Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
File: 1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft (raw, json)
Hash identifier: OWnK3nu4m5BoLHaLykMtfOBM6/5zcMpGJWQ5R8CXvYc=
Subject key identifier: E4:D8:C4:DD:0D:08:25:F9:CD:F1:6E:5D:0F:C6:A4:4B:69:B9:1F:E4
Authority key identifier: F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
Certificate issuer: /CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Certificate serial: 01A17FD05D6B8B1BD86AC95E62EA90D70157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:02:03 +0000
Manifest this update: Wed 28 Oct 2026 00:02:03 +0000
Manifest next update: Thu 29 Oct 2026 00:02:03 +0000
Files and hashes: 1: 1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl (hash: RsUyvGD9GAavmF52f4WZ0S+7Q/It3Q1AY3J28G5oQyI=)
2: QZywUSO8_jrXJ0WW9xyPaE_CGC4.roa (hash: G1edv0qqbRacY+z7YkK088C60r0xo0XAMMQqbmfvmxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:5d:6b:8b:1b:d8:6a:c9:5e:62:ea:90:d7:01:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Validity
Not Before: Oct 28 00:02:03 2026 GMT
Not After : Oct 29 00:02:03 2026 GMT
Subject: CN=e4d8c4dd0d0825f9cdf16e5d0fc6a44b69b91fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:60:7b:72:c3:20:2d:81:b3:ae:61:b6:b3:
ef:58:f9:ad:20:f7:e5:db:69:70:9a:ba:ee:83:96:
d1:40:e1:80:b5:b7:0f:a1:7f:b4:af:a4:8f:2b:80:
98:35:c4:7c:fa:c3:be:3a:71:82:7f:49:2c:a8:a0:
4b:f5:bc:2c:fa:21:6b:ca:15:05:3b:04:5c:9a:ee:
16:fc:08:4c:d5:a1:5a:e4:1b:e4:45:26:bf:c3:f9:
d7:fd:4f:35:6c:a1:0d:28:4c:3c:56:37:74:63:25:
dd:2f:81:c3:ad:57:af:69:97:86:98:34:f7:65:da:
76:bf:96:69:73:c0:a7:58:9d:be:8a:bf:c3:6f:6a:
43:5f:f1:ad:d9:2d:5e:84:08:1c:45:0e:7f:22:70:
5a:be:36:b3:f4:1e:e5:b9:bf:1c:91:fb:78:a5:e6:
df:20:c2:72:e9:04:10:16:41:7d:42:86:d3:43:17:
ac:26:7f:f2:83:1e:8e:a7:2a:c4:b9:76:7e:4c:72:
0b:4c:99:7d:0d:98:39:22:3a:74:27:39:af:0b:03:
f6:77:61:90:99:02:b2:e2:a3:1d:f1:bc:4d:8c:f8:
81:c1:2d:1b:4d:28:25:e6:ea:b4:07:21:73:d4:56:
84:59:93:18:1c:d0:2a:f7:1a:48:f0:c7:8d:10:89:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D8:C4:DD:0D:08:25:F9:CD:F1:6E:5D:0F:C6:A4:4B:69:B9:1F:E4
X509v3 Authority Key Identifier:
keyid:F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:52:d7:e3:ed:38:a0:37:9b:4d:e1:2f:0a:92:21:60:1a:41:
8f:9f:6b:a0:70:29:8d:31:77:66:84:78:03:22:ee:1f:f7:c4:
37:a4:ee:e8:c7:00:9f:29:90:c7:3d:86:36:32:f2:2e:88:8b:
a9:0a:a4:3c:ee:18:69:5b:1e:fa:6e:cc:d3:84:2b:c5:49:53:
69:dc:3d:01:9d:85:7a:f6:4d:1d:db:f8:97:25:30:79:e9:5c:
c2:56:af:30:16:de:0e:ac:3c:50:0b:7c:4a:26:e5:e6:c5:7e:
d0:b3:c0:cd:8a:04:72:d1:a8:6d:55:0f:16:f9:37:cf:6b:3f:
8f:39:07:85:9b:f3:61:66:90:4c:ba:be:27:86:ae:03:88:44:
f8:44:35:6d:93:41:91:ad:97:58:15:55:4f:21:c5:cb:f5:b5:
e2:01:62:da:9f:48:f6:d6:4d:40:bf:4e:cf:d1:bf:8e:37:f4:
12:ec:54:7d:61:10:c6:e8:ba:4a:04:11:58:e6:8e:c1:08:83:
c0:ac:b7:81:57:b2:19:5e:55:17:bf:ea:4d:c6:97:27:15:3e:
64:0d:36:e3:9b:1a:4f:0c:05:78:ca:80:48:37:de:aa:e7:f3:
47:5a:8e:e3:ea:4b:4f:20:40:78:d7:ca:33:f6:ad:47:07:70:
4b:f5:f2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:23:58 2026 by rpki-client