Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier: 9DAT+M8pcG6zECUvrVXX3YCjlM5uEw+RYhNe17hlfSk=
Subject key identifier: 62:2C:59:0E:B7:40:F6:09:B7:14:CD:93:14:98:FD:AB:4B:87:39:88
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 01A1257997DCD446E9F0EDF4429DF71A7522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number: 163C
Signing time: Sat 10 Oct 2026 11:01:28 +0000
Manifest this update: Sat 10 Oct 2026 11:01:28 +0000
Manifest next update: Sun 11 Oct 2026 11:01:28 +0000
Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: 4zU9dNjfMwumQYXpcOqvDNgT95Z+VsqSJdj/A3Rw2+0=)
2: qvAyroJETTvqQMM_MVkdoGYncxA.roa (hash: nmTwuA7cbFKwFpXIGdTjihs7A1gDgSqO3ta9jqth4L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:79:97:dc:d4:46:e9:f0:ed:f4:42:9d:f7:1a:75:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Oct 10 11:01:28 2026 GMT
Not After : Oct 11 11:01:28 2026 GMT
Subject: CN=622c590eb740f609b714cd931498fdab4b873988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:9f:5f:5a:46:3b:06:fc:06:fc:7d:a9:eb:
17:bc:0a:d1:d1:30:6c:ec:b4:48:36:4a:7e:ca:3b:
e1:18:7f:b9:c0:ca:80:67:5a:7d:be:37:75:f5:bd:
e5:10:d8:e5:15:c9:4f:8a:f9:38:4d:63:87:1c:4c:
28:09:f7:ad:e8:ac:d1:45:11:4a:b4:7b:54:de:3a:
18:b6:4c:5b:c7:9f:07:70:42:6b:5d:57:7d:cb:f9:
83:f0:61:85:6b:bf:cf:a6:ff:46:50:36:08:9b:c6:
cf:cc:fa:22:19:83:19:65:32:b4:5d:87:c9:a0:54:
38:7e:8b:33:cb:96:77:30:fe:6e:dc:e3:86:f8:19:
87:b1:2d:51:b4:f4:71:32:58:0d:79:e8:19:90:f8:
f7:68:1a:d6:f6:35:56:2e:af:95:a5:56:61:68:02:
61:53:ab:30:c5:03:f7:67:ff:c5:85:df:0f:36:c3:
95:bc:95:9c:db:06:d7:bc:09:67:d3:88:c7:19:1d:
1d:a8:9b:ce:e3:e8:c7:20:e9:87:db:c7:5a:56:3b:
40:77:81:0b:78:e4:8c:5d:8d:2e:8a:2a:42:dd:1d:
8c:5b:58:f6:51:04:d3:bf:78:f2:7f:26:77:22:d4:
5d:1d:8c:d4:ee:b5:29:ec:79:02:ce:b0:40:ce:23:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2C:59:0E:B7:40:F6:09:B7:14:CD:93:14:98:FD:AB:4B:87:39:88
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:79:75:d8:83:55:b2:fc:b8:6a:32:08:07:e4:9a:ec:5f:ec:
4f:6e:ee:74:5d:e6:14:c8:83:ef:b8:8d:12:35:7c:88:6a:36:
c6:12:ad:80:44:cc:aa:3c:ab:73:3a:40:07:e7:17:a8:86:01:
05:5d:23:4f:03:1e:f8:00:a6:19:3f:05:f4:d6:bf:f8:0b:07:
25:4a:f4:32:c6:d7:cf:9a:0b:f5:b3:50:ab:87:22:ad:50:36:
6d:5f:81:1a:2f:e5:c2:7b:0a:eb:89:bd:41:54:66:af:0a:eb:
67:c5:1a:f7:9e:68:6b:c9:99:75:e9:b6:60:bd:97:d1:1e:a4:
8f:71:e1:f3:b5:c1:16:03:92:e3:ce:0d:a3:6a:38:98:0e:40:
61:00:1f:8d:19:aa:41:b6:56:bf:09:1c:7d:0e:87:f1:b7:1b:
d5:e1:a1:49:77:30:3d:da:82:f9:6a:fb:b7:50:d7:5a:bc:b6:
89:28:64:83:fb:f7:62:e0:48:6b:e1:3a:84:3e:65:4d:0b:01:
be:22:e2:97:67:18:9b:0c:38:c6:fc:75:56:5a:9d:e4:6c:42:
5a:ac:58:4b:5d:f7:7d:18:4d:ba:09:9c:5d:af:81:af:7a:41:
b9:57:e3:d9:3e:57:ea:af:d8:84:64:5e:d1:a8:51:93:60:90:
3e:8d:61:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:17:36 2026 by rpki-client