Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier: fCOjp3w8bK/gngKAW8hFJZ3g1lGcNxm479pALaJtoiQ=
Subject key identifier: D2:B7:CA:8A:1A:3E:32:61:E0:8D:AB:AB:B3:9F:9E:FF:CA:FB:61:2D
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial: 01A12654B4B7240D1C2E56B4E3529653840C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 15:00:47 +0000
Manifest this update: Sat 10 Oct 2026 15:00:47 +0000
Manifest next update: Sun 11 Oct 2026 15:00:47 +0000
Files and hashes: 1: 1-bvTtCyxjhCFLcxNhXPNFp9zd4.roa (hash: UqrazJGk86AULwhwwPwABEyPtaaQCEyqIBdZnP4+jJA=)
2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: 8jxhOOstOcl12mun+BDIsu7B1SR8RMc8ma7Jp2jyOuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:54:b4:b7:24:0d:1c:2e:56:b4:e3:52:96:53:84:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
Validity
Not Before: Oct 10 15:00:47 2026 GMT
Not After : Oct 11 15:00:47 2026 GMT
Subject: CN=d2b7ca8a1a3e3261e08dababb39f9effcafb612d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:ae:66:a4:66:3a:5b:e4:da:94:41:70:d6:
88:57:f0:86:12:89:c7:55:fd:ac:69:25:64:77:da:
52:64:ed:50:0d:db:86:ee:2d:07:d5:5c:23:00:0f:
a5:14:cd:99:2d:b7:ab:9f:c4:f5:23:8a:6f:a3:83:
73:38:a1:9e:82:b4:a2:cf:f2:da:43:59:f8:33:29:
60:90:f3:0c:82:a7:7a:07:07:51:59:ca:78:75:11:
5a:88:90:4a:43:5b:68:9c:72:3e:7d:ee:75:d1:69:
c3:87:55:f6:2c:81:b5:0b:65:4c:83:ec:57:c5:aa:
2c:0b:b2:3e:f2:84:0f:9b:f7:70:39:6c:31:f4:bb:
ec:f9:d3:ff:b2:ba:41:d8:b8:9c:f1:e1:be:5e:21:
72:59:4f:66:15:e7:69:9b:65:5d:18:a7:8e:7f:f3:
4f:a3:70:9a:59:c7:72:ca:62:9b:e0:cb:45:91:36:
ee:86:b6:13:53:de:38:08:45:d5:83:9a:c9:c5:c1:
c0:3b:43:c1:fd:7e:49:f4:62:d9:58:7b:27:d9:2e:
67:a3:20:9a:4b:19:50:4d:50:39:5d:0c:9f:50:6f:
be:83:ae:90:8f:ed:0b:cc:84:90:fb:71:53:89:20:
84:46:38:db:ba:fb:83:57:24:3b:49:b2:a3:d8:b5:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B7:CA:8A:1A:3E:32:61:E0:8D:AB:AB:B3:9F:9E:FF:CA:FB:61:2D
X509v3 Authority Key Identifier:
keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:01:13:26:e6:57:b8:4c:9d:64:da:0c:7a:b1:89:81:b3:e5:
ae:31:24:42:70:dc:b9:4a:30:1b:ab:ee:fe:d9:87:bd:72:4c:
d0:5e:49:1f:b1:a5:99:b2:e5:6f:11:58:94:17:df:3c:0d:0f:
2c:8e:ab:c4:27:0e:69:c1:a4:1c:94:c1:08:b3:e5:c6:ff:77:
74:f5:3a:5f:56:93:d0:9a:4d:70:fb:b0:cb:b1:a5:57:5f:57:
3b:5f:1a:52:8a:99:24:8d:02:fe:37:19:6c:ac:bc:24:76:51:
ab:de:da:28:ba:57:32:16:6e:31:50:8c:99:38:2f:9c:7a:8f:
0d:66:62:40:fd:55:7a:89:d2:f1:6a:45:01:93:a2:23:77:05:
14:d6:e2:5c:7d:8f:cb:18:92:fd:09:c9:b1:1f:14:13:f9:d3:
03:13:c2:ad:84:f3:11:a8:c5:fc:b0:2b:85:a8:62:61:b0:1f:
9d:99:c8:99:9b:08:36:30:2e:ee:51:12:63:51:cc:f5:2c:8e:
6e:88:06:34:f7:56:05:09:f5:6b:55:ec:cb:c2:7a:25:bf:73:
b7:f1:8d:77:fa:fc:a3:7a:b0:81:e0:c9:78:cf:7e:eb:5c:a6:
15:5b:44:3f:27:6f:f5:27:22:8e:81:01:93:3c:9d:0a:1c:33:
21:94:74:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:36:15 2026 by rpki-client