Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File: zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier: GxMQzI1tdhZ2ipG5l42OmV8fBL/JjXUcywHGhX0wVnU=
Subject key identifier: C4:B5:09:A4:67:AD:1D:75:B7:81:42:16:F8:0B:68:00:B3:AB:86:63
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial: 01A134478E7BE49A4D766084DD355D1601C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number: 1A9F
Signing time: Tue 13 Oct 2026 08:01:07 +0000
Manifest this update: Tue 13 Oct 2026 08:01:07 +0000
Manifest next update: Wed 14 Oct 2026 08:01:07 +0000
Files and hashes: 1: hP6LOiB-JXjzIxcAoNUeheYCC_w.roa (hash: Am0rp7j+BYvMadHXe785VdV8wLgqVi6auP8kJTGDcRE=)
2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: RSm1RW/fiSXWwgW0cH/f/FLrE8j5WONuhyuZwcla9OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:47:8e:7b:e4:9a:4d:76:60:84:dd:35:5d:16:01:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Validity
Not Before: Oct 13 08:01:07 2026 GMT
Not After : Oct 14 08:01:07 2026 GMT
Subject: CN=c4b509a467ad1d75b7814216f80b6800b3ab8663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:63:af:1a:7f:40:81:b2:dc:b9:03:48:69:81:
8a:17:3c:2b:ed:01:a8:1c:ca:cc:c3:c0:a1:59:b6:
d4:d6:02:17:11:6e:db:88:e4:b9:0d:8f:47:ba:94:
fb:c6:4c:a2:53:61:ea:65:ea:b6:42:c9:85:de:3e:
c7:14:39:f7:66:74:82:ea:de:0a:8d:b0:70:eb:44:
3d:95:87:7d:04:f1:75:e4:51:16:f5:64:78:ba:3e:
34:a5:e6:c1:d8:45:8c:ed:21:24:60:5e:04:15:c8:
4c:96:fe:d7:fe:c9:32:4c:fc:1c:19:8a:f2:68:b8:
da:c4:93:10:17:66:3e:fd:ca:3a:51:e6:a3:cf:e3:
f4:8d:8a:59:bb:b5:54:2a:97:97:c2:d8:7b:ab:72:
25:80:c5:1c:ec:ba:e6:9d:f6:05:57:83:f2:d4:b9:
64:13:9b:4f:2d:db:11:b1:37:72:de:ae:fa:e3:a0:
9b:43:b1:31:e8:a3:1c:6b:4d:80:32:ec:4f:d4:59:
90:45:a4:75:e2:cd:ba:87:c2:e1:c0:fc:ef:ba:3b:
d6:fc:46:9a:11:d4:fd:9e:f4:ed:59:36:b3:24:ea:
04:79:38:e8:dd:4f:16:61:ce:85:18:61:31:de:7b:
fe:6e:28:aa:50:d7:6a:b6:62:73:f9:80:c0:66:11:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:09:A4:67:AD:1D:75:B7:81:42:16:F8:0B:68:00:B3:AB:86:63
X509v3 Authority Key Identifier:
keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:91:76:6b:54:47:4d:30:49:07:2d:29:0b:91:0e:9c:68:b6:
a6:59:a0:10:27:8d:e1:59:ba:ae:8c:f2:ca:1b:a4:a3:96:4f:
b5:62:f6:13:87:0d:3c:fb:d9:fe:cd:fd:a2:7d:3f:ae:cf:79:
44:d7:4b:41:ea:c1:ff:2f:cc:eb:d7:82:b0:18:1e:c0:f5:f2:
27:91:70:db:43:87:2e:7a:40:68:ad:ed:a7:cd:39:81:83:dc:
1d:9c:9c:2d:a4:26:91:66:9e:04:f1:ef:cb:15:dc:43:99:ae:
38:7e:95:ed:ce:49:87:90:da:d9:9c:cd:04:e0:c9:ba:89:f1:
d1:1e:b6:53:30:63:7b:d6:65:94:46:51:33:a8:63:c2:17:43:
d9:e2:69:db:20:58:48:82:80:2e:30:58:05:8b:11:ce:e7:f1:
03:7f:47:cc:e0:ec:a7:80:48:83:79:0f:1d:d9:03:ec:2e:3a:
71:aa:8f:c2:d8:21:67:4c:57:e4:0a:9d:87:82:5c:e3:1d:15:
03:c0:b9:82:38:2b:e2:d4:13:6a:1c:27:7d:ea:a6:fb:88:a2:
86:d5:7b:02:96:b0:e5:fe:f0:a6:12:41:8e:d4:76:83:69:9e:
0a:b4:00:26:a9:15:3f:62:7b:bc:a4:e6:b4:32:43:f3:9a:8f:
96:4f:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:56:26 2026 by rpki-client