Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: GYIhp8SBvZQckZkTLQSf7VGaD/t92jILTxljQApsrvo=
Subject key identifier: 72:C1:F7:CE:12:DD:81:E4:44:6F:AC:FD:62:1B:AD:24:C5:F7:F9:AC
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 01A15F9F3AFAB0A0171BDB0F14594208CE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0F6D
Signing time: Wed 21 Oct 2026 18:00:33 +0000
Manifest this update: Wed 21 Oct 2026 18:00:33 +0000
Manifest next update: Thu 22 Oct 2026 18:00:33 +0000
Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=)
2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: jAoy5VptAP8ZqeFaG8PJV0xkawF2XYctLpHttJifqjE=)
3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:9f:3a:fa:b0:a0:17:1b:db:0f:14:59:42:08:ce:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Oct 21 18:00:33 2026 GMT
Not After : Oct 22 18:00:33 2026 GMT
Subject: CN=72c1f7ce12dd81e4446facfd621bad24c5f7f9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:4c:0d:c8:16:7a:02:44:2d:75:53:21:c2:
f9:2d:21:84:53:1d:47:48:96:16:48:00:57:cc:7b:
21:b3:22:22:e4:66:32:2b:08:41:fb:9b:93:b3:c3:
5e:71:6e:38:d5:17:d5:16:c3:57:68:4f:c6:6f:18:
5a:f6:89:fe:8a:55:9f:f3:3f:cf:ad:40:ed:de:77:
f4:41:0d:c5:c8:6a:8d:b2:29:42:27:0c:21:12:de:
67:05:ee:30:f1:0e:d7:52:7d:41:45:52:08:48:f6:
2c:4b:15:dd:e0:a8:83:c9:4e:66:a1:94:49:38:cc:
83:fb:90:f3:d9:28:dc:01:8e:1c:bf:75:e0:5d:5f:
2e:f8:b3:4a:35:3f:55:67:f5:76:c3:83:6b:15:12:
f6:a5:44:fc:8e:aa:3f:95:7f:24:0e:55:29:7e:82:
1f:e2:82:08:9e:f2:4b:aa:66:5d:0d:11:55:99:ad:
13:ec:39:36:1f:ed:3c:e4:c3:88:01:57:9f:6b:b9:
da:ec:83:f0:e4:45:a5:13:1b:a2:a5:a1:79:6b:b3:
83:9a:a6:1a:e4:20:55:7f:d4:b7:6e:90:e6:b3:ba:
0c:8e:c1:43:d3:ca:74:f7:70:e3:c2:d3:72:84:36:
b8:dd:de:3f:ee:ba:c9:42:12:ae:d8:95:22:9a:31:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C1:F7:CE:12:DD:81:E4:44:6F:AC:FD:62:1B:AD:24:C5:F7:F9:AC
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:09:25:54:94:af:df:0e:55:28:19:07:7a:08:60:91:80:76:
ca:98:7f:37:9f:92:0d:86:7c:51:57:f5:d3:79:a0:e9:e6:2b:
3f:b3:0f:d1:6f:82:12:4c:03:3a:c0:87:2f:eb:b1:b1:df:43:
e5:6a:1f:16:11:a6:f0:5f:47:65:e0:df:4f:2b:ff:17:0b:e8:
f2:32:b7:aa:da:ee:7c:ef:30:b4:81:b5:0d:e4:21:f7:89:51:
c6:1b:79:ab:a1:29:9c:2f:97:54:4c:d3:88:17:5e:d3:7b:86:
7b:02:27:4c:c9:c1:59:76:b1:d9:f8:12:16:4f:8c:6c:29:c2:
40:64:b8:a1:53:1f:6f:91:07:1b:cc:51:ee:03:66:90:f1:ba:
6d:7c:76:83:0c:36:61:72:26:bd:c8:2b:d8:09:fe:8c:e3:bc:
d1:53:db:51:48:28:53:74:80:84:ec:c4:87:74:32:80:83:25:
81:1a:40:15:fa:93:0b:41:31:7b:9f:39:8b:58:fb:09:70:a7:
6b:2b:35:63:a6:64:ff:ee:9a:4b:6c:7c:31:76:eb:63:6b:26:
39:ce:1c:5e:4f:a3:e0:ef:9b:a5:36:3e:6a:1b:ad:17:9c:0c:
79:11:29:d8:f9:31:5b:bb:5a:9a:ef:12:55:ce:ac:04:8f:2e:
49:b0:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 04:28:25 2026 by rpki-client