Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: Cu/jrcyfF5UpHGetZXsMooXC28AowcQTKRwd5cYmuJk=
Subject key identifier: E7:CA:BE:B0:F3:3B:BC:73:13:19:83:B2:40:12:3D:A9:10:41:6C:AD
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 01A1867693DB16A81C8BBCA8A3996C91760C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 1580
Signing time: Thu 29 Oct 2026 07:01:20 +0000
Manifest this update: Thu 29 Oct 2026 07:01:20 +0000
Manifest next update: Fri 30 Oct 2026 07:01:20 +0000
Files and hashes: 1: HY8y2aUxH2zl7Z8uEFKyCs4_DZE.roa (hash: pgB+L4R4Q18tDhMP8CyO3Aai8GigL3mxjQcI8MoXdXI=)
2: cKZJLTzeqYRhpsddyswZAoLcpsE.roa (hash: HgvgjBFasTjpcgFlyoecgapQ0MDuq029z3qYeWnH2Zk=)
3: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: /Dc73jGAB0KDtpcwJppzYPI9mQf7MMsQsrjFh8Zf+jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:93:db:16:a8:1c:8b:bc:a8:a3:99:6c:91:76:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Oct 29 07:01:20 2026 GMT
Not After : Oct 30 07:01:20 2026 GMT
Subject: CN=e7cabeb0f33bbc73131983b240123da910416cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:d4:cf:46:98:21:71:61:13:1e:da:ff:73:
32:3e:8a:4a:98:8b:b5:10:00:56:d9:e9:c0:f7:06:
59:10:9e:ff:ba:d1:84:df:55:e5:92:03:28:ee:c6:
36:2f:2d:28:06:30:50:0c:e1:2d:8c:1f:aa:8b:ab:
d5:3d:b5:77:da:af:7e:65:13:15:fa:8c:ed:47:80:
c1:7a:62:af:8e:6d:5b:b3:a5:24:ff:f0:00:67:51:
85:0c:2e:ff:9f:3d:f0:17:89:dd:33:65:e8:6c:ca:
79:46:f8:59:f1:75:0e:5c:b4:5f:8b:0a:c4:2e:b7:
cb:29:81:e8:b3:05:e4:50:31:72:13:57:ac:cb:99:
ef:63:85:a7:94:19:04:65:a4:86:e9:71:14:24:6a:
32:67:6f:71:a8:03:26:4f:92:f0:b7:42:b9:cb:e5:
ca:4d:39:de:fd:b4:d8:ad:db:6e:f9:f0:db:07:e7:
e9:ff:dd:49:6a:97:69:cb:9f:76:d5:3e:5d:2f:28:
dd:fe:5a:15:eb:1b:bf:dd:df:87:e8:ad:5f:74:8a:
3c:6e:e7:36:9c:00:58:75:b6:c4:f1:f4:05:01:a9:
50:d4:ff:bc:08:a2:18:2e:54:dd:2e:15:7c:0f:39:
ec:b3:11:80:6f:67:11:4b:5a:0f:f8:7f:b1:1e:7d:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CA:BE:B0:F3:3B:BC:73:13:19:83:B2:40:12:3D:A9:10:41:6C:AD
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f6:d8:5c:19:b4:73:e8:09:5d:9e:57:88:d5:96:a3:69:d2:
20:b1:ea:66:c3:c4:c4:a2:b3:00:f4:a7:24:93:b4:3c:dd:78:
6a:ed:d9:14:e7:62:98:d0:93:c2:31:b0:85:ef:44:20:ad:3e:
86:7c:1e:3b:64:33:6b:99:79:6c:88:f5:47:00:c4:79:4b:d5:
4b:f3:1c:ee:8b:7d:cf:a1:98:0e:86:be:41:b2:bc:02:e1:5d:
65:47:d8:91:96:84:06:11:6d:df:32:29:8d:01:a5:f3:25:a1:
9f:ce:fe:d4:7f:5c:c5:4d:bd:f8:13:1a:3f:1b:69:16:d6:37:
f8:35:27:56:f0:fb:b1:3e:f6:f6:53:10:c3:df:a0:e1:71:42:
de:57:1a:45:ba:5c:5e:c4:a9:71:2f:2f:4b:ea:f6:7b:ac:d1:
37:45:37:e1:cd:ad:ab:ae:fd:f0:37:cf:4d:37:e9:61:d5:55:
05:a7:a0:7e:c0:c1:5a:5c:65:d0:52:cb:52:e9:f6:3d:8f:c0:
c8:1f:a8:a2:64:e5:7b:25:f1:8c:74:9f:e1:1c:2e:7e:58:0a:
5c:40:01:88:0f:94:7d:6f:d0:5b:19:e1:3d:f9:92:33:c0:72:
c5:af:ed:9d:f8:91:06:de:fe:79:5e:ac:e5:1b:77:d6:e6:6f:
a2:d1:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:12 2026 by rpki-client