Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: 0Vj76oPdGW1V+9IvE0NgfskgiksCAa7zEl7LqNGS4sY=
Subject key identifier: 79:25:B4:F4:0A:C0:BF:5C:A5:73:81:F5:61:5C:D2:07:5C:EE:FF:10
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 01A1431658BA6231484C61968D7C764FE51A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 1AAD
Signing time: Fri 16 Oct 2026 05:01:40 +0000
Manifest this update: Fri 16 Oct 2026 05:01:40 +0000
Manifest next update: Sat 17 Oct 2026 05:01:40 +0000
Files and hashes: 1: D4uyY53Lmy1XuEBR8gb-mU5orsY.roa (hash: 8oSSSK/7hQ8ikVIjak5cGWlYgkzTSsHj01P8F5aOk0c=)
2: _-wZGwfKC4JuWvajehhHWsCMKV0.roa (hash: d+1R/IWP3rQJYixIA4F2RI4IuR3jIDKC1rUEN0I2u8s=)
3: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: nU5kH/EpHZf+aH+DX1mN9PVPBojBeiRgru7iqRtCQmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:16:58:ba:62:31:48:4c:61:96:8d:7c:76:4f:e5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Oct 16 05:01:40 2026 GMT
Not After : Oct 17 05:01:40 2026 GMT
Subject: CN=7925b4f40ac0bf5ca57381f5615cd2075ceeff10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:1b:40:3e:1f:8d:a0:c6:63:2d:85:31:83:
1d:9b:db:a8:df:99:e5:c1:25:76:18:d2:6c:69:00:
81:be:ec:ce:c4:71:14:2d:76:dc:2a:4b:d9:1d:b5:
89:ee:07:10:3a:6d:c0:76:bd:dd:6a:92:ea:20:17:
4c:2a:b4:48:b1:b3:04:d0:9f:f2:ac:82:bb:a8:47:
e3:6e:f1:6f:7b:3a:ac:b7:b1:b6:52:5e:5c:3d:4a:
90:9c:84:8f:92:70:74:d4:8b:07:68:ce:40:83:2c:
ef:62:5e:0a:36:59:a8:97:67:b7:44:97:5b:88:d2:
13:c6:3f:c8:83:0a:af:7e:4e:d8:87:06:da:4b:31:
ee:8f:92:fe:14:99:1b:63:e2:bf:41:06:12:5e:68:
77:f4:39:31:b7:ff:b5:b6:e9:30:bd:0b:b7:65:9d:
6c:f3:42:ec:f9:87:be:1c:24:5e:ba:dc:8e:63:ab:
a7:3d:f7:53:3a:3c:42:61:b8:80:80:8f:2f:6f:7c:
78:12:f3:72:bb:2e:99:0a:0b:68:63:53:da:27:0d:
32:ee:69:48:e4:ae:a9:66:29:34:03:ac:ff:0d:6d:
0c:cc:4e:75:e2:48:f1:a3:b8:a4:0d:9e:6f:94:d4:
dc:a9:15:4e:ab:7a:06:89:63:f2:28:66:26:65:e1:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:25:B4:F4:0A:C0:BF:5C:A5:73:81:F5:61:5C:D2:07:5C:EE:FF:10
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b6:51:8a:9d:88:f1:c2:1e:6e:9f:4f:c1:78:8a:e7:cd:b2:
ed:61:7c:59:53:45:27:ec:9e:b1:55:73:27:d1:18:7e:01:c6:
e3:63:9f:df:19:ff:ff:7d:59:db:e2:6e:de:7f:73:78:32:63:
03:c5:35:5f:45:f7:9d:7e:38:be:0b:e6:6d:83:01:6a:db:95:
c2:5e:3d:78:1a:35:8c:f7:75:1d:b8:bf:d7:59:f8:43:80:dc:
38:d5:80:9e:fc:72:0c:5b:ac:63:6b:d2:7e:fd:70:89:74:7c:
02:c8:af:53:93:eb:4f:e1:98:ff:cf:85:a3:1e:e1:2c:4d:21:
1e:f9:30:56:3e:63:2f:c5:d2:1c:66:8b:15:f0:42:59:67:2f:
09:05:5e:fc:91:28:8b:ab:36:3e:f5:3d:ce:4e:4d:f6:db:a7:
dd:fe:33:ad:a9:cb:a9:e6:9c:6b:2e:94:8e:3b:85:b5:92:6f:
53:b7:37:e7:97:9a:fc:32:fd:72:73:90:44:6d:fe:64:b6:a7:
1d:14:74:28:72:cd:2e:af:b6:85:0f:21:74:7e:24:ad:65:b0:
3c:82:af:c6:8c:59:ce:19:4f:2f:96:7b:7e:1e:e9:a8:1e:be:
4e:88:9b:34:92:1a:f9:cf:a0:be:e4:90:46:12:ee:7a:37:8d:
13:12:15:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 14:47:48 2026 by rpki-client