Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
File: Zo1_de9C8L1xqpxmZo4KM9vhY08.mft (raw, json)
Hash identifier: +4Xw9FIvz6Lx0/Yibw0km5PHVKlWv2E4Gtrxc9R/9SQ=
Subject key identifier: F1:E1:D9:34:2F:F2:57:8A:AC:E2:8F:0A:1B:FE:6F:3C:76:99:F0:E5
Authority key identifier: 66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
Certificate issuer: /CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Certificate serial: 01A08BD5FFF2B2FF4046A51721CAB2A42BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 15:00:52 +0000
Manifest this update: Thu 10 Sep 2026 15:00:52 +0000
Manifest next update: Fri 11 Sep 2026 15:00:52 +0000
Files and hashes: 1: FCrI_OtnxQ-1-z-8biyHW_0Jr3k.roa (hash: UDISGnchaBY9CTjsTbG4ZtPwcxVzVNzDL/kKcPoMHj8=)
2: Zo1_de9C8L1xqpxmZo4KM9vhY08.crl (hash: JYBQ18ffScVMhRYgsiR65RHW5eQ80pX1JNjOC7xeMEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:ff:f2:b2:ff:40:46:a5:17:21:ca:b2:a4:2b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Validity
Not Before: Sep 10 15:00:52 2026 GMT
Not After : Sep 11 15:00:52 2026 GMT
Subject: CN=f1e1d9342ff2578aace28f0a1bfe6f3c7699f0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:6b:c3:cf:90:81:c4:bf:99:9a:57:ea:cc:
c4:3c:0a:bd:eb:72:da:b0:68:94:d4:56:52:f4:c2:
08:6d:f0:44:cd:5d:6a:b3:e4:4d:a4:a3:ef:51:8d:
b2:90:f1:aa:c6:91:07:bd:0b:2f:89:17:4d:7a:22:
47:9f:cf:17:69:48:36:5b:cf:37:2c:1e:c3:34:1a:
86:97:e3:81:1e:e1:b6:a2:28:27:8c:49:3f:8c:9e:
ce:9b:f9:a2:86:4a:51:e6:44:11:7e:0d:5e:68:f6:
08:42:55:da:8c:b2:23:3a:da:69:f3:6c:cc:da:8a:
3e:ca:68:f1:4c:7d:84:8c:3d:74:c1:7a:a5:43:c5:
1c:27:da:a1:1b:50:72:58:96:5f:12:90:3f:45:aa:
1b:3a:0f:cb:2a:06:f8:b8:8a:5f:e3:d1:93:2c:74:
8d:36:ba:dc:62:a5:0e:17:d4:06:da:9e:75:36:b0:
4a:47:79:f0:81:da:26:6c:97:d5:7c:81:22:25:00:
f4:21:62:01:b0:dd:14:63:6f:0f:12:3f:07:c0:16:
98:aa:37:55:bf:69:cc:22:94:80:70:19:2d:bc:73:
7d:93:a6:e6:8a:23:41:4e:82:85:8b:ae:41:51:75:
3b:cb:2c:6e:57:79:e3:42:cd:83:ae:84:c2:1e:69:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E1:D9:34:2F:F2:57:8A:AC:E2:8F:0A:1B:FE:6F:3C:76:99:F0:E5
X509v3 Authority Key Identifier:
keyid:66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:74:6f:d2:d8:55:c7:44:58:7f:6c:e6:56:a7:62:4b:07:02:
1d:f6:a0:6a:69:46:35:fb:3c:99:d0:c9:06:9c:b4:4f:39:38:
24:83:f7:9d:3d:e7:ce:8b:32:ea:82:3e:75:e0:18:f3:60:20:
2c:84:27:01:dd:11:1a:33:81:8b:91:91:cb:72:f9:4c:ce:ae:
b0:29:48:7f:e6:79:34:73:e2:99:fb:8d:e5:32:90:86:ca:02:
5c:7a:9b:8a:32:25:9a:6b:dd:c6:a9:aa:6d:6a:e9:11:34:21:
80:4e:42:de:0c:93:a7:f6:fb:9c:98:0b:0c:e8:45:ba:45:b8:
21:4f:05:6b:e5:11:08:d6:8c:c7:2d:ff:6e:10:8d:d9:0d:ce:
03:2a:95:44:0e:78:21:8f:3b:62:91:44:0f:43:fc:bd:40:4b:
3d:f7:c6:64:fd:df:64:40:45:3b:ab:d6:01:75:53:14:2d:f2:
0b:b7:29:c8:95:19:73:be:94:e8:a0:8f:c6:87:0f:40:24:58:
b4:74:f0:2c:fa:08:58:76:cd:41:95:20:32:8d:c9:3b:5a:28:
11:4c:da:ee:39:a6:ee:52:36:04:e1:a1:2b:a5:74:1f:92:41:
3d:84:e3:6a:50:9d:99:97:04:01:ba:b0:00:bc:1c:55:f6:63:
73:13:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:22:24 2026 by rpki-client