Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
File: ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json)
Hash identifier: LO4qkLpavqk3ywP/sFug8fSv4qrYETGOQqYe4Kd1F1I=
Subject key identifier: D1:BB:F8:71:02:7D:8A:98:66:CD:93:2F:F9:C5:B6:86:D9:85:7D:05
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial: 01A08AC3E80C7D31492B2EBD9E2D02608FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 10:01:29 +0000
Manifest this update: Thu 10 Sep 2026 10:01:29 +0000
Manifest next update: Fri 11 Sep 2026 10:01:29 +0000
Files and hashes: 1: LEZ2eernw3AVIu_DBAVXUMvBBUI.roa (hash: mWWMsuTtrCWfoaF45z7yHf2yqMTPnwnlxC/hcOPnnAg=)
2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: /PUTVAzRMFiSRXz9BwjPJW3xNTnaYDZd0+gxn0ntXYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:e8:0c:7d:31:49:2b:2e:bd:9e:2d:02:60:8f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Validity
Not Before: Sep 10 10:01:29 2026 GMT
Not After : Sep 11 10:01:29 2026 GMT
Subject: CN=d1bbf871027d8a9866cd932ff9c5b686d9857d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:29:86:ba:ab:ff:2b:90:d8:53:94:2f:85:
98:29:f0:e6:de:31:49:e9:01:3f:2c:ef:ed:cf:66:
15:29:34:c1:35:71:5e:3e:d9:c0:2a:ba:1e:da:7c:
c4:67:5e:f9:e9:5f:b7:64:2e:84:0b:19:7a:e7:f5:
c7:d0:9b:d6:64:81:9e:38:38:54:ca:e5:3f:cf:7b:
45:3e:03:2b:9f:ac:ed:83:49:9d:18:fa:b7:db:d9:
40:48:c6:46:4d:df:48:65:5d:7f:69:29:f4:bc:cd:
eb:7c:34:a5:e2:40:5a:f7:15:d7:ff:38:17:06:e0:
44:b9:bd:1f:fb:03:c4:07:2b:18:7c:cb:96:c8:76:
34:9e:63:0e:30:45:49:f9:50:78:be:4a:4b:7c:0e:
bb:68:eb:8c:f9:57:c5:c6:cc:93:0d:3a:88:2d:e6:
63:f1:fd:5d:65:f6:ee:62:c4:15:bb:d7:1e:63:e3:
1e:9d:c3:52:07:d7:73:cd:7b:4f:65:74:01:44:9e:
71:26:62:67:1a:68:e1:be:f8:97:20:d8:61:8b:2c:
4b:8c:9b:de:c7:b8:7d:95:2f:5a:e2:bd:85:55:f2:
20:c3:86:e9:fc:5c:04:ad:00:81:58:06:1a:5d:49:
e1:a5:44:3d:8f:18:ae:00:4e:07:da:fa:a9:33:f7:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BB:F8:71:02:7D:8A:98:66:CD:93:2F:F9:C5:B6:86:D9:85:7D:05
X509v3 Authority Key Identifier:
keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:00:4d:5c:a0:eb:19:72:b8:f9:c1:83:61:1a:3a:55:4c:b1:
2e:da:52:0f:14:33:ca:21:9e:88:35:37:d6:1c:ef:0a:7f:58:
cc:0e:14:5b:7f:a1:57:96:e7:84:54:28:93:90:ef:19:11:94:
33:36:16:58:36:f6:e2:c6:f9:fa:81:eb:d5:f7:fa:a1:3b:7d:
98:82:47:6f:a6:7c:2d:ae:7a:24:07:0f:de:78:8c:17:e8:8c:
44:67:e7:df:8f:f6:38:0f:70:d4:a3:4f:4a:ca:43:d6:7d:40:
56:51:43:c7:6c:e6:cb:95:5d:9e:33:c4:45:ca:0b:5a:66:d0:
f8:76:b7:5d:fa:e7:08:7c:93:54:c4:8e:47:47:aa:a1:83:86:
77:96:48:fb:e8:ba:56:45:df:44:96:d5:c6:4b:96:b0:ae:da:
ba:aa:54:27:05:4c:85:3e:0a:f3:50:9c:d7:b7:67:98:6f:9b:
24:7b:5e:56:de:30:da:e1:db:84:22:e8:1e:73:98:2b:db:ef:
63:5f:29:e6:84:83:9b:95:1a:a3:46:59:a5:89:2d:3b:19:3f:
7d:32:99:ed:37:4d:97:c7:f6:a7:9a:02:6d:f2:66:20:20:04:
91:88:df:f2:6b:76:c2:cd:f1:0f:57:12:2c:43:f2:f1:35:54:
de:75:1e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:04:13 2026 by rpki-client