Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
File: zBlkheZzlI1VUF23UQ87lXfNOts.mft (raw, json)
Hash identifier: AHKmYRM7eR0mU9H6PCy+zyWiaGFYhkAMEFTIXv9t+N8=
Subject key identifier: 5A:D1:0E:E4:C8:F8:0B:93:E6:F6:9D:12:D9:DA:DC:41:8F:F1:24:2D
Authority key identifier: CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
Certificate issuer: /CN=cc196485e673948d55505db7510f3b9577cd3adb
Certificate serial: 01A08C0D72E42C63AAE9427456387A5079FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
Manifest number: 01C5
Signing time: Thu 10 Sep 2026 16:01:26 +0000
Manifest this update: Thu 10 Sep 2026 16:01:26 +0000
Manifest next update: Fri 11 Sep 2026 16:01:26 +0000
Files and hashes: 1: X2BbHndtPwpXSs2sGEdVgFLq9BU.roa (hash: emzj289yDYGpibBHeVzv0i5u6U+HSsPi/OSfpVmeMAM=)
2: zBlkheZzlI1VUF23UQ87lXfNOts.crl (hash: z0Gq5laERDZsL7tAM/NJFkzQU2n5zslC4qk2G970fEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:72:e4:2c:63:aa:e9:42:74:56:38:7a:50:79:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc196485e673948d55505db7510f3b9577cd3adb
Validity
Not Before: Sep 10 16:01:26 2026 GMT
Not After : Sep 11 16:01:26 2026 GMT
Subject: CN=5ad10ee4c8f80b93e6f69d12d9dadc418ff1242d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a3:d2:c7:f0:e4:0d:b4:2f:ba:bc:4e:a3:2e:
57:58:51:28:96:09:3e:00:a9:cf:30:9e:94:91:23:
1d:2b:90:2c:9e:2e:34:57:80:8c:4c:9e:fa:63:ba:
07:09:7e:40:b9:b2:ff:b6:02:eb:09:cd:74:84:c7:
ca:68:d0:4e:25:77:1c:b1:9c:f2:b7:b4:83:8f:2a:
7d:a3:0e:7b:4b:04:99:c4:d2:f8:b9:cb:3f:ab:e7:
2d:f4:18:57:e3:9b:a5:b6:c9:7a:0f:eb:b2:71:7f:
57:dd:63:98:e3:5e:40:b4:ae:df:80:c9:29:fc:9a:
b8:2a:ca:61:fd:3c:21:00:ec:cb:2b:86:63:6a:09:
ca:9b:d8:dc:e0:61:c5:51:cc:ef:e7:13:bd:df:23:
5c:da:8e:4c:85:91:d1:08:30:90:04:ec:54:7d:77:
d0:c1:0e:57:cf:aa:5a:09:f4:00:dc:4f:f8:ac:86:
41:6f:53:d1:3c:c3:4d:6d:97:b1:90:dd:84:ed:dc:
17:63:e0:d2:be:12:cd:76:34:a4:81:95:fa:7e:d8:
c7:71:86:3e:f0:b1:8f:48:e2:15:84:cb:48:2a:97:
fc:5e:49:3b:80:76:4d:48:ae:3e:f0:3b:a7:f3:e7:
e4:43:5a:f3:f2:8b:31:e2:4e:33:12:45:1d:ce:a0:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D1:0E:E4:C8:F8:0B:93:E6:F6:9D:12:D9:DA:DC:41:8F:F1:24:2D
X509v3 Authority Key Identifier:
keyid:CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cb:fa:6c:7e:42:38:35:f9:c0:f1:54:6d:3c:f1:93:4f:87:
5e:44:10:f5:8f:e0:74:8e:b8:57:1a:65:45:18:eb:52:f2:ca:
e8:97:a2:1f:78:f1:6e:25:1b:aa:f9:f7:bf:04:6e:08:31:08:
95:71:4f:ee:a8:5d:51:26:a9:a5:54:9c:c7:04:21:1b:98:3f:
85:f9:a6:d2:98:2b:64:ca:5c:b7:45:f9:79:85:ee:10:7e:26:
d4:3b:85:7e:7b:f5:2f:55:41:f1:ef:1e:2b:7c:c1:2d:15:64:
5e:50:56:ee:ae:0f:a7:fb:63:5a:2a:e7:26:57:70:17:7d:aa:
0d:73:fe:a7:24:ac:e1:de:55:c2:bd:cd:7b:55:4d:73:2d:53:
20:92:5f:c1:dd:dd:2b:55:b0:8d:35:f7:ac:89:18:cf:4b:4b:
38:8a:68:dd:54:93:25:a1:65:2b:e0:a4:02:4b:9e:59:e5:f8:
d7:23:2d:90:00:8c:02:a6:eb:b3:dc:39:f0:05:f0:97:fe:0a:
1a:e7:7c:a8:49:4d:20:b6:e9:47:92:62:01:ea:72:82:c1:2d:
b5:00:b9:5d:56:32:a6:3d:ca:2c:4c:20:af:23:85:2f:3b:6e:
05:20:2d:d1:fe:da:8b:28:e0:70:35:14:26:51:aa:e6:6f:0c:
59:91:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:29:24 2026 by rpki-client