Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
File: Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json)
Hash identifier: +5IfMrE1Sh0Lxv0sH6xn3d1Nvy623uW4AEu05PixuZY=
Subject key identifier: 0F:8F:71:21:2F:0F:E7:CE:61:4A:3A:0A:73:C7:FB:FF:DA:B2:E0:01
Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
Certificate issuer: /CN=670ec53068393d90db601ec295e42908525e10c2
Certificate serial: 01A18864C38BB8C98847356CB0FD9CB26D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
Manifest number: 11B5
Signing time: Thu 29 Oct 2026 16:01:07 +0000
Manifest this update: Thu 29 Oct 2026 16:01:07 +0000
Manifest next update: Fri 30 Oct 2026 16:01:07 +0000
Files and hashes: 1: Nh6TGiZWo0EOxhMqHLoTd_RYjgw.roa (hash: jvTmWCCcSLAGtI/9GquGJ7vRIPsivGfTGeyKsvphVGk=)
2: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: cfBXrBYX5MPo4YI/YzkSRFYtxKS5Pm9j2gO9pn67xAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:64:c3:8b:b8:c9:88:47:35:6c:b0:fd:9c:b2:6d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670ec53068393d90db601ec295e42908525e10c2
Validity
Not Before: Oct 29 16:01:07 2026 GMT
Not After : Oct 30 16:01:07 2026 GMT
Subject: CN=0f8f71212f0fe7ce614a3a0a73c7fbffdab2e001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:8d:72:79:0c:fd:15:dc:80:bf:bc:6e:32:
78:32:f3:08:d3:f2:90:0e:c3:6b:b5:82:7c:6d:dc:
4f:ec:9a:35:14:ed:ba:cf:cd:5b:16:8d:15:b9:3a:
51:d6:f7:93:8c:98:cc:5a:75:92:c1:77:61:a8:e1:
4b:29:94:e7:e5:a0:c0:e8:35:20:ce:97:5a:49:1d:
04:34:de:a9:94:d5:32:a3:b3:42:7b:c7:49:b2:3d:
dd:83:2b:f3:68:4d:08:96:13:56:66:86:66:40:f1:
fe:ad:7d:d0:3a:c8:e7:2a:80:db:e8:30:2b:f4:4a:
eb:6e:87:78:46:81:b8:6e:4d:42:07:c2:4a:f6:d0:
39:30:a8:e5:b4:b2:0a:77:51:cf:2b:75:d1:52:de:
34:7b:10:ec:5f:0f:ec:af:06:7f:73:0d:06:01:af:
13:e1:95:f1:c0:e9:37:4e:7e:98:ae:c1:18:a0:76:
d7:b8:6e:18:00:0d:da:d8:dd:64:e6:3b:48:87:3a:
b7:22:ed:75:61:94:57:99:59:4a:b6:50:d1:27:8b:
a3:71:cd:81:19:08:c1:f2:11:0b:d3:cd:6e:a3:e9:
3d:25:9e:88:82:6c:cf:0d:a8:b8:20:9f:82:bf:1e:
17:d8:c7:09:a7:55:02:35:07:27:55:47:31:97:0c:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8F:71:21:2F:0F:E7:CE:61:4A:3A:0A:73:C7:FB:FF:DA:B2:E0:01
X509v3 Authority Key Identifier:
keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:55:61:3c:8c:ec:69:4e:4d:49:93:61:f6:af:3a:03:e2:2e:
72:a2:1e:09:c9:91:20:06:5f:05:c8:b9:4e:da:32:1d:9f:48:
3e:53:9e:99:ee:4d:c5:da:1e:c3:b1:c1:fd:c6:04:9f:e1:1e:
37:b4:c3:a5:d6:27:27:50:5b:2c:2d:d4:02:5e:5e:71:5f:77:
30:c9:ad:3b:e1:af:2d:3f:0e:c6:8d:59:5d:7b:bc:02:8c:5c:
14:97:04:64:cb:98:10:b6:e5:54:b8:53:e9:bd:18:4d:7a:26:
bc:a1:a9:06:9e:ff:4b:42:10:8a:42:57:c9:62:88:71:ed:b3:
28:3d:41:20:f6:81:b0:4f:4f:43:40:e7:d0:eb:47:c5:98:67:
0c:e8:c7:8a:44:0d:93:9d:31:db:3a:93:1f:10:1d:1e:22:d4:
7e:7e:a0:03:28:f8:84:32:62:01:48:35:9c:2c:44:44:ef:52:
ec:7e:1e:a9:19:0f:e1:99:27:91:77:38:52:1c:7a:43:a5:43:
0e:af:b8:d7:89:3e:52:e8:a3:d1:b8:cd:16:ed:eb:dc:3c:d7:
8a:4a:70:5d:87:68:d6:9a:86:38:94:60:46:18:ba:2d:1e:7c:
75:b4:e7:cd:5b:9b:1d:b3:14:9e:9a:c2:ba:e3:6d:d0:e5:fd:
93:a2:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:28:16 2026 by rpki-client