Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
File: Zs01lGjIuqmPw8ou8tkFg6aeABY.mft (raw, json)
Hash identifier: rAfcltC0KqSu2p40ouFkwfC3uTaYz6uJiUJymNWYcTE=
Subject key identifier: 6A:F8:A7:FD:2A:F5:16:C3:39:F8:65:C5:C9:43:4A:BA:99:D7:08:E7
Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
Certificate issuer: /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Certificate serial: 01A0C3A00857E1F8697A9831A85197F3EE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
Manifest number: 02E8
Signing time: Mon 21 Sep 2026 11:00:40 +0000
Manifest this update: Mon 21 Sep 2026 11:00:40 +0000
Manifest next update: Tue 22 Sep 2026 11:00:40 +0000
Files and hashes: 1: Zs01lGjIuqmPw8ou8tkFg6aeABY.crl (hash: lq+tZb5bBO9JQyvL1Pa1DzlEsgyD3V93VrjTiiYP9nw=)
2: rqJldLN-S-H8DV7_BXB9c6fFRDg.roa (hash: 8ct3OMMYCUQEAyF1g7DbkXYuvpJT+cTHy+wjPP6qYuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:08:57:e1:f8:69:7a:98:31:a8:51:97:f3:ee:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Validity
Not Before: Sep 21 11:00:40 2026 GMT
Not After : Sep 22 11:00:40 2026 GMT
Subject: CN=6af8a7fd2af516c339f865c5c9434aba99d708e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f4:f8:d6:50:fb:35:32:67:d0:98:71:3d:b6:
5b:a8:e3:14:fc:f0:14:d5:e4:5b:93:4b:80:09:0a:
ad:5b:4f:cc:1b:bc:14:1b:f3:a6:eb:45:1a:0e:35:
eb:ea:1d:12:bf:9d:2b:76:c7:14:1b:87:99:8a:64:
75:f0:d5:59:65:17:df:56:12:dc:70:09:1f:21:c3:
b4:ba:1f:75:cd:cc:4d:76:35:9a:2e:d0:14:9f:a5:
69:6b:bb:52:04:be:02:84:49:1d:49:f9:c5:ed:ae:
49:d1:4c:e5:db:b3:c1:e3:81:95:b6:5b:eb:fa:30:
89:83:3b:48:3d:dd:aa:65:5e:23:ea:4e:36:b9:de:
78:bb:fb:f3:4e:47:1c:82:12:01:e2:03:73:5c:06:
01:77:90:8d:0a:95:f8:97:8f:14:f2:5c:fd:4d:9f:
15:d6:f9:9b:8b:98:65:23:1a:15:10:35:3a:69:a9:
ce:ce:98:9a:9d:24:79:0a:48:7b:e5:94:72:b9:60:
d9:00:66:79:cd:2a:3b:41:8e:ad:69:64:a9:c5:b5:
0d:eb:ab:4b:64:41:96:2b:50:e3:7d:1a:e0:5c:b4:
74:5a:6b:8b:5d:44:63:63:a4:b5:68:09:73:14:74:
13:c8:02:32:60:cd:dc:8e:b6:fe:ee:17:38:54:06:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F8:A7:FD:2A:F5:16:C3:39:F8:65:C5:C9:43:4A:BA:99:D7:08:E7
X509v3 Authority Key Identifier:
keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4a:8c:36:32:18:20:da:65:70:4c:15:d2:19:41:5e:c5:75:
3e:76:b0:a3:4a:3c:2b:1e:f1:a5:dc:5e:60:69:3a:2f:32:08:
b2:e4:ea:d4:66:7b:77:57:49:ef:81:fa:66:76:6a:e8:a2:4d:
9d:d4:16:d5:33:19:88:3d:ac:ba:d5:d1:87:f8:fe:a5:b5:8b:
be:23:7e:13:f1:68:0c:16:41:7f:fa:e1:c5:d4:3b:b3:db:ba:
4f:40:2f:c5:6e:55:6a:bd:22:ef:86:25:db:3b:ce:d7:46:f0:
09:ff:3b:9e:ed:44:7b:25:b1:eb:c1:d6:5f:b1:db:ce:16:0e:
2a:72:3e:f6:8c:d9:78:22:d1:f5:42:c3:84:fd:84:d6:3b:a9:
1e:16:f8:70:ae:01:a5:b7:da:e2:d4:e9:74:e2:22:24:e5:a7:
0b:13:03:00:df:8d:06:fc:bb:4a:15:7b:8d:9d:18:11:17:a3:
67:7c:b5:d6:be:25:89:0b:95:4c:2d:18:b8:d6:26:c8:f6:e8:
39:1a:8b:17:a8:03:e5:10:b2:7f:cb:9a:5b:1d:fb:fb:2c:e1:
4f:2a:6c:82:24:d8:cf:d5:ed:c1:8e:d6:72:32:49:f7:a2:1e:
6e:84:f5:ca:3a:f9:25:3b:b4:8d:af:8b:33:31:ee:f8:ef:cd:
80:1d:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:26:13 2026 by rpki-client