Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: R1qI0lvf4vPyo8hWGhFgXw+t0g9SmzHXtHo7ObrYmNU=
Subject key identifier: C4:5F:E1:55:41:E9:66:07:3A:C4:8F:8B:F8:63:83:E2:05:BB:A1:A6
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 01A19131143098B4D47BD3C8CCA23CD5B52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 183D
Signing time: Sat 31 Oct 2026 09:01:14 +0000
Manifest this update: Sat 31 Oct 2026 09:01:14 +0000
Manifest next update: Sun 01 Nov 2026 09:01:14 +0000
Files and hashes: 1: PAK2KvwTG30-jUzj7sYacw3L9ic.roa (hash: Lb1okikdPiNmYkmLldNkAdsJr1dPWTMaZXm3lhpA5to=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: fMTfQeDofFyUTt0P9rCoR+ZHSlXgwuP58pN7EIQVfqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:31:14:30:98:b4:d4:7b:d3:c8:cc:a2:3c:d5:b5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Oct 31 09:01:14 2026 GMT
Not After : Nov 1 09:01:14 2026 GMT
Subject: CN=c45fe15541e966073ac48f8bf86383e205bba1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:98:40:3c:0c:4c:d3:7e:c3:b0:1b:ee:bf:
2e:69:52:cd:c5:99:2e:8a:60:8f:14:9a:e2:17:78:
b5:42:9f:63:c0:58:0c:0a:46:27:af:6a:3b:3c:21:
c2:e2:73:f0:7a:1a:04:32:45:10:da:98:e8:10:a6:
f7:e0:5a:2f:74:79:21:fa:e0:12:c7:10:4b:27:b9:
6f:d3:21:3a:94:85:64:5e:80:ff:80:a7:75:0b:84:
7c:75:d1:2a:7f:8c:cc:f6:61:99:e2:9d:1b:1b:d5:
66:8e:2b:4d:75:ae:76:9f:eb:c4:f3:5d:af:da:10:
d8:38:8c:26:09:4b:03:5a:db:db:1c:d5:50:b7:5f:
08:04:10:d5:fd:9a:a7:8d:51:3c:44:b8:64:c1:79:
2a:06:4a:9a:6a:71:54:5f:11:72:7e:7d:e2:97:5d:
fc:80:54:10:40:6a:da:f0:f3:9a:54:9f:21:06:94:
1f:4f:98:9b:38:d8:31:85:1b:19:0d:af:f8:3c:18:
59:0a:07:ab:30:86:c3:31:06:41:e3:eb:8f:20:24:
1d:1d:06:1e:0c:86:85:e2:15:2f:3c:d8:10:83:25:
b4:4c:cc:6a:dc:db:3a:3b:fc:de:56:7b:09:91:31:
4f:ab:d1:e3:af:ff:8b:66:d7:4a:4a:3f:e3:d1:ec:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5F:E1:55:41:E9:66:07:3A:C4:8F:8B:F8:63:83:E2:05:BB:A1:A6
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5b:68:9b:01:1f:10:8e:30:d6:1b:7c:79:dc:47:97:17:3c:
78:c3:2a:81:8b:a9:b7:f3:28:ff:14:a4:eb:72:18:5a:2f:a4:
d1:cc:75:1d:5d:dc:3a:54:0e:91:1e:52:f4:9a:63:75:c2:08:
0c:19:03:43:d7:7b:66:cc:89:7e:cf:be:80:94:55:18:54:39:
16:95:41:04:6b:f2:7c:f3:1c:59:11:7c:4e:b4:7b:51:04:c3:
22:8d:59:64:56:f1:2a:7c:67:a8:90:f6:cc:dd:7d:03:21:a6:
e1:b2:36:6b:d5:44:be:4a:67:43:f7:3e:a7:35:32:8e:ea:22:
03:33:1e:f1:4f:15:be:74:e4:a6:fd:91:f7:8c:ae:e3:39:a4:
24:6f:b9:f2:ae:82:aa:6a:b8:61:f7:96:bd:fa:a2:f7:23:b5:
c4:38:7f:ae:ae:43:c8:43:d0:a3:1d:ab:ef:38:fe:f7:31:af:
7e:38:1a:3d:9b:ab:e4:0b:27:8a:07:69:44:c8:b4:0a:2b:65:
4a:f4:73:9b:48:e2:5e:c8:38:df:a9:b3:b8:9c:e5:bc:5d:6e:
db:74:be:88:7d:49:c2:de:b2:e0:80:2a:83:4c:43:7b:6f:d7:
3e:b3:5c:50:9b:16:c3:34:67:c7:6a:5c:a1:74:e6:27:3f:2e:
dd:f8:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:41:17 2026 by rpki-client