Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
File: zoCPTPJWR31wopTRMBbCToQn1cI.mft (raw, json)
Hash identifier: txegYR0PlLzNFiOdBYGcqOlL7b1F3YrbcLiSmA5cSA4=
Subject key identifier: 6A:7F:47:0A:D5:8C:EF:8E:95:AE:76:DF:E1:58:FE:27:B6:19:EC:00
Authority key identifier: CE:80:8F:4C:F2:56:47:7D:70:A2:94:D1:30:16:C2:4E:84:27:D5:C2
Certificate issuer: /CN=ce808f4cf256477d70a294d13016c24e8427d5c2
Certificate serial: 01A0CE23ECC0206D97551939F2AAFD519971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:00:55 +0000
Manifest this update: Wed 23 Sep 2026 12:00:55 +0000
Manifest next update: Thu 24 Sep 2026 12:00:55 +0000
Files and hashes: 1: _JmG_0xrHcMFjUFl8DJsIFUaYD8.roa (hash: 7k5k2uPEyUiwrs4Pq2qVmxoQcxV+zQ2r/avbqedzahU=)
2: zDXzBZeXum8l30Cf-mJ2T8gbfQg.roa (hash: sIKKghlLT4flRrCI8RlvLEJlP+eAnZaJEqf8oP1H+nw=)
3: zoCPTPJWR31wopTRMBbCToQn1cI.crl (hash: wsaoTGadTXwWEVfVL+bKx4tiwIO2yOQ5TWvltZ2N9Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:ec:c0:20:6d:97:55:19:39:f2:aa:fd:51:99:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce808f4cf256477d70a294d13016c24e8427d5c2
Validity
Not Before: Sep 23 12:00:55 2026 GMT
Not After : Sep 24 12:00:55 2026 GMT
Subject: CN=6a7f470ad58cef8e95ae76dfe158fe27b619ec00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f9:a2:01:4e:b4:57:e7:e0:48:4c:1a:62:45:
e1:0a:4a:83:00:04:38:2b:6d:05:c6:19:84:cb:9e:
4e:d3:c8:7b:27:6b:0c:1a:13:33:d6:ba:71:50:32:
e9:e1:09:3d:77:51:17:42:3c:81:20:a3:5b:c5:a5:
75:67:8b:5d:7c:3f:b7:c1:cc:45:46:b0:6c:24:7d:
57:d7:98:ad:16:5a:e4:af:11:8a:4c:66:a6:0d:25:
ab:b5:72:ce:84:ec:5f:f5:88:23:75:34:2e:91:1d:
84:bb:d9:f5:d2:05:ea:45:50:af:d4:a5:0e:1b:79:
9c:35:fb:b9:d7:c3:df:98:06:39:a5:f9:da:62:57:
cd:0d:5a:1d:e4:bb:59:30:f8:ae:a3:d4:48:40:28:
9e:8a:e4:21:07:2b:5f:81:b5:53:15:8e:ec:58:2e:
a7:92:8d:07:ca:21:8c:63:07:11:25:f8:23:fb:b4:
f8:84:e0:48:a9:79:27:51:55:5c:8a:c9:a3:0b:ed:
9a:1e:cf:4c:fc:ef:5d:e0:60:f4:42:29:90:bf:ce:
8d:18:85:f1:bb:b4:93:25:65:5e:8c:e3:77:de:02:
71:98:44:59:59:ae:ed:a8:80:bd:5f:63:d0:00:fb:
76:ff:a7:22:d5:29:35:63:dc:e8:42:b6:b6:94:eb:
85:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7F:47:0A:D5:8C:EF:8E:95:AE:76:DF:E1:58:FE:27:B6:19:EC:00
X509v3 Authority Key Identifier:
keyid:CE:80:8F:4C:F2:56:47:7D:70:A2:94:D1:30:16:C2:4E:84:27:D5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:18:37:8a:4e:56:4c:bc:3a:8d:61:9f:fc:8b:75:5c:cc:6f:
b4:bc:ef:74:66:4b:67:da:39:96:d4:05:b2:db:ee:82:b4:67:
a6:d5:67:97:f4:5c:48:4b:31:a2:17:44:96:33:74:6b:d7:2f:
a7:77:ea:f2:56:46:d3:f3:ed:20:38:8d:6a:4e:54:85:d4:07:
ca:2a:4f:08:70:e1:a1:0e:ba:1b:01:64:ae:93:68:75:7a:5d:
32:cb:3d:f5:fd:94:a9:5e:29:6c:60:9d:64:de:04:50:a2:fe:
fc:47:05:e7:41:85:43:82:51:32:53:73:e9:15:54:90:a0:da:
b6:7e:e5:3b:63:5f:04:b2:5e:32:da:ef:13:ff:60:4b:f0:a1:
89:fa:52:10:5c:de:02:64:d9:10:42:7e:6b:3c:f1:7e:7f:64:
8f:59:30:47:19:48:6a:a5:7b:fb:66:33:33:24:73:0f:dd:40:
bd:d2:8f:f9:5a:ac:71:00:0a:04:8c:cb:ba:d0:08:c0:f1:63:
6b:af:0e:79:e2:be:32:66:5f:b1:b0:43:48:15:77:5d:4b:47:
65:bc:62:7b:18:ea:c4:3b:cd:22:66:e7:bf:46:8d:7e:75:61:
63:d3:45:3f:69:48:d3:dd:e0:cf:e9:7b:e1:8e:86:be:ee:87:
38:25:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:02:01 2026 by rpki-client