Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
File: zoCPTPJWR31wopTRMBbCToQn1cI.mft (raw, json)
Hash identifier: gom6SwLFC9K0bO0w7BUv3irOxXpZxZhj/JF4dJ3Xh1I=
Subject key identifier: 2C:AF:E4:1F:96:23:22:5E:2A:9F:EA:9D:F4:45:B5:9C:E3:8F:11:4E
Authority key identifier: CE:80:8F:4C:F2:56:47:7D:70:A2:94:D1:30:16:C2:4E:84:27:D5:C2
Certificate issuer: /CN=ce808f4cf256477d70a294d13016c24e8427d5c2
Certificate serial: 01A1178614C99FE19C0CAE4E9F7B2BDDCE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
Manifest number: 010A
Signing time: Wed 07 Oct 2026 18:00:25 +0000
Manifest this update: Wed 07 Oct 2026 18:00:25 +0000
Manifest next update: Thu 08 Oct 2026 18:00:25 +0000
Files and hashes: 1: _JmG_0xrHcMFjUFl8DJsIFUaYD8.roa (hash: 7k5k2uPEyUiwrs4Pq2qVmxoQcxV+zQ2r/avbqedzahU=)
2: zDXzBZeXum8l30Cf-mJ2T8gbfQg.roa (hash: sIKKghlLT4flRrCI8RlvLEJlP+eAnZaJEqf8oP1H+nw=)
3: zoCPTPJWR31wopTRMBbCToQn1cI.crl (hash: 5XWMuY5gwJGM5tPNqfd09YSwUvxCeMtU4kNHFNVJM9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:86:14:c9:9f:e1:9c:0c:ae:4e:9f:7b:2b:dd:ce:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce808f4cf256477d70a294d13016c24e8427d5c2
Validity
Not Before: Oct 7 18:00:25 2026 GMT
Not After : Oct 8 18:00:25 2026 GMT
Subject: CN=2cafe41f9623225e2a9fea9df445b59ce38f114e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:c4:c5:3c:4c:dc:9c:f4:97:62:30:2d:03:
c2:66:a0:ac:fe:18:e9:7b:08:c7:ee:1d:bf:50:bb:
2b:2d:96:04:be:4f:7b:95:5d:d0:76:4a:2b:25:7a:
9b:ba:38:14:a2:01:e1:6c:e8:d4:7e:fb:85:5a:ad:
f8:e7:79:15:3d:4a:94:af:f6:a6:f1:d1:34:57:19:
a0:1a:fc:77:ce:e7:37:1b:0b:6c:7a:35:8e:cb:d4:
7b:56:03:5b:ff:bb:32:bb:02:63:db:53:43:59:57:
ca:12:89:f7:28:31:3e:bf:0b:fa:27:53:40:6b:f2:
2a:0e:7e:4f:82:31:c6:a1:d7:dc:24:d3:1a:12:aa:
4a:65:d7:05:74:20:77:20:9f:01:b9:7f:97:a6:6c:
db:e7:cc:b0:f1:f7:8d:51:8b:32:3c:61:eb:b2:11:
a9:6c:59:97:ec:b4:6c:ef:ec:a1:50:54:a9:4f:29:
88:1f:f8:ad:91:cd:b5:f8:7d:34:9e:38:ec:86:5d:
c2:03:8e:53:0b:b8:9e:40:a0:83:78:93:50:74:0b:
df:9b:10:d0:c6:9a:15:ee:d3:73:3f:31:00:0a:d5:
bc:1c:bb:23:20:1b:da:4c:55:7e:53:fa:65:b7:33:
71:8b:5b:44:d2:b4:f0:90:60:c7:a1:7c:cd:36:f7:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AF:E4:1F:96:23:22:5E:2A:9F:EA:9D:F4:45:B5:9C:E3:8F:11:4E
X509v3 Authority Key Identifier:
keyid:CE:80:8F:4C:F2:56:47:7D:70:A2:94:D1:30:16:C2:4E:84:27:D5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1e:81:94:c7:51:ab:fc:4b:c0:63:3e:ab:4b:de:44:4b:d6:
63:70:a4:3a:8d:ad:57:ce:18:71:21:e8:97:7e:b3:a1:57:0b:
8d:90:91:74:90:e9:72:27:62:1d:ea:57:44:81:dd:b7:dc:a8:
93:65:09:29:db:53:2a:f7:54:52:09:22:21:0f:ad:a6:a0:8a:
55:22:9e:87:f9:40:95:d1:2c:01:e7:7a:ab:af:14:f9:27:cf:
10:1c:bd:72:af:26:cc:a8:af:ca:0a:b0:11:ac:12:dc:d4:0a:
be:90:ff:2d:8f:ff:4a:7c:33:38:81:2c:78:d8:58:23:e5:50:
36:84:0e:59:4c:38:b8:0b:ac:9e:a2:28:0a:eb:bf:e2:8a:fa:
a5:86:ac:8f:e9:95:bb:39:f6:10:aa:b7:97:43:2d:b8:d6:f1:
fa:a1:b7:03:8a:2c:26:da:d0:f6:d6:94:30:0d:45:2e:bc:9f:
54:1a:d2:83:0e:72:a3:b4:27:21:3e:ad:64:2b:b5:37:ef:c1:
4d:da:ed:71:de:ab:22:2e:14:fd:84:46:3a:ed:88:1d:a4:b1:
92:a8:dc:c9:fa:aa:7a:4f:9c:87:02:0f:de:41:2d:d4:51:d6:
e0:fb:d2:0f:ea:1c:c5:01:42:38:01:43:9f:5b:5e:96:9d:53:
b6:43:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:48:50 2026 by rpki-client