
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier: Hg6OAFf9JvZYnt/Cjfj3+El+jaqrDGXgZeXEJu8maSY=
Subject key identifier: 2B:7C:21:BA:3B:15:BB:ED:29:10:FC:02:06:0F:20:6B:84:EB:F3:E4
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer: /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial: 01A0CEC7FFC4676BD08104E102A11F2D419C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number: 060A
Signing time: Wed 23 Sep 2026 15:00:08 +0000
Manifest this update: Wed 23 Sep 2026 15:00:08 +0000
Manifest next update: Thu 24 Sep 2026 15:00:08 +0000
Files and hashes: 1: HXygwNK2STzqNVll6HVDO_wB5r0.roa (hash: ZY5/8uKYBcUum4H1cHS3G78vJsO1xPm4UChz23v/ZS8=)
2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: XznYasVVxyvPvMRSwdjyxumuT/4ZuRGy1+XffBbZ4nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c7:ff:c4:67:6b:d0:81:04:e1:02:a1:1f:2d:41:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Validity
Not Before: Sep 23 15:00:08 2026 GMT
Not After : Sep 24 15:00:08 2026 GMT
Subject: CN=2b7c21ba3b15bbed2910fc02060f206b84ebf3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:32:f3:38:03:23:d3:b5:cb:99:59:24:6d:
60:8f:8b:73:fd:ce:15:bc:4c:5b:0d:f3:bc:8b:8d:
13:01:d3:09:43:e9:28:1d:af:9d:57:c0:c9:3e:12:
e6:26:90:72:32:16:33:c0:9e:db:10:98:89:ee:32:
2b:26:e0:35:b2:66:47:e7:ea:1a:d0:31:48:da:13:
a6:85:c5:f4:37:46:ac:e5:cd:2c:5e:ce:c0:00:d7:
dd:18:5f:9a:15:d3:96:3c:fc:3f:ab:0d:24:a2:7c:
e0:91:17:8b:5f:d7:7e:a1:3e:8e:86:b9:64:a6:0a:
0b:19:61:05:0f:64:4e:b8:0c:12:46:65:bf:67:cc:
95:74:26:8e:04:90:5c:62:ff:01:19:85:0f:cb:82:
c1:ba:73:a5:87:09:c3:bf:c7:4d:08:9b:6e:da:b8:
d4:b2:a6:50:a2:48:83:5a:c2:61:fc:7a:35:39:80:
8e:07:ac:6a:48:61:eb:73:ac:7b:ca:44:d8:93:3c:
10:1a:59:81:f2:58:f7:46:0e:69:f8:a9:2b:c9:97:
f0:57:87:86:9e:02:7e:53:7b:c2:7f:e9:16:12:f7:
ed:4b:01:e4:e1:91:fc:b3:c8:b7:61:06:16:aa:18:
8e:cd:d2:7b:27:c5:04:79:35:4a:4e:4f:4a:74:9c:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7C:21:BA:3B:15:BB:ED:29:10:FC:02:06:0F:20:6B:84:EB:F3:E4
X509v3 Authority Key Identifier:
keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:19:cb:2e:4a:e3:cf:dd:ac:a3:ba:38:f7:41:36:dc:db:6e:
97:84:31:c6:6f:70:bd:b3:87:35:70:09:ba:4f:0a:50:3d:c7:
d1:69:f6:d6:b0:2d:89:7f:c0:65:a1:5e:c4:cc:01:19:99:ec:
44:53:78:16:8f:f2:63:79:87:c6:df:9c:71:0e:53:b4:6c:7d:
1d:9d:a5:e2:36:15:c5:71:a2:c4:b5:6a:2b:fe:c8:f2:3c:64:
e6:f8:f9:55:4a:0c:35:be:89:5a:31:33:19:7e:83:5c:c5:a0:
26:d8:cd:e2:f4:00:74:7a:66:f8:f1:3d:ab:be:55:0b:b0:ce:
85:57:a4:44:a4:39:12:da:e5:ad:f3:f8:09:a5:a3:83:e7:88:
db:ef:2e:d9:fb:71:3f:1a:e3:aa:57:3b:57:80:49:77:bb:4c:
d3:53:34:eb:5b:3b:c9:71:e5:b9:3a:ce:8c:e7:f2:8b:9e:39:
06:2e:61:a0:78:27:7d:48:c7:9e:e7:5c:68:6f:71:50:5d:22:
2d:18:84:ae:98:1f:d7:93:7e:b4:ed:e7:21:5a:88:a2:07:15:
ef:d7:fc:1d:c1:48:e7:d3:53:f4:41:89:14:04:4f:2a:5e:af:
9e:07:39:f2:57:b9:d7:2d:da:e4:57:ab:73:3c:b1:aa:a9:9b:
1c:c6:c0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:38:50 2026 by rpki-client