Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
File: zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json)
Hash identifier: xqzLmfXCciq0eljkhoqF5/T6CdH5dwwHp7lhdY0LLi8=
Subject key identifier: E7:7C:05:D0:35:46:6E:B3:55:66:11:B8:8D:4D:3E:2E:5B:09:82:FE
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial: 01A152F71B9DA9CAF0C9FC03BA0CC6A9006C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
Manifest number: 1A06
Signing time: Mon 19 Oct 2026 07:01:28 +0000
Manifest this update: Mon 19 Oct 2026 07:01:28 +0000
Manifest next update: Tue 20 Oct 2026 07:01:28 +0000
Files and hashes: 1: RqKPi2xz-dA9iWopa2S6eD63VNM.roa (hash: sh/U5dfnaz+hJ1QK4InqZNRlbTTXVEErKQaPltkS37U=)
2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: 8iwx8PrEtz39FkKh4F2SJeB2X/DhGcxUAbylxXwM+vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:f7:1b:9d:a9:ca:f0:c9:fc:03:ba:0c:c6:a9:00:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Validity
Not Before: Oct 19 07:01:28 2026 GMT
Not After : Oct 20 07:01:28 2026 GMT
Subject: CN=e77c05d035466eb3556611b88d4d3e2e5b0982fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:2d:fa:02:62:ad:bc:d6:4f:cb:9a:05:93:
17:32:b5:06:a2:76:06:64:ee:51:45:84:05:92:63:
ba:36:5f:26:47:45:66:9d:c2:61:11:47:01:5a:c2:
d4:d4:f3:43:ed:6d:e7:d8:54:a5:8b:bf:75:41:68:
c9:ff:84:01:da:8a:7d:d9:7e:a1:22:29:89:a4:6e:
9b:9b:8f:6f:d5:7a:12:60:54:61:06:9c:66:5e:6a:
b7:da:b7:ec:cf:0e:9a:d0:93:ed:5f:9e:c8:4d:68:
39:24:92:67:fc:08:6e:e4:c1:30:ab:d1:23:7a:49:
24:f3:3e:bb:f8:8f:7d:f0:5a:6a:f5:ff:cf:7b:fc:
49:5a:84:22:e7:a9:ec:b8:04:7a:d4:e1:bc:45:6c:
71:6b:a6:c5:d8:5b:a4:7b:5e:8b:a6:4d:ac:2b:09:
12:c4:46:1d:f5:14:53:4d:c7:c4:66:b8:29:c1:52:
bf:48:81:34:10:93:11:4e:5e:c5:1a:8c:e4:37:c3:
ca:63:14:14:bd:94:f5:9b:35:f9:e2:d2:05:54:fb:
0f:25:73:1b:7b:fb:19:50:04:41:6a:ee:84:40:e7:
af:f3:69:5b:c8:e0:14:e7:1c:68:a4:9f:66:d7:03:
5c:f6:f9:ac:23:94:db:a3:aa:6e:c0:8c:65:bd:5e:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7C:05:D0:35:46:6E:B3:55:66:11:B8:8D:4D:3E:2E:5B:09:82:FE
X509v3 Authority Key Identifier:
keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5a:da:e2:a3:1b:1b:13:42:61:40:44:94:66:db:6b:c6:fe:
ec:18:21:5b:b2:3d:10:46:78:5b:3b:13:c4:68:a0:a5:f7:6d:
df:e8:32:b4:2c:c6:0c:a1:58:37:26:87:82:23:dd:0c:67:8f:
87:5d:04:15:3a:de:b3:61:7f:bd:6a:9f:d5:10:14:33:c3:7b:
99:ee:c0:d8:f8:22:96:45:e6:bb:1b:e7:48:05:ba:2d:26:2b:
a7:6e:0b:63:a8:66:76:f6:f3:be:f1:ba:92:fc:a2:cd:86:cb:
36:e3:6b:25:31:8a:51:e3:8b:2a:ef:f7:bc:ea:96:ae:88:ca:
53:8e:b2:87:ce:7b:b9:ac:b1:19:df:27:fa:ad:43:79:15:fc:
d5:f4:f4:49:8b:b9:06:70:f4:a1:fa:9f:d4:8c:65:3d:0a:80:
78:98:9f:67:63:70:b8:0a:92:93:7d:63:25:47:12:ab:a7:a6:
fa:8b:0e:9b:37:19:50:46:f8:1c:5a:e6:69:75:94:a9:ea:c6:
ec:41:a6:cf:99:7b:eb:24:e4:7f:0b:bf:2f:dd:50:33:26:be:
58:57:2b:0c:48:f6:50:38:9e:c8:75:b8:1d:6b:ef:09:a1:2b:
8d:38:c7:a2:e8:e0:bb:8d:ad:c0:41:27:71:2c:33:57:ba:50:
83:0c:ff:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:28:27 2026 by rpki-client