9:05:d8:5c:96:6f:70:e0:
7e:70:c7:65:e7:1a:3e:fa:e1:48:36:bd:29:7e:99:
5b:fc:80:74:e8:29:e6:44:3c:e1:9e:4d:d7:df:14:
28:ea:bf:60:25:8a:a4:72:75:5b:4d:a4:55:7c:86:
21:c6:fa:7a:d0:2b:4e:85:5e:ad:52:88:ae:6e:18:
e6:89:6b:f7:d9:49:62:80:5d:6d:4e:01:a8:c4:67:
a1:f0:01:63:73:94:fc:d4:95:48:69:04:58:dc:36:
10:a4:c1:ca:72:ad:9d:b6:bb:03:15:54:c7:a1:1b:
fd:fa:db:bb:7e:d0:34:3e:09:6b:f5:09:94:ac:80:
23:7d:b1:68:15:50:04:9a:4e:23:8c:d5:cb:7a:5a:
e9:c5:7a:65:41:14:15:21:8e:4b:e7:00:ff:d4:66:
af:e0:b9:59:14:dc:58:56:a4:ec:08:3d:1e:61:0c:
f6:6d:30:23:bf:b0:aa:e0:f9:20:60:48:04:ff:a1:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2D:C4:F0:38:D5:AF:77:EB:76:3A:7B:34:E4:68:A8:13:0F:DF:36
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:da:ef:8d:b2:05:ba:c3:46:17:73:6a:81:0c:0f:c3:94:c4:
1c:88:5b:9f:3d:63:91:32:0b:35:9d:f8:a5:63:38:ff:5c:fa:
c8:86:a0:d0:27:1a:48:b6:86:a6:6d:df:63:07:93:f1:db:7f:
7e:dc:1f:85:73:cc:e0:8c:6a:a5:fd:04:7e:53:1a:88:0c:5c:
61:c3:77:b2:37:4d:03:b0:e1:0c:f7:2d:5e:12:e5:58:e5:0d:
10:36:22:15:53:99:32:51:f8:ca:c7:30:d0:4d:75:a4:18:67:
7c:b6:8e:3e:0b:2c:9e:60:33:2a:e2:9e:62:32:fd:52:2e:d0:
f2:31:3f:d7:01:53:45:f3:4e:d0:24:59:6b:1b:04:f1:22:e6:
af:75:f1:48:65:d9:1b:1d:5e:2e:57:13:1c:e5:7c:a3:10:ba:
4f:c4:32:d8:d2:e5:8e:c2:dd:d1:10:62:1c:df:04:7c:5b:88:
87:de:10:b6:6b:40:a8:6b:2a:34:9c:fd:98:a7:71:09:0e:59:
a4:04:8c:89:0f:50:82:0e:7c:7b:97:c7:9a:57:72:0a:dd:e4:
cb:4b:42:10:5f:da:bc:1b:56:c5:04:eb:45:d1:c0:c0:3c:20:
cd:29:4b:c8:c4:16:ed:c4:88:2c:11:05:8f:bd:73:14:36:93:
fa:bd:26:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:45:11 2026 by rpki-client