Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: Ze2aCG30r3Ts7D0koYMSdser/bDmd1jTegsmX6wVmhc=
Subject key identifier: 72:CF:A5:15:BD:AD:56:C2:C2:42:52:69:BD:24:2C:51:D4:ED:60:0E
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 01A0EDE6A8451393554B5CCDD20C14DA68FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 18AE
Signing time: Tue 29 Sep 2026 16:01:51 +0000
Manifest this update: Tue 29 Sep 2026 16:01:51 +0000
Manifest next update: Wed 30 Sep 2026 16:01:51 +0000
Files and hashes: 1: YhV2RPOqPZXVdAMRyoGhsYcqg5o.roa (hash: +2OSyQukbn8Ac2KWdiYjJtwI1C2RFg/LbfJyv2kiAaQ=)
2: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: 0lUcXzMVHGr4/WVbtnxGwPbo9hp6rvYJDQlBvEJ78l0=)
3: zymQ8lQH58g9kZdGDaCuBYAYQI4.roa (hash: UsBi140YQptoK8CMotM0bOiYKyUZpHcPLjWyz1MACI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:a8:45:13:93:55:4b:5c:cd:d2:0c:14:da:68:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Sep 29 16:01:51 2026 GMT
Not After : Sep 30 16:01:51 2026 GMT
Subject: CN=72cfa515bdad56c2c2425269bd242c51d4ed600e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:48:21:8e:b6:92:85:81:38:9b:6e:9e:1d:
ca:9d:1c:6d:2f:f7:9f:2d:0f:70:5b:8f:11:0e:77:
b3:84:fd:a4:af:e8:a7:84:6f:20:b2:b6:f8:98:7b:
08:c0:21:25:61:af:e6:48:05:33:68:35:2f:ce:40:
c5:ee:da:1b:1c:fa:16:e6:8a:e0:04:16:d7:8d:46:
b2:cc:e9:ea:27:6a:49:07:89:11:41:df:17:2e:6f:
19:e4:f7:b6:48:0c:ad:09:d1:35:1d:e3:5c:46:7b:
59:77:7f:98:e1:0b:45:f6:83:b5:b6:37:84:73:f1:
32:53:36:58:b1:4b:57:84:09:51:68:9a:91:83:e3:
92:2d:40:54:b3:63:78:3c:be:be:c6:2e:a9:df:27:
70:e1:2b:81:1e:2e:2f:91:0a:1d:e3:41:b0:09:4b:
d5:a4:ed:42:60:2b:d5:09:93:09:9d:37:86:7a:d2:
32:10:b0:bf:98:01:08:09:8e:04:6a:69:da:a6:37:
1f:30:ba:66:fc:c5:a8:23:b7:0b:a7:fa:8d:8e:f0:
40:a9:b7:7c:54:1c:fa:3b:33:eb:d3:5e:73:6d:a4:
aa:41:19:4f:50:9c:f6:9a:e0:36:f0:8d:6e:c7:f1:
da:51:32:87:41:73:d5:d8:8f:b0:de:27:35:0a:a3:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CF:A5:15:BD:AD:56:C2:C2:42:52:69:BD:24:2C:51:D4:ED:60:0E
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b2:6f:0d:55:6f:30:23:d3:8a:9e:d5:f1:14:73:a6:0b:a4:
9d:03:4f:d3:21:bd:04:4e:94:2d:74:84:61:83:3d:ec:c3:8d:
67:5c:0f:8d:de:08:89:5d:14:62:bb:a3:e5:c9:53:2b:b0:b3:
38:0e:c3:78:7b:bc:5a:66:ac:d2:53:de:db:eb:ec:1e:88:d5:
2e:32:56:07:23:c6:c8:d5:a4:e4:0d:87:86:12:f2:bf:ef:ed:
93:07:ca:b9:f8:ad:67:87:71:13:73:be:de:9c:b4:75:87:67:
c7:fc:08:82:b4:4a:5d:c0:75:77:d2:1a:df:0b:0f:96:87:3f:
01:dd:ce:3e:88:5e:35:08:d5:da:5c:5c:22:3f:46:ee:e5:82:
cb:69:a0:20:23:49:be:99:76:aa:10:4e:89:0f:c8:b9:5d:6b:
cd:6f:5f:ba:d8:e8:65:00:b1:6b:4c:b7:a0:20:fb:8a:7f:f4:
b2:9f:1a:2c:ef:0f:a4:02:c0:d1:fe:d2:4d:ad:19:8c:4c:c8:
8c:f9:05:dd:7e:5e:f7:d5:b1:e4:ff:4d:18:6c:53:2e:82:e7:
ae:27:3a:19:11:05:64:6a:77:9f:05:b0:dd:bf:d6:ee:02:38:
10:36:0d:47:d8:14:91:73:29:5f:f1:42:40:bb:7a:00:3c:19:
21:10:31:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:13:54 2026 by rpki-client