Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: y3uVhutNJ0wcHWMGlU8Kb4rl/2/HgS/GhCO5sJAI83g=
Subject key identifier: 98:AE:F0:DA:A7:73:23:99:53:62:54:DE:4E:09:A4:5B:88:9D:FD:43
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 01A0CA7E1DBDDABB7D9A06B7E12F9CC6CE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 14E0
Signing time: Tue 22 Sep 2026 19:00:57 +0000
Manifest this update: Tue 22 Sep 2026 19:00:57 +0000
Manifest next update: Wed 23 Sep 2026 19:00:57 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: oCRfgSef8eDzZJoMrTyXEAWqEA1Pa3/rxjIaqqOfBrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7e:1d:bd:da:bb:7d:9a:06:b7:e1:2f:9c:c6:ce:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Sep 22 19:00:57 2026 GMT
Not After : Sep 23 19:00:57 2026 GMT
Subject: CN=98aef0daa7732399536254de4e09a45b889dfd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:6a:57:45:94:3a:9f:8b:c5:10:77:90:cb:
e4:6b:4c:c1:61:84:85:20:6c:5d:ce:1d:81:6b:06:
40:56:a1:c4:17:26:a1:77:73:4a:c7:ef:04:78:74:
8f:4e:dc:cd:eb:41:f6:03:51:0d:00:3c:e8:d5:42:
db:2a:b2:bd:7d:a3:ac:75:d0:6b:aa:2e:a9:3d:87:
73:0e:89:af:83:d1:e9:9a:c0:f3:8d:ed:32:ce:84:
92:fb:61:51:30:22:8a:3e:41:9a:0b:93:19:23:f9:
20:43:77:1f:47:52:3d:02:7d:15:e4:0b:70:df:54:
2d:c3:2e:45:45:6b:67:d4:1d:95:e3:75:c5:61:32:
42:f2:bd:18:af:e6:02:fe:f5:ca:85:37:4a:db:61:
d8:ea:ca:5e:0a:41:19:12:7b:9c:11:9e:af:97:bf:
ae:80:e4:e4:12:2b:80:d8:49:5b:35:e7:47:73:53:
3f:ea:54:a7:8e:fe:a2:4e:3d:01:2a:86:06:03:6a:
df:39:2e:fd:df:33:e6:0b:80:c4:19:c8:be:ce:37:
01:53:5f:ef:d1:5b:d7:fb:b5:3c:a4:ea:89:f0:73:
39:85:e1:fa:0c:49:c6:11:7b:f8:fa:c6:ce:8f:4f:
84:c1:20:33:c5:74:be:08:f4:3a:01:4d:69:b5:55:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AE:F0:DA:A7:73:23:99:53:62:54:DE:4E:09:A4:5B:88:9D:FD:43
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:82:8c:12:2e:74:d2:6c:d9:2b:08:47:af:25:9d:6a:dc:7f:
d6:dd:81:cb:42:cd:01:0a:6a:f3:5d:b8:97:f1:b1:39:17:d4:
d5:6d:a6:a6:36:e8:d6:fa:0a:2a:22:ab:5a:af:2d:04:8b:78:
8a:49:c5:5d:6e:b9:9c:14:d8:98:58:93:fd:99:93:7c:77:0e:
ea:08:9a:71:44:f5:59:fa:2e:e2:d7:af:be:d1:4b:e8:18:5a:
a4:c2:b1:18:31:c3:76:dd:2a:ff:e9:38:da:92:fc:8d:f5:af:
33:51:49:56:32:44:56:58:cf:ac:92:8f:27:1c:09:c6:ac:3a:
82:30:23:86:e0:c0:b2:72:c4:ba:d6:b5:74:b7:cd:8d:e7:d8:
5a:92:ad:b8:c3:63:e2:31:4d:25:9b:9a:9d:9d:bc:be:6e:25:
74:4e:06:25:77:08:c0:d4:3c:fe:5a:ce:b5:16:9e:22:2b:22:
99:13:61:55:d3:47:03:b6:ac:a9:0b:10:78:fa:69:62:e6:48:
88:57:65:38:70:69:1e:f0:fd:5a:85:f8:24:d3:2a:29:a3:37:
05:78:15:02:75:4d:fb:94:85:f6:37:0c:88:3e:fd:e1:19:69:
7e:75:d5:dc:06:e1:e2:4a:d6:79:eb:e9:3f:8d:a0:5e:3d:91:
21:98:f7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:29:28 2026 by rpki-client