Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
File: sZPxphH_PZUKvZZlLNqgVaNR20U.mft (raw, json)
Hash identifier: cQ+rveFVOAy4skzFTy8WLQ3X/NJBvwR0msgDgEBS1O8=
Subject key identifier: 06:B0:3A:4E:48:D5:9B:83:CF:19:10:39:73:C8:52:1F:08:A8:68:77
Authority key identifier: B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
Certificate issuer: /CN=b193f1a611ff3d950abd96652cdaa055a351db45
Certificate serial: 01A0CA466F30A68D8E5EF6351A9B0668792E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:00:08 +0000
Manifest this update: Tue 22 Sep 2026 18:00:08 +0000
Manifest next update: Wed 23 Sep 2026 18:00:08 +0000
Files and hashes: 1: 0o1C4vwLrtJhxZJe2NWXXgCUrq8.roa (hash: 3Fe9Azb+RrHGaKENizsao17NNGxQe5yH/WD4Wqllrkg=)
2: sZPxphH_PZUKvZZlLNqgVaNR20U.crl (hash: JfGUMCrcDCz8LpaH91vp5vrN/SM6chswqzexzODu9aQ=)
3: zzpXRXiaaDaUNJgb8J2uf-9tibo.roa (hash: 6IAZNXyLJkKu4qRWV3DHkLx2sFZt0DSc2M4cQ6BsTRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:6f:30:a6:8d:8e:5e:f6:35:1a:9b:06:68:79:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b193f1a611ff3d950abd96652cdaa055a351db45
Validity
Not Before: Sep 22 18:00:08 2026 GMT
Not After : Sep 23 18:00:08 2026 GMT
Subject: CN=06b03a4e48d59b83cf19103973c8521f08a86877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:41:82:8a:ec:97:dd:d7:99:ca:b5:42:d2:
78:a2:28:4c:5b:a0:fd:7f:25:9c:b4:e3:6a:9c:1b:
33:94:f9:9d:14:98:c1:f7:48:52:2c:e1:bd:06:e2:
ab:68:4a:78:cf:7e:1b:07:4d:7a:c0:91:b0:35:b5:
77:fe:26:ef:e4:09:29:3e:55:bb:ba:2f:46:78:ed:
52:94:13:67:7c:31:71:b7:19:34:89:24:58:f7:21:
c4:21:79:15:13:2a:e2:bc:00:a6:e6:be:53:f3:b9:
39:0e:a1:a8:7e:3f:28:da:7f:57:87:e3:b9:d1:b3:
f5:df:9c:db:94:08:4f:59:9a:94:41:99:44:68:26:
53:52:3d:f9:f4:5f:22:fa:d7:1f:08:b1:c6:9e:58:
7b:cf:b4:2a:32:8b:5e:c2:21:87:72:3b:c3:01:b3:
51:6a:a5:be:dc:d3:d6:3e:73:bd:b6:a7:7b:95:29:
fc:39:21:e6:e0:0f:6a:37:4d:fe:85:69:2a:36:84:
63:fb:7c:68:39:1d:ec:8a:25:77:b4:64:45:a9:cf:
8d:e6:20:95:04:27:2c:78:45:f7:3e:97:53:e1:23:
fc:f2:05:c5:e1:21:d2:a3:8e:ce:0b:78:f5:70:eb:
b8:d2:61:f0:73:20:aa:dd:61:0e:88:1e:69:e1:8d:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B0:3A:4E:48:D5:9B:83:CF:19:10:39:73:C8:52:1F:08:A8:68:77
X509v3 Authority Key Identifier:
keyid:B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c9:8a:06:4f:b2:cd:7c:b9:40:5b:2e:9d:62:d8:5f:37:24:
d9:93:90:53:83:5d:c8:27:1b:d8:a7:58:c5:67:82:50:2a:94:
d7:5e:23:79:07:8a:c7:5b:15:b6:24:4c:87:fa:51:e4:f5:e5:
1f:32:5a:d8:7d:17:eb:26:c8:16:a4:7e:09:aa:ad:35:a1:ad:
b4:08:3b:46:47:26:e0:d0:45:d6:43:ef:cf:f5:b0:51:6d:31:
29:c6:15:6f:37:fb:12:0f:bd:f4:96:a7:78:0f:af:52:ba:2c:
16:d2:47:95:7c:3d:1b:70:00:00:1d:59:8c:36:47:a6:94:70:
32:d2:32:8d:56:b2:4c:13:12:32:0a:18:92:c0:d1:95:53:d8:
37:af:6f:f4:9c:a2:46:b0:d1:0b:06:ce:61:b8:05:9a:82:90:
5e:de:2d:97:9d:18:c2:31:f8:a6:8a:36:5f:ca:e2:d7:81:2e:
3c:26:f3:52:78:43:13:ef:f5:42:52:85:4a:0f:6e:25:d0:66:
92:a0:31:e5:98:7f:24:2b:5e:cb:fc:d0:03:b9:76:ba:a7:8b:
07:05:87:e9:1e:ac:97:94:c5:36:a4:8b:5d:58:ff:46:48:54:
96:81:f5:f4:aa:c8:36:87:de:8b:6f:d3:93:59:11:27:e3:0a:
56:e3:a8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:10:22 2026 by rpki-client