Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft
File: zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft (raw, json)
Hash identifier: Il3OKv5MYoQhV/UrycaOZKmGoTExcnUXjfnLbdvhJ+8=
Subject key identifier: 14:30:5B:7F:06:8A:FC:27:CF:83:A0:4C:B0:AC:F3:FE:49:7D:AD:46
Authority key identifier: CD:97:32:4F:B2:60:67:E1:49:06:EC:F0:6C:AB:73:9F:98:9F:A6:AE
Certificate issuer: /CN=cd97324fb26067e14906ecf06cab739f989fa6ae
Certificate serial: 01A09060559F3E802BE516A589E2C8FF3588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft
Manifest number: 02
Signing time: Fri 11 Sep 2026 12:10:27 +0000
Manifest this update: Fri 11 Sep 2026 12:10:27 +0000
Manifest next update: Sat 12 Sep 2026 12:10:27 +0000
Files and hashes: 1: HAgD-6lzARBUZEheRfE_VYTGH2E.roa (hash: UTf/mQA4tg3Niv2O7+oPEbWjLqeqIgO8fCv9i/kovK0=)
2: zZcyT7JgZ-FJBuzwbKtzn5ifpq4.crl (hash: 1glKMLUZ1VYi84qAjYtbzPD01UFibxITjhNolyVl2c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:60:55:9f:3e:80:2b:e5:16:a5:89:e2:c8:ff:35:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd97324fb26067e14906ecf06cab739f989fa6ae
Validity
Not Before: Sep 11 12:10:27 2026 GMT
Not After : Sep 12 12:10:27 2026 GMT
Subject: CN=14305b7f068afc27cf83a04cb0acf3fe497dad46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:57:c4:99:4b:ee:7b:fc:99:6d:4d:b0:06:
89:e1:70:89:a3:57:95:01:69:99:f0:fc:e9:55:c1:
33:3d:3a:5a:cf:2b:96:c8:90:5d:fa:d4:16:b0:1e:
df:fa:15:ff:60:9c:93:60:5a:16:da:9f:c3:9a:26:
ac:9e:cf:25:a8:24:58:71:87:08:ce:f1:7f:a9:5a:
b9:df:38:15:04:18:6a:5d:af:0a:03:fe:3c:09:a1:
64:79:75:9d:95:57:99:c7:15:d8:75:85:b7:c6:59:
cb:48:6e:1d:0b:64:55:f4:58:89:6a:3a:a7:72:56:
ef:e3:90:15:4b:59:27:68:85:14:a2:66:1b:db:ff:
4d:9f:41:85:b1:c6:4d:df:ec:2c:37:42:20:8c:cb:
a8:8f:23:04:b9:4b:2e:a4:43:b5:54:2c:2b:f6:ff:
9c:37:08:48:a3:34:79:25:75:11:79:e2:e7:55:61:
eb:e1:d0:1d:01:a7:ac:aa:7e:16:31:b1:3a:c3:03:
d5:34:ef:23:dc:24:5d:a2:9d:75:32:84:db:e6:69:
be:c8:50:62:21:cc:3e:0b:8e:43:c7:54:ef:49:db:
db:d2:3f:62:50:e5:3c:a3:89:97:a5:f4:dc:70:68:
60:7a:42:a2:d0:88:3c:ba:81:49:9f:5b:e5:df:59:
14:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:30:5B:7F:06:8A:FC:27:CF:83:A0:4C:B0:AC:F3:FE:49:7D:AD:46
X509v3 Authority Key Identifier:
keyid:CD:97:32:4F:B2:60:67:E1:49:06:EC:F0:6C:AB:73:9F:98:9F:A6:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:25:57:22:b4:f5:c4:fd:4f:9e:70:b2:c2:76:63:6c:8a:f4:
3c:00:a7:30:80:a9:ba:10:99:6e:5f:da:6b:e0:68:79:37:53:
25:f4:64:c9:4f:df:c8:cb:53:b2:7d:2a:76:a4:ec:7f:c4:36:
d5:a9:7e:ca:28:a2:6d:c3:56:b0:22:3d:af:3a:ed:c1:63:76:
bf:b4:4a:6e:72:b2:9e:41:4b:d5:36:b1:18:5c:02:18:5a:91:
ab:72:7f:29:fc:70:96:0a:fe:0e:2d:21:b7:89:f6:dc:b9:c9:
05:be:7b:4c:b0:7e:46:0b:1a:8c:f9:1a:10:f2:cf:a4:7f:1c:
cb:15:d6:26:8c:18:e3:d3:0f:ce:f4:46:20:08:7a:d3:5e:d8:
cd:35:4e:a7:94:1a:79:1a:fd:12:de:1d:9c:ed:66:30:3d:5a:
74:17:b4:9c:37:8b:28:14:35:bb:aa:32:0e:fd:6d:4e:fd:d9:
73:59:d6:be:77:bf:79:1e:62:14:0e:af:e0:d8:1c:d6:82:88:
36:7c:ec:96:d6:ae:6f:5c:2b:88:f3:ce:5b:f7:bc:fe:a6:bf:
45:c5:c2:06:9a:5f:ad:d7:4b:e1:7d:ab:68:18:c3:90:22:8c:
73:96:8c:e6:b6:97:1e:0c:f1:85:a0:ef:93:72:fb:ed:70:c3:
7a:82:9a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:18:19 2026 by rpki-client