Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
File: ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft (raw, json)
Hash identifier: dNfvQVSAfobPXC/jG8jshRF1VReST/ZX2GLS8P2eDxs=
Subject key identifier: 5B:DB:BC:89:E7:D5:A0:D7:46:AF:4D:D4:D2:4B:BE:BA:F0:31:D6:7F
Authority key identifier: 64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
Certificate issuer: /CN=64262c8337e218bed316b70cc092dd0befe8195b
Certificate serial: 01A181BDAFF6A8741EC74DDDF209BF418209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:00:54 +0000
Manifest this update: Wed 28 Oct 2026 09:00:54 +0000
Manifest next update: Thu 29 Oct 2026 09:00:54 +0000
Files and hashes: 1: 1L45PsyuvIYIg2ZJpaZ1kexqtD8.roa (hash: gzQs+2Sri4/i+ZuiKLzc6oYRR4Wmc7We38Tn2yPF6nU=)
2: KCG2jhdDWc9bOUDAuVYJDwPA_IM.roa (hash: XSPZXPjtWmH3tsooKgIJCC9hK4ebdbO48OGaE0GPJDQ=)
3: Ykafli2nuvHvr2ZZrxVKMXpHSUQ.roa (hash: ZVqCkdThQ+Dxa4j8Ohcu5jpE4zpamft8rts1/91ztKk=)
4: ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl (hash: NWwix2tBB9YqmcjjYPCi46EangK9p7NBnxaSeD1Vuxc=)
5: boyjYBR7CeYYqBubps31ePeRjKg.roa (hash: 44PfnVaKtdz7BnqSwnT3jqIEnA/Gm5oPQKvw5imMG+E=)
6: jwSgudfTgoD0rYPgWs2QdsgCaFY.roa (hash: T7RwlJl15rnyYrYfOU8otSAOkH0fOifwVGS8FpasWE8=)
7: kTamAiL6qOOf57nIraLXQq7irIk.roa (hash: djhCgJi8JfOsutJAAl8lRxYE0HKm1fCZVH28XEIjiKY=)
8: lZHIjG7NZwuEiIUXn9PLMVcVIzA.roa (hash: PwjbCusxHYbPcriuRl5QcW2dN5wg11/a1p9YKj/rRnQ=)
9: pOkq5deJnN6boK6s5xEuzkj_cGg.roa (hash: J7cGVPgbOqr7KYHw8zUxLmdbPeKxga24cigIY5mS8rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:af:f6:a8:74:1e:c7:4d:dd:f2:09:bf:41:82:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64262c8337e218bed316b70cc092dd0befe8195b
Validity
Not Before: Oct 28 09:00:54 2026 GMT
Not After : Oct 29 09:00:54 2026 GMT
Subject: CN=5bdbbc89e7d5a0d746af4dd4d24bbebaf031d67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:2f:e3:32:70:87:60:d5:e4:e6:46:cc:52:
9d:ff:95:47:1a:db:91:19:96:39:8a:bd:d1:7c:c6:
a2:4e:3f:46:17:5f:26:b2:d9:a5:19:68:57:68:86:
1b:a2:75:24:9b:90:5d:02:c8:aa:a6:ab:b6:5b:b5:
85:1a:8e:1b:38:41:d4:54:41:bb:f9:86:33:8a:d1:
e6:44:2b:cc:8d:00:9f:14:0b:d7:b1:d6:e6:f6:b4:
d1:88:64:41:fb:d8:66:3b:0b:ef:25:48:63:6b:61:
fb:85:a3:c9:f0:25:44:cc:d1:a1:8f:58:6b:85:a4:
84:58:bf:cb:f5:8b:95:b7:bd:fd:b0:9b:48:7e:1d:
32:5c:75:d4:e8:cd:d5:13:f0:43:71:8f:e2:e2:5d:
6f:68:4d:b0:3c:0e:5e:48:cf:a3:54:df:74:36:06:
ac:0e:94:ec:ff:d0:17:85:c2:92:44:14:9f:69:e2:
66:39:61:a5:c3:6e:b1:92:ee:ce:57:bc:3c:ff:c6:
6e:24:ea:36:89:38:60:e4:ca:67:7f:ec:a6:a0:53:
ad:f8:47:fb:03:ec:61:63:3f:d6:41:01:94:4b:82:
be:8e:01:a5:e9:56:cc:99:b7:8d:ae:1f:ec:13:8d:
83:1e:fc:1c:9f:07:4d:7e:f1:7d:c4:7a:91:f5:9c:
27:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DB:BC:89:E7:D5:A0:D7:46:AF:4D:D4:D2:4B:BE:BA:F0:31:D6:7F
X509v3 Authority Key Identifier:
keyid:64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:82:eb:79:1f:75:eb:a7:1b:1e:86:f0:78:94:9c:03:0e:e2:
bb:57:52:8b:01:b7:63:29:a9:ef:81:d3:f9:da:e0:06:c8:80:
9e:ec:74:4d:a7:70:8d:8c:48:bd:58:2d:42:2b:40:c3:65:a0:
3e:f7:eb:d3:5c:ea:0a:c9:f4:34:f5:41:d1:88:3c:4a:8b:61:
a3:fd:bf:20:2d:12:bc:1c:cc:a0:c2:f1:b8:ec:5b:bb:b0:4d:
72:22:d3:bf:e4:65:bb:0e:c3:9b:dd:ea:67:89:2c:29:69:6c:
c6:3b:37:3b:8d:92:48:56:68:67:1a:f1:e8:d4:dd:9a:a1:61:
67:f0:49:e4:15:09:e5:9b:6a:60:df:80:7a:bc:44:6e:36:63:
6c:f8:d8:5c:fb:49:fe:e4:b0:0a:84:a6:16:8d:aa:11:e6:1e:
53:f8:06:17:bf:ec:f1:d0:d3:5f:94:3b:8d:be:c1:1e:f6:c8:
1a:5d:1a:2c:03:00:04:a7:c2:15:88:6e:16:f9:bf:08:a4:4f:
2b:cc:fe:be:60:bd:83:c3:58:b3:fe:8e:44:9b:00:20:db:5e:
86:88:c2:36:8f:23:0c:ca:ac:32:d6:3e:e4:91:a9:a4:e6:20:
aa:ff:9b:98:df:7b:65:c1:e9:b1:0a:da:d7:92:a3:2e:9a:71:
78:6a:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:29:04 2026 by rpki-client