Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
File: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft (raw, json)
Hash identifier: Ox2IGtkXmqfCI8eZ9o/CGEcznzsH+qtkAn1aZMhd07s=
Subject key identifier: FC:86:41:20:30:1B:72:08:9B:0F:F1:12:04:D1:4B:4D:95:C5:50:4C
Authority key identifier: 66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
Certificate issuer: /CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Certificate serial: 01A1212E9A67F670FFC13288DAD2EB5C4735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
Manifest number: 010F
Signing time: Fri 09 Oct 2026 15:01:04 +0000
Manifest this update: Fri 09 Oct 2026 15:01:04 +0000
Manifest next update: Sat 10 Oct 2026 15:01:04 +0000
Files and hashes: 1: 65lyhfcnUeev5X-4CcMUdWujCvQ.asa (hash: Q5VU2hVKSklyugtCkKPk1YQjPGPSs0Bldy1d061Ftg4=)
2: PQUU7wS6Dnj9yIlgV8Xc2NVBH64.roa (hash: KhnDFB03h86ec4eUqmqIrwmEs0JGq+ImfCvKHB/LolY=)
3: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl (hash: j7E8WhsaFEQb3Dp0QNKn0sqfgZcUqhQwVWY8qTzPWKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2e:9a:67:f6:70:ff:c1:32:88:da:d2:eb:5c:47:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Validity
Not Before: Oct 9 15:01:04 2026 GMT
Not After : Oct 10 15:01:04 2026 GMT
Subject: CN=fc864120301b72089b0ff11204d14b4d95c5504c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:90:52:fd:7d:09:88:f2:15:2c:87:6b:26:
f5:d9:cb:78:55:5e:05:e3:06:d8:e0:67:33:e9:ee:
0f:3e:eb:a7:19:82:99:8b:1e:96:11:8b:aa:bb:59:
5a:93:b1:91:02:be:d1:71:ef:f1:70:3d:90:92:44:
36:14:9e:44:46:c5:46:d0:8c:e8:7b:ef:7c:82:b2:
01:ae:7f:c1:2a:9c:44:86:b6:f3:40:5f:97:8e:22:
e9:ba:52:ba:3a:d5:51:64:35:84:07:40:64:6e:2b:
58:73:65:d8:e7:d5:8d:a1:45:6d:9b:2f:8a:76:83:
cd:e0:f2:63:54:18:60:a6:f6:18:bd:db:54:24:5f:
30:50:08:52:51:7e:d1:ce:ec:a5:16:4f:5e:25:c9:
cc:1c:2e:fa:e1:25:74:bd:00:01:1e:f6:f6:85:4d:
bb:d1:7c:41:5d:ea:81:98:3b:3f:ea:b3:13:db:2a:
7b:91:dc:74:3d:8e:9b:2e:90:40:74:3b:21:6c:d9:
d6:e1:31:7f:57:9c:27:ca:3c:31:a8:b5:ef:e1:e6:
71:6f:99:22:fd:4b:7a:d7:98:82:7b:01:65:3c:9b:
4f:21:5f:df:4d:0f:ed:32:13:7f:e9:a4:b6:a3:c4:
12:55:cb:cc:76:53:71:77:e2:bd:ca:11:a8:de:81:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:86:41:20:30:1B:72:08:9B:0F:F1:12:04:D1:4B:4D:95:C5:50:4C
X509v3 Authority Key Identifier:
keyid:66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:93:5a:a9:a1:49:8b:0f:8f:8b:20:53:43:6a:fd:e0:64:81:
7e:f2:ab:ff:c5:46:10:f2:ca:c5:26:38:6c:17:ac:49:70:ec:
3a:ad:1b:1f:8b:9d:24:17:e7:a4:63:9c:9d:c7:d3:41:d1:5b:
00:1b:8a:55:69:27:8f:2a:30:4b:40:70:e2:44:e3:4e:f6:1d:
87:59:42:16:54:7d:7f:de:3c:8a:09:75:08:5a:11:ef:54:48:
ac:b4:b8:49:79:6c:6d:ae:2e:c0:6b:77:ca:84:88:f4:0a:41:
a5:32:fd:78:47:08:f1:88:3d:51:86:2e:8a:85:6a:fc:10:63:
8f:19:6d:02:a6:51:f7:b1:3d:0b:89:f7:5a:61:91:6b:97:1f:
d6:6a:b4:4f:02:75:88:b6:01:b3:99:a3:a4:bc:d3:89:1e:77:
5d:b2:23:9e:48:7e:8a:03:87:51:16:c0:0c:b4:a5:ae:2e:b3:
99:da:76:55:b5:7e:18:c2:d0:7e:70:38:50:28:66:0f:c5:5e:
34:ff:d6:e9:07:dc:13:a1:08:30:96:42:78:e0:dd:41:ed:1c:
70:d2:f8:eb:b7:d3:5e:fc:9c:9b:76:7d:4e:55:bf:13:62:01:
27:37:a4:51:bb:05:f9:14:ab:05:65:80:6c:a3:9b:26:31:cd:
30:57:7d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:13:56 2026 by rpki-client