
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier: I2IVsNfgV2TklDEPnr1myUWDSLZ4ybxgCukoY5Mdg9k=
Subject key identifier: BE:12:8C:EA:CB:12:71:92:2C:C3:CF:32:DF:0C:BE:8C:6E:16:EF:03
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 01A0D45D5CF6A792BD49D01C8E702C7EAEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number: 1348
Signing time: Thu 24 Sep 2026 17:01:23 +0000
Manifest this update: Thu 24 Sep 2026 17:01:23 +0000
Manifest next update: Fri 25 Sep 2026 17:01:23 +0000
Files and hashes: 1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: 3QtsJ4HVFvl9kY3vrg1LXuTqm4BiHe6K+7kLs+dnMcI=)
3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:5c:f6:a7:92:bd:49:d0:1c:8e:70:2c:7e:ae:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Sep 24 17:01:23 2026 GMT
Not After : Sep 25 17:01:23 2026 GMT
Subject: CN=be128ceacb1271922cc3cf32df0cbe8c6e16ef03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:ec:02:5c:4c:42:5a:d9:2e:5d:9e:a0:dc:
67:70:11:85:a0:da:c6:19:1e:ca:0e:1e:b4:70:da:
c2:6c:24:ad:a5:f8:bb:d8:38:45:b1:dc:b4:e8:21:
55:6f:d5:5f:a4:bf:90:85:43:ba:5a:9c:6f:04:ac:
27:ff:b2:e9:65:86:02:d4:87:c3:7e:98:59:c9:c6:
55:2e:a1:49:c9:d5:3a:4d:46:79:50:88:23:6e:f5:
72:03:43:4a:2a:ec:e0:db:99:f6:75:dc:2c:0f:94:
79:59:ad:d4:d4:f0:7a:f5:3c:05:bf:41:da:4d:a8:
64:78:cc:d9:1e:fa:89:45:56:69:50:24:05:3c:24:
db:79:18:00:ce:57:19:73:85:ac:46:c2:82:20:ee:
a7:5b:6c:f9:4a:5e:57:6b:25:61:83:7a:9e:0f:62:
35:5d:18:f1:1b:87:64:65:cc:db:ce:52:85:a4:8b:
3c:16:e4:28:fc:1a:9d:55:10:cf:52:0e:56:8d:d1:
d2:4c:c3:b8:d3:64:c9:ae:f6:1d:de:ae:10:61:b1:
10:cb:13:c3:80:2d:cc:09:83:b7:dc:8c:9a:6c:0c:
17:b4:93:f9:f1:99:08:a0:5f:7b:6c:2a:fa:9a:3a:
52:36:67:ae:7f:c9:ed:7a:2f:36:ca:e2:01:c7:b2:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:12:8C:EA:CB:12:71:92:2C:C3:CF:32:DF:0C:BE:8C:6E:16:EF:03
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ca:e3:49:d6:79:27:bf:1d:af:f9:c5:69:83:f4:ee:f5:d8:
88:8f:a9:ff:d3:13:7b:a8:1a:d1:61:2e:fb:53:a7:06:5b:19:
77:53:d8:2e:9a:6c:e4:0c:a7:96:cb:41:4f:51:e0:b1:1c:28:
a1:cd:7a:33:de:d0:c5:31:90:6e:8f:74:01:83:c3:38:a2:8c:
21:00:72:45:e7:85:0c:3b:27:f2:e1:e9:e4:b0:a7:e4:41:20:
c0:1a:50:bd:a4:4d:5b:43:44:44:b6:1f:ea:d1:fb:01:6f:79:
5e:2a:2f:01:39:6e:ec:6d:92:72:e1:49:4f:81:c9:df:e4:25:
ee:4f:fd:d3:4b:35:26:80:4f:ae:f1:51:a3:e5:79:6c:64:51:
38:a3:c8:9b:ae:50:2c:5d:20:07:4c:8e:3d:89:1a:b7:6f:4b:
b7:39:e9:ea:45:45:ab:3e:78:47:b8:5c:74:d9:bc:ed:36:96:
fe:d6:fb:59:05:4b:da:48:81:bd:da:b4:7d:79:f6:75:ba:c5:
0c:50:8b:04:1f:db:bf:ce:f8:69:de:b4:e8:73:28:0b:8f:8b:
bf:98:d9:6f:ef:2c:3b:dd:21:a7:d2:cf:94:2c:ca:ce:f9:4a:
41:83:b4:56:14:13:94:16:51:d1:a1:37:b5:f5:a2:b5:0f:10:
2d:2e:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:59:29 2026 by rpki-client