Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: cDJWCCEQuRa+2uAX223PHUQ5fvkd4jZa5BUhVwVcRyA=
Subject key identifier: F3:11:C5:E4:85:38:67:14:10:70:E0:55:8A:50:57:13:77:23:CA:99
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 01A0C7B40F9A188A182155CD60D7A874993A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 06:01:01 +0000
Manifest this update: Tue 22 Sep 2026 06:01:01 +0000
Manifest next update: Wed 23 Sep 2026 06:01:01 +0000
Files and hashes: 1: J17vSIqgoHZS2f6yqb_8iHjCu5I.roa (hash: ZkWmb6GvJuOMu21GNU2YeN23B5AtCQQY8+AStJbeGm0=)
2: XPQJlFedERmTF9acUC88HcZi7Y8.roa (hash: Np32ynKS0t+KcWpS0Dq9Cf6zaeFo8lW4iSnM2fxcrEY=)
3: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: OmTlAdYQKWHokeTIk9I71mThcO57adtHDrUfLR6xgiE=)
4: ipCoEXo6uW0pr_TclF-YMNfjy1o.roa (hash: Vq4dXFhds74U9HS3KjpxidXdPv7ObFMg2YYb+3p543I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b4:0f:9a:18:8a:18:21:55:cd:60:d7:a8:74:99:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Sep 22 06:01:01 2026 GMT
Not After : Sep 23 06:01:01 2026 GMT
Subject: CN=f311c5e4853867141070e0558a5057137723ca99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:4b:aa:f5:4d:a1:85:0d:29:37:4f:6d:dd:
39:4f:d7:30:9f:cc:33:fa:92:8c:d3:43:4b:56:09:
81:dc:8f:07:2e:72:45:8c:69:ac:bf:eb:51:81:62:
fa:17:30:d9:bb:78:84:c5:5a:a7:fa:5d:21:28:9f:
6f:a3:da:5f:6f:e6:54:68:f3:8b:18:4d:97:d3:3f:
f6:3c:16:13:98:42:26:63:2b:11:f3:8e:fb:48:1b:
ce:ee:0e:3f:d5:01:a8:00:8b:47:8b:9c:ff:90:81:
c3:6f:9b:e6:1b:41:89:e3:38:0a:74:11:b1:1b:7d:
15:0e:ec:e8:41:77:fa:87:6d:21:a6:dd:b3:4f:68:
ae:08:34:76:ca:2b:33:3c:de:cd:55:b1:ea:99:ae:
3d:c0:6d:a4:ea:74:9d:f2:23:79:ee:0c:c4:aa:10:
ae:a0:fc:54:d9:ff:18:61:c4:66:3a:d8:c3:8b:2f:
1e:8d:9e:2b:28:04:28:89:79:23:30:5b:d7:9c:89:
f8:00:ae:dc:4d:59:73:70:c1:37:61:c2:8e:ae:bf:
dd:0b:09:db:22:63:36:c4:e5:dc:43:ac:dd:5e:8f:
18:9f:2e:b1:1e:7f:3a:56:77:99:3b:0d:2e:1d:9d:
4e:ed:73:a3:73:b7:84:3e:65:91:d0:78:8a:9c:a7:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:11:C5:E4:85:38:67:14:10:70:E0:55:8A:50:57:13:77:23:CA:99
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4f:64:ca:d0:8d:ce:c7:ab:1a:c0:0f:f2:04:87:ee:12:62:
f1:e9:68:01:56:f8:de:68:73:47:3e:22:d6:85:60:f8:fb:3f:
f4:0f:43:a1:14:7f:0c:10:15:08:07:2b:37:98:75:03:10:a6:
f6:22:cc:49:ed:8a:12:24:bb:bd:63:a3:8a:bc:b5:b1:9b:27:
f0:f3:50:b5:27:ac:b0:15:e2:75:4f:3e:08:8b:99:7e:af:02:
ab:55:d7:4f:4c:9c:89:9e:45:a5:2c:5e:62:11:e9:f3:bf:6b:
d9:04:a1:ea:a9:3d:c5:63:5b:e7:f2:87:43:46:f8:c6:3f:b6:
a5:0e:fc:fd:83:8e:93:ee:45:a2:4f:c5:9e:34:0c:13:ba:0d:
96:89:d2:af:88:73:9a:67:bd:f5:8b:08:b5:d8:f8:a7:3f:85:
07:d0:e6:b5:cd:f1:51:43:cd:eb:1d:34:86:16:cb:57:7b:47:
46:f2:9b:fa:74:98:4f:61:22:4a:de:c7:c0:0f:e2:3e:9e:01:
96:a3:10:d0:69:8c:6e:c5:3c:7f:41:aa:e9:c5:13:32:85:7d:
0d:dd:62:93:d9:aa:85:3e:de:04:da:66:0d:2e:ba:cb:6a:d5:
a4:0e:96:9c:08:b8:b3:36:0f:21:73:67:f8:ad:1f:04:4c:aa:
36:ff:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:25:47 2026 by rpki-client