Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
File: Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json)
Hash identifier: ZCS8kgOWtdk74UBJIta9n/DS25sjiQWIkUiBRgQWq4Y=
Subject key identifier: E0:0E:52:4A:D9:8B:C4:9D:5B:BA:8B:58:7F:0F:5A:5A:65:6B:BB:86
Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
Certificate issuer: /CN=670ec53068393d90db601ec295e42908525e10c2
Certificate serial: 01A0D6B95BF6FD877E616140D224DF8CC7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
Manifest number: 1159
Signing time: Fri 25 Sep 2026 04:01:06 +0000
Manifest this update: Fri 25 Sep 2026 04:01:06 +0000
Manifest next update: Sat 26 Sep 2026 04:01:06 +0000
Files and hashes: 1: Nh6TGiZWo0EOxhMqHLoTd_RYjgw.roa (hash: jvTmWCCcSLAGtI/9GquGJ7vRIPsivGfTGeyKsvphVGk=)
2: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: XjdjN0wj75BXU+5NXyVF3DkSaWpS/w+WdXNzWupb8l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:5b:f6:fd:87:7e:61:61:40:d2:24:df:8c:c7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670ec53068393d90db601ec295e42908525e10c2
Validity
Not Before: Sep 25 04:01:06 2026 GMT
Not After : Sep 26 04:01:06 2026 GMT
Subject: CN=e00e524ad98bc49d5bba8b587f0f5a5a656bbb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:8a:0c:2d:7a:bf:98:98:f8:31:21:16:9a:
5a:ec:a9:2b:10:4e:cb:f7:c4:51:94:d6:1e:14:61:
98:b9:a5:b8:c8:62:22:4c:32:2d:01:5f:58:28:5c:
d2:49:01:c0:48:42:ae:ca:92:ef:1b:8d:90:4d:9b:
96:1f:62:9d:a0:f9:ab:b4:75:1b:89:e8:30:8c:24:
e4:ec:61:f4:ac:9a:cc:ed:9e:88:a9:55:b0:a4:ea:
da:ff:92:4a:1c:d0:63:b4:24:28:54:08:1e:e2:d2:
ed:22:dd:db:4b:fc:79:bc:37:29:4f:55:19:b4:e9:
d3:ef:e0:8a:35:19:bc:86:d8:bf:a0:92:2f:c9:2d:
04:4a:94:05:fe:ad:1e:91:9d:d7:06:d6:d4:7b:ef:
a5:70:de:b6:3e:3d:52:ac:bd:26:31:59:b7:19:f2:
c0:0c:e6:02:3e:02:81:3a:f4:18:ab:a1:70:a9:a3:
6e:9d:5c:9f:86:51:11:10:0f:31:c1:ea:50:2b:4f:
f9:82:d7:41:00:27:59:02:0a:5a:64:f0:38:2f:15:
20:bb:cf:47:74:d7:28:f3:c4:8c:11:57:c6:67:3b:
04:16:66:02:b0:20:d2:4d:72:22:0d:ea:7b:b0:3a:
2c:02:58:02:ae:a6:00:75:fd:be:8c:27:0c:f0:b0:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0E:52:4A:D9:8B:C4:9D:5B:BA:8B:58:7F:0F:5A:5A:65:6B:BB:86
X509v3 Authority Key Identifier:
keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e7:8b:61:93:e1:8c:f8:c6:40:03:9a:ca:c7:ee:30:0b:61:
6b:76:46:04:e3:69:f6:0e:3e:c6:45:19:e5:d1:3c:9c:ab:13:
57:34:9c:5b:6b:b2:a7:2a:4b:eb:31:27:09:da:82:b6:7f:9d:
a5:da:6b:0a:d2:99:3f:35:79:2c:86:e9:b4:57:7a:cb:23:b0:
c3:cd:90:76:ec:fb:be:8c:e0:c1:c8:e9:2e:24:f1:3f:f6:13:
5c:4c:10:fc:af:95:06:9a:df:4d:42:1d:78:79:68:6b:27:f0:
b8:cc:a7:86:aa:e4:3c:ca:20:44:c1:2d:20:d0:77:f5:be:e6:
09:a5:52:4d:c8:12:99:f4:16:bf:e7:af:a3:1d:93:2f:d2:61:
8c:44:5f:d1:f9:be:b8:6e:2e:3e:a6:7d:64:17:37:72:ca:f2:
b7:e4:58:ff:32:e1:72:a8:08:57:59:05:d9:f0:ca:77:d9:21:
b0:47:4c:37:ee:07:51:a0:a9:60:25:19:8e:7d:44:10:bc:41:
6c:1c:75:20:6f:a3:0f:33:ad:56:cf:ac:10:57:52:e0:49:ae:
8c:39:b5:4b:db:b0:ad:47:1b:16:93:d4:ff:19:4d:25:73:35:
8f:02:46:ef:82:0f:3f:ac:0a:e7:be:f1:a5:3c:24:4e:96:85:
20:d4:6d:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWuVv2/Yd+YWFA0iTfjMfHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MGVjNTMwNjgzOTNkOTBkYjYwMWVjMjk1ZTQyOTA4NTI1
ZTEwYzIwHhcNMjYwOTI1MDQwMTA2WhcNMjYwOTI2MDQwMTA2WjAzMTEwLwYDVQQD
EyhlMDBlNTI0YWQ5OGJjNDlkNWJiYThiNTg3ZjBmNWE1YTY1NmJiYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKWKDC16v5iY+DEhFppa7KkrEE7L
98RRlNYeFGGYuaW4yGIiTDItAV9YKFzSSQHASEKuypLvG42QTZuWH2KdoPmrtHUb
iegwjCTk7GH0rJrM7Z6IqVWwpOra/5JKHNBjtCQoVAge4tLtIt3bS/x5vDcpT1UZ
tOnT7+CKNRm8hti/oJIvyS0ESpQF/q0ekZ3XBtbUe++lcN62Pj1SrL0mMVm3GfLA
DOYCPgKBOvQYq6FwqaNunVyfhlEREA8xwepQK0/5gtdBACdZAgpaZPA4LxUgu89H
dNco88SMEVfGZzsEFmYCsCDSTXIiDep7sDosAlgCrqYAdf2+jCcM8LB8WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAOUkrZi8SdW7qLWH8PWlpla7uGMB8GA1UdIwQY
MBaAFGcOxTBoOT2Q22AewpXkKQhSXhDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEt
NzNkMjE4YTQ5MDNlLzEvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEtNzNkMjE4YTQ5MDNl
LzEvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOeLYZPh
jPjGQAOaysfuMAtha3ZGBONp9g4+xkUZ5dE8nKsTVzScW2uypypL6zEnCdqCtn+d
pdprCtKZPzV5LIbptFd6yyOww82Qduz7vozgwcjpLiTxP/YTXEwQ/K+VBprfTUId
eHloayfwuMynhqrkPMogRMEtINB39b7mCaVSTcgSmfQWv+evox2TL9JhjERf0fm+
uG4uPqZ9ZBc3csryt+RY/zLhcqgIV1kF2fDKd9khsEdMN+4HUaCpYCUZjn1EELxB
bBx1IG+jDzOtVs+sEFdS4EmujDm1S9uwrUcbFpPU/xlNJXM1jwJG74IPP6wK577x
pTwkTpaFINRtrg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:11:44 2026 by rpki-client