Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier: AvT04JHPv0XVasFOyNmvitkrIKYGgUBCTcuFu3E5cs4=
Subject key identifier: 1C:51:A1:D7:6F:2A:3A:15:07:47:D3:95:AB:69:55:09:C7:5C:07:02
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer: /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial: 01A06D950A69A15FFBC7EB860E8C72D830DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number: 1A38
Signing time: Fri 04 Sep 2026 18:01:19 +0000
Manifest this update: Fri 04 Sep 2026 18:01:19 +0000
Manifest next update: Sat 05 Sep 2026 18:01:19 +0000
Files and hashes: 1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: Xb3/esh+XiptEJVJ40CRwLkIJNJkalKHV69v0Nh6leQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:0a:69:a1:5f:fb:c7:eb:86:0e:8c:72:d8:30:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Validity
Not Before: Sep 4 18:01:19 2026 GMT
Not After : Sep 5 18:01:19 2026 GMT
Subject: CN=1c51a1d76f2a3a150747d395ab695509c75c0702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:1e:57:57:de:5c:be:57:43:c3:66:d4:99:
18:62:4d:75:b7:b3:47:31:f6:bf:01:9c:30:7f:69:
85:f4:82:0e:00:84:0d:85:46:76:94:88:5a:c1:d3:
1e:5c:ff:6d:89:14:9c:36:d9:d0:30:23:d7:f6:48:
d6:16:85:67:4f:f7:df:2c:69:18:73:da:35:4c:66:
9a:88:34:07:f4:6d:bb:d1:24:6b:f3:55:83:fe:c5:
35:87:06:79:52:5e:3c:79:74:a2:40:d1:84:7c:e1:
7c:8b:ee:a1:6b:e8:a8:13:8c:74:fa:7f:dc:7c:2a:
38:92:58:82:9e:a0:c4:05:8f:74:25:ff:21:ba:e6:
80:20:0b:5f:3e:44:62:21:b6:81:bd:a6:7a:cf:b6:
b8:c3:a0:1e:8e:85:97:25:63:8a:4c:91:80:ca:82:
d0:1d:80:fe:23:ce:89:d8:ea:43:9d:dc:fb:1b:bf:
cc:3f:e2:76:76:37:aa:72:1f:a2:a4:50:a4:1e:99:
2b:86:84:05:c1:2e:76:f5:91:ba:89:09:1a:a5:b7:
19:e3:97:62:67:2b:fe:43:df:6f:f5:99:ee:0e:b6:
5a:1d:ec:9a:9c:bc:ba:67:bb:50:98:53:1b:bd:f6:
2a:54:9f:ff:85:ff:20:31:9a:a2:6f:b8:fa:3f:8c:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:51:A1:D7:6F:2A:3A:15:07:47:D3:95:AB:69:55:09:C7:5C:07:02
X509v3 Authority Key Identifier:
keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:48:87:3c:3f:de:3b:d1:e6:d6:27:49:bb:a6:dd:06:b0:11:
ff:29:4a:d2:e4:2b:09:b1:d2:a5:45:15:76:a0:c1:55:22:2b:
e0:c5:6d:e0:b2:1d:c8:b3:e9:e1:b6:21:99:25:73:b5:24:cd:
da:57:c1:56:c9:60:6a:bf:ef:f5:94:f4:07:7c:77:87:3a:5e:
76:e7:30:9e:64:4a:59:bd:5e:14:16:03:29:ab:df:e2:ed:7f:
6d:a8:47:5b:4b:48:ad:21:b2:04:03:bc:f0:31:ce:8c:4f:0c:
7e:dc:db:ce:06:0b:23:75:5e:fa:c1:87:03:30:48:7d:48:1c:
08:12:43:e6:50:3e:f1:91:cd:8a:da:5a:34:ce:3d:3e:29:b5:
47:83:f9:1d:f5:c7:07:cb:a0:26:4a:8b:3e:8d:7d:d1:eb:16:
23:ca:cb:ec:ee:72:0d:58:7a:97:cf:9d:c3:41:8d:6b:f5:ea:
77:9e:b0:bf:2a:d9:49:6a:3a:3a:cd:39:bb:93:77:32:c4:e3:
05:5d:de:1c:69:45:45:50:9c:74:9c:e2:16:ef:c3:32:e7:fc:
38:93:b2:a0:d6:b8:78:c1:dc:a0:86:b0:bf:a5:9f:22:ba:46:
38:f9:ac:d0:4f:1e:12:de:cb:63:98:38:d5:4a:04:f1:fd:8e:
a0:74:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:57:40 2026 by rpki-client