Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: KTEc0YFW94DMTu80klZUf56iHwzqrOwE2Mbxnb9vByw=
Subject key identifier: 00:8C:9D:11:09:85:C1:FE:93:8A:D9:B1:C7:75:A2:54:53:FC:0B:22
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 019FFA23AACB4D9190EB147EA88CD1D4E5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0A11
Signing time: Thu 13 Aug 2026 08:01:09 +0000
Manifest this update: Thu 13 Aug 2026 08:01:09 +0000
Manifest next update: Fri 14 Aug 2026 08:01:09 +0000
Files and hashes: 1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: /teLpYXLDuHNuBzoJ+InKiL9ffiD6YbiaAb1G3eon+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:23:aa:cb:4d:91:90:eb:14:7e:a8:8c:d1:d4:e5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Aug 13 08:01:09 2026 GMT
Not After : Aug 14 08:01:09 2026 GMT
Subject: CN=008c9d110985c1fe938ad9b1c775a25453fc0b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:e8:fe:5d:c5:bb:4e:df:4d:d9:e8:2e:75:
7f:89:22:c7:37:d8:75:10:71:49:e9:d7:a4:0e:77:
de:e1:e2:7f:14:c7:f6:f3:f2:46:89:3b:17:b1:74:
e1:29:25:9e:5b:1a:25:86:07:b8:f5:22:d7:77:18:
75:63:c0:3a:75:ad:1e:86:c5:1a:5e:28:97:91:a9:
06:6f:06:2a:97:84:2c:9e:51:6e:25:33:f5:94:ad:
b5:94:2e:c7:c5:a4:e6:25:ff:6b:6a:77:24:df:1d:
50:2d:37:71:69:54:d5:50:09:ac:ef:5b:4f:61:2f:
5e:65:2b:30:f4:6a:1e:4a:7e:58:19:4a:9d:e0:11:
3b:e0:32:c1:0a:46:ac:bb:66:45:54:34:59:9e:55:
e1:0d:27:f3:80:71:7b:d6:e1:50:79:19:d2:c6:c7:
e7:13:17:79:35:8b:1c:44:93:14:94:33:c0:44:6a:
51:12:dc:79:c1:fb:62:cb:28:1f:da:ed:4c:d6:39:
b4:71:2a:10:0f:31:18:44:ba:ea:3b:af:6e:bc:a7:
22:f4:d5:d9:8f:95:55:87:ee:82:11:82:38:69:39:
17:58:3d:1d:0a:39:46:4a:61:c2:b6:b4:f6:29:7c:
9c:df:f8:97:ec:82:f1:6d:04:ab:12:0c:92:51:c7:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8C:9D:11:09:85:C1:FE:93:8A:D9:B1:C7:75:A2:54:53:FC:0B:22
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ab:cf:77:e1:c5:b9:40:a1:29:ca:f2:06:94:c5:43:9b:67:
a8:14:8c:49:a2:d2:99:b9:6a:8e:00:d2:79:5e:da:a4:9e:27:
d6:e4:c2:cb:b0:77:3b:51:9d:2d:69:e5:f6:b6:29:4e:37:ae:
47:e8:45:05:75:66:f7:c8:9f:fa:9a:2e:c8:3a:fb:e4:42:9a:
44:69:36:6d:c5:82:e6:c2:67:60:cb:0c:3b:fd:f0:be:3c:95:
16:91:b7:86:3c:04:78:fa:b5:0e:5e:0f:4c:c2:14:5a:b1:69:
d2:d7:1d:3c:14:ed:20:f9:65:dc:d6:fb:26:5e:d1:7c:39:30:
23:1a:3a:52:ac:63:bc:12:b2:99:84:92:a8:02:76:32:60:b4:
1e:ff:d0:7b:0f:86:7c:e0:0f:57:75:b2:48:6c:fd:56:52:1f:
ac:4c:f5:be:be:a7:2c:d2:1d:63:5e:6a:09:1f:61:b8:88:80:
58:19:02:b1:b7:5c:4b:2d:ec:1e:c0:96:ac:49:32:4b:d4:e9:
b7:11:bc:c2:96:30:05:f3:f4:20:f9:85:36:76:02:af:b0:e8:
53:54:57:ac:a6:b7:f2:a7:51:cf:7e:57:a5:f5:e9:bb:2a:81:
44:8e:99:b2:25:33:a3:8d:6e:c3:7a:c9:e3:13:3d:bd:09:79:
2a:3e:7d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:49:42 2026 by rpki-client