Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
File: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft (raw, json)
Hash identifier: leUMdRmVmebsVn4b2PEI3ZfyGLloTJRKettgMlMiB8k=
Subject key identifier: 84:5A:9F:2C:A8:C7:97:01:A5:59:A1:F4:EF:C1:12:62:B1:62:F1:98
Authority key identifier: 66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
Certificate issuer: /CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Certificate serial: 01A02620583483E186FB3F2A384B0B0D75D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
Manifest number: 8D
Signing time: Fri 21 Aug 2026 21:00:48 +0000
Manifest this update: Fri 21 Aug 2026 21:00:48 +0000
Manifest next update: Sat 22 Aug 2026 21:00:48 +0000
Files and hashes: 1: 65lyhfcnUeev5X-4CcMUdWujCvQ.asa (hash: Q5VU2hVKSklyugtCkKPk1YQjPGPSs0Bldy1d061Ftg4=)
2: PQUU7wS6Dnj9yIlgV8Xc2NVBH64.roa (hash: KhnDFB03h86ec4eUqmqIrwmEs0JGq+ImfCvKHB/LolY=)
3: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl (hash: BXLMtJGhN0R+FXwIrMMlOulq4a3T9ILD8vVp35u/rn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:20:58:34:83:e1:86:fb:3f:2a:38:4b:0b:0d:75:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Validity
Not Before: Aug 21 21:00:48 2026 GMT
Not After : Aug 22 21:00:48 2026 GMT
Subject: CN=845a9f2ca8c79701a559a1f4efc11262b162f198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:87:5c:08:c3:62:81:6a:bd:54:90:3e:6e:
b1:55:93:2c:ea:44:02:28:b7:2f:dd:c8:47:08:17:
b1:48:4c:54:48:87:20:5f:5d:61:c8:21:ae:ea:ba:
c9:a5:3e:85:00:16:c8:fa:e7:1e:c1:27:a0:f8:c7:
b7:96:f2:9f:c2:cd:bf:c1:7d:44:da:b2:c5:aa:af:
cd:9d:01:03:2d:94:e2:6b:bf:56:d8:24:e2:74:88:
4a:f9:a8:e0:3f:4f:be:42:1a:7a:bb:8b:6f:01:5b:
0b:8c:f8:96:a3:47:71:fe:e6:28:fe:aa:94:f5:4e:
39:b1:34:73:95:11:ae:f8:1d:a2:9b:f4:df:65:df:
ca:2b:19:72:a3:93:7c:14:e7:33:d9:c9:c7:ad:8a:
ad:06:06:08:96:ff:cf:2d:53:55:5c:20:c3:0e:4e:
3b:fc:3b:b6:c9:93:7f:1c:3f:8f:9f:80:e2:c1:e3:
c7:1e:ef:56:fa:3a:2b:cb:df:5e:6f:26:43:3b:62:
22:b8:0b:b7:72:e0:da:20:a4:0b:63:ca:45:56:00:
b9:22:1a:72:2e:c4:66:4c:d2:11:65:8f:2a:73:c5:
df:9a:92:f1:c5:91:b1:66:9c:c0:a5:19:2d:c1:c4:
44:b0:69:f4:2f:cb:ef:a7:32:09:be:06:8c:99:b0:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5A:9F:2C:A8:C7:97:01:A5:59:A1:F4:EF:C1:12:62:B1:62:F1:98
X509v3 Authority Key Identifier:
keyid:66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:91:cc:62:0a:62:d4:02:4d:06:9b:46:83:9a:e1:1b:aa:02:
86:1b:c9:d1:0d:bf:8e:fe:7c:26:3e:f5:e6:57:4e:ac:3f:19:
a5:4e:87:d4:80:16:6e:54:95:9c:f4:ae:23:37:e3:78:e7:68:
3d:17:a4:99:bd:f2:8e:8a:f6:69:0e:49:c7:2d:2d:31:af:dd:
ce:ff:0d:30:cb:1d:a7:8c:20:ef:ab:23:f3:19:17:3f:8b:fc:
86:86:e4:2d:4c:25:51:34:37:ce:76:02:5a:f7:61:6c:55:c6:
73:fc:f5:14:62:44:06:e5:9f:f7:0b:e7:d1:c0:30:2f:0e:0d:
57:33:c7:20:df:c4:7d:ab:97:b1:1f:a8:f4:1a:ba:2e:84:67:
32:02:f7:26:c1:ab:c2:af:2f:22:3a:bc:e1:75:aa:f7:33:79:
28:8e:98:69:c8:9b:5b:17:ac:c6:de:30:12:24:5d:0e:81:e1:
32:0c:a9:43:a7:80:9b:54:da:49:5c:d5:9c:09:ef:1a:e6:74:
48:c0:4f:11:89:ae:37:06:7d:b6:0c:d1:b8:71:23:de:f2:18:
48:cb:14:20:3f:03:c2:78:41:8e:d7:ab:53:ae:1b:f7:44:f1:
98:53:ff:da:08:c8:10:0d:1a:1b:d7:9c:2d:de:b1:3c:67:04:
38:c7:4e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:10:30 2026 by rpki-client