Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: YJ3wmvRGt/M3qxCB1jFs9FnBP63FvX/uAA2doA/E2rQ=
Subject key identifier: 3E:D8:18:5F:8E:14:AE:A9:B6:C0:E5:2E:25:4A:28:42:61:3C:79:26
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 01A18B9C08202F0D3517C37C3B409DD9E6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 062F
Signing time: Fri 30 Oct 2026 07:00:20 +0000
Manifest this update: Fri 30 Oct 2026 07:00:20 +0000
Manifest next update: Sat 31 Oct 2026 07:00:20 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: LrefyDPXTyRibjLM8tWZR5k2WLN3dk43OBzcSddAzPY=)
2: 7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (hash: SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:9c:08:20:2f:0d:35:17:c3:7c:3b:40:9d:d9:e6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Oct 30 07:00:20 2026 GMT
Not After : Oct 31 07:00:20 2026 GMT
Subject: CN=3ed8185f8e14aea9b6c0e52e254a2842613c7926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:fb:24:75:c2:c9:7c:c5:62:31:80:4a:8a:
af:ee:1c:31:97:83:e8:62:1f:8f:eb:fa:6e:49:51:
29:65:6a:e6:bf:4e:b5:83:b5:ea:94:06:6b:3f:a4:
b3:5e:b1:e2:cf:83:39:2a:84:5a:39:6a:67:b9:47:
f4:53:6b:52:b1:4e:ed:5b:27:00:2e:4e:90:15:1f:
5a:76:36:40:09:8b:7b:f4:c4:a9:71:f1:94:34:37:
a8:22:ba:26:a0:12:96:75:95:f1:9d:77:3c:aa:16:
51:cf:79:a9:8a:1b:94:ab:94:ad:d2:ef:3f:4a:07:
eb:b0:c5:7f:2b:d1:5b:63:f5:79:9c:8c:05:7d:65:
f7:be:62:e7:39:30:01:a7:11:96:67:68:ff:c5:5d:
76:00:b4:77:34:f3:56:a6:33:83:20:1f:73:02:ad:
65:e5:64:a0:0e:f5:45:85:06:a9:57:ea:d2:da:1f:
73:fb:fd:6b:c5:58:ab:fc:da:70:08:6a:7c:3e:35:
b8:17:c7:4d:16:c4:05:49:5f:a8:d9:11:2d:ed:a4:
31:09:40:8e:a1:dd:e4:dc:8c:ac:c4:ff:68:8c:5d:
f4:99:e0:b5:e0:0f:3a:53:fd:3b:56:2d:ab:f4:d1:
ce:55:e3:17:f0:73:0e:d1:eb:55:34:c2:a6:d2:b0:
3f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D8:18:5F:8E:14:AE:A9:B6:C0:E5:2E:25:4A:28:42:61:3C:79:26
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:67:89:06:7f:71:87:51:8a:85:18:a5:ea:3d:66:aa:8c:5e:
23:1d:9b:a8:48:fd:19:a9:55:69:c5:ed:a9:a3:db:e5:33:8e:
9a:c9:b3:4e:f3:65:2e:7d:e1:c3:26:38:1c:a4:7f:69:1c:61:
7f:3f:3c:52:06:ea:3e:61:47:b9:93:dd:9c:2b:f8:a2:ae:84:
93:f7:23:4b:4b:e1:05:df:61:eb:3d:65:51:af:a2:9d:bb:1b:
31:58:3c:eb:4d:35:dd:fb:2a:a5:de:60:be:50:27:5f:b4:42:
f3:ab:d4:12:94:48:c4:5b:8f:b3:37:cd:ef:f2:bb:de:41:31:
d2:b0:ef:b2:22:67:49:fa:1d:60:94:37:28:9e:b4:69:b9:7a:
83:d1:69:6e:6c:cd:8f:fb:c0:cb:f8:dd:53:03:39:a4:d1:7e:
e5:a8:05:a4:80:27:36:a5:8e:f7:32:19:49:32:8f:fb:f2:66:
70:ee:1b:91:90:0e:c9:1b:74:92:df:07:be:16:06:ed:c6:cf:
dd:b8:98:8e:88:da:2d:72:fd:57:5f:81:e8:19:7c:89:21:18:
fb:b2:64:89:1b:3f:2b:be:72:9c:ff:7a:12:3b:5a:6b:ee:9a:
d3:d6:7d:e1:32:dc:16:08:5d:8d:25:ee:d4:5c:76:67:c6:6f:
53:a1:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 13:51:12 2026 by rpki-client