Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier: AvCLA+u1lhAKNtfnZDpWk6qGkxKSDrn+nL7OuCFPYDo=
Subject key identifier: 7E:B4:40:55:60:E1:23:90:31:04:88:94:5C:74:CB:77:95:C9:72:AF
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 01A0C3A05665D695846C540C3EA239A825D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 11:01:00 +0000
Manifest this update: Mon 21 Sep 2026 11:01:00 +0000
Manifest next update: Tue 22 Sep 2026 11:01:00 +0000
Files and hashes: 1: Bge4UQP__-DVB-KXu8QE0dyV_no.roa (hash: empz0X3iGWbWnVRP0ZliKC+Au9jenyd1vXKmWTaIsLA=)
2: Jz_svkdguP3AXC17Oc-v9vpSLo0.roa (hash: nZ1Y4RSNexYF/KVR8IvOZJPdDsAC2m7rxHaUZuQNyXw=)
3: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: ym9wgds4G30Y+dz7JnS5RYpsf9Fd5oaZraPs2l6vfuk=)
4: k-0ai5LmPbShGWzhq7tl3QEV5xg.roa (hash: lX1a4+6IcJDs034Yg/uu30HJfCoVoIaGwoVAFeOpt4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:56:65:d6:95:84:6c:54:0c:3e:a2:39:a8:25:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Sep 21 11:01:00 2026 GMT
Not After : Sep 22 11:01:00 2026 GMT
Subject: CN=7eb4405560e12390310488945c74cb7795c972af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:88:2d:a4:bf:d9:87:af:d5:53:a4:f8:83:
37:bf:1c:e0:cb:be:ba:7b:71:f2:ee:34:9a:78:b1:
2f:3a:bd:d9:c3:d2:da:4d:2c:ef:df:2e:71:76:62:
aa:4d:a0:72:13:e7:64:3b:84:9a:42:fe:b6:ab:2e:
8b:05:3f:24:c4:ee:72:20:dc:cc:ce:63:40:58:10:
8e:6f:e6:4a:fe:59:b7:f7:5b:08:f0:9b:e8:2a:25:
bc:1f:de:9e:78:f5:eb:dc:cb:89:d3:8d:e1:b9:de:
01:bc:e8:70:a8:ec:14:07:5b:21:c1:86:b1:47:35:
a0:6e:84:18:a7:08:5a:a6:21:79:4a:cc:ae:2b:60:
20:5a:1f:c2:70:c6:0b:78:a7:50:f3:d7:83:d8:c6:
55:19:aa:9a:88:2b:43:28:c2:d1:5e:db:59:00:5a:
d9:07:7e:7e:9b:82:d4:8d:37:19:a3:10:19:9e:4b:
5b:74:ad:ff:85:8e:b8:b4:43:15:93:bf:ec:1c:5a:
b2:ef:68:d8:56:56:7c:58:2e:64:bb:fa:5c:f2:c8:
0d:17:00:d3:d1:52:c9:9c:a7:e0:c3:18:cc:21:c3:
8d:b1:f6:8b:88:88:9c:ff:3a:e7:4b:3a:ab:ec:9e:
f1:57:7b:38:9f:1f:f3:9d:d8:45:b1:3e:09:12:d5:
f5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B4:40:55:60:E1:23:90:31:04:88:94:5C:74:CB:77:95:C9:72:AF
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:00:fa:e1:a5:41:0b:99:21:ac:0b:b0:42:b4:6d:f4:35:8a:
48:23:cd:52:f6:87:44:6a:de:c3:b0:79:af:84:b1:22:22:12:
0e:2d:2d:9c:b8:d6:58:5b:cf:9b:d1:4e:a1:43:bf:9f:21:9a:
54:85:09:49:a3:34:5c:08:1b:ab:0e:23:99:60:c5:d8:6d:a9:
01:17:37:a7:e5:c7:e0:24:2e:37:b4:84:37:4f:20:27:13:bb:
7f:a1:88:4b:6b:b2:b8:ea:ff:69:dc:90:f6:ae:d3:e0:5a:a3:
a7:c1:65:ac:5a:f6:7a:18:85:ec:a9:6d:47:19:93:eb:f8:71:
c1:5c:51:1d:0b:c4:fc:2b:82:bc:70:c5:c4:94:17:1c:e8:df:
d5:32:d7:a9:41:fc:29:d1:9f:ee:68:58:a8:50:2a:f4:93:8b:
23:4a:1e:01:f5:55:04:02:a4:76:e2:93:8d:50:f3:e2:bf:d7:
a6:75:81:42:69:60:85:23:4e:1c:40:79:c2:8a:eb:18:cc:2f:
9b:6c:a7:6b:64:4a:ed:c3:62:33:a6:10:f3:20:04:37:61:f4:
40:84:a4:2c:fd:73:70:c8:a6:b9:bd:6a:b2:ac:5d:87:af:77:
29:4b:42:ae:40:90:0c:9a:c0:30:01:68:f5:6f:0f:bf:da:6b:
0f:93:50:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:26:30 2026 by rpki-client