Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: q+UN4cU15VCmJhPKesm3Skw3LGaOAP961qXLsOdCF/E=
Subject key identifier: DA:5C:60:E3:26:20:13:EF:CC:34:C9:0E:C6:06:9B:92:30:3B:72:6B
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 01A08B68672907111612349854C49E1902D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 0476
Signing time: Thu 10 Sep 2026 13:01:10 +0000
Manifest this update: Thu 10 Sep 2026 13:01:10 +0000
Manifest next update: Fri 11 Sep 2026 13:01:10 +0000
Files and hashes: 1: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (hash: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY=)
2: g8Z517-jOmVF6Xu2Nxp8NTAxGx4.roa (hash: OXnUsbk5vh8et8vrHb0/ntkeJcO9A+ORppXS73LPvXg=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: XuKKHcDjpi6qGVkwwy+7nbsL0IiSvGqKTGi097oPfyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:67:29:07:11:16:12:34:98:54:c4:9e:19:02:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Sep 10 13:01:10 2026 GMT
Not After : Sep 11 13:01:10 2026 GMT
Subject: CN=da5c60e3262013efcc34c90ec6069b92303b726b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:cb:c9:83:0d:85:30:2c:be:c9:86:57:83:
68:8e:9d:4f:80:41:5a:43:e8:0f:46:30:c2:fc:9e:
d1:94:b7:92:4d:27:f0:40:e0:06:ac:42:f2:45:97:
21:29:d9:e0:a2:38:02:ff:ee:5a:0a:a5:4e:e0:54:
44:d3:9c:49:d0:57:ae:39:10:47:5b:0f:51:17:02:
93:79:71:bf:2b:8e:1b:a9:91:d1:b8:6f:a8:d9:5c:
59:34:89:5f:eb:dc:a0:14:b6:6d:a1:c1:fc:48:b2:
76:90:8c:73:bf:07:ad:97:28:83:d4:fb:8e:83:e5:
e7:d4:f7:ad:ce:59:79:46:99:a1:ac:61:df:b5:1b:
82:18:9d:18:74:a2:ab:8a:92:68:c0:93:e2:3d:72:
b3:56:9f:c4:b1:2b:ee:b0:d1:90:80:d8:0e:f7:de:
8b:f8:fc:4b:8b:78:02:52:0f:ac:cf:9f:08:12:7c:
0b:1a:2c:05:81:d2:e7:ba:14:dc:77:04:82:34:fc:
09:20:5a:ac:31:cf:13:e8:ee:9f:84:cf:5e:f7:83:
f2:f0:10:c4:f2:6e:54:25:13:72:44:c5:6b:48:7f:
05:ed:b0:9c:fd:ce:3e:3a:2a:32:d5:ac:e4:3c:f4:
9a:0c:eb:ac:39:70:31:be:be:cd:a6:d4:5a:ef:11:
c5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:60:E3:26:20:13:EF:CC:34:C9:0E:C6:06:9B:92:30:3B:72:6B
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:78:10:2f:f0:89:96:68:07:2f:36:7a:66:fc:e3:42:3c:0d:
23:9d:8b:82:ef:2a:dc:39:86:1d:f6:9a:c9:be:66:bc:a8:02:
03:59:5a:bc:36:ae:85:21:6f:7f:21:a5:f3:a0:d4:28:42:eb:
39:ea:8e:5a:63:98:9c:f2:9a:8d:e4:fd:5b:9f:29:d2:cd:62:
71:89:a0:d7:9c:7d:f5:bc:94:3b:9d:12:ba:cc:41:2b:6c:79:
37:f1:f3:dd:15:dd:ee:e5:98:e8:6a:78:b6:d5:f2:f0:0e:2a:
0b:33:bb:cf:62:18:91:0a:ca:bf:a0:83:8b:fd:00:93:00:e2:
0a:12:2a:55:3e:94:2a:7f:d6:0f:38:37:19:9a:ec:5c:52:cb:
ae:a9:97:2b:c4:fb:f1:e6:29:15:b0:0f:5f:74:11:87:04:e9:
1f:d7:73:7f:8b:02:ee:ba:bb:b2:5e:16:11:18:de:92:bb:cf:
d5:b2:bc:9a:ea:bf:72:c0:b5:be:c1:0f:31:c6:0f:31:1c:74:
91:94:57:3e:2f:d3:75:03:60:e5:19:85:6d:7b:d0:98:a4:49:
b1:05:36:10:13:a1:79:44:c5:89:b2:85:7a:72:45:77:39:e6:
f0:32:48:10:27:00:5e:28:f5:6e:7a:07:66:dc:51:a7:dd:f0:
cc:2f:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:09:27 2026 by rpki-client