Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
File: zt0ju4440Jd0Yzyw20Llog1-F2c.mft (raw, json)
Hash identifier: qpqDgDu2V2iRPnOc25dLg37cGaaaSI7p5Pwb6b9axj8=
Subject key identifier: AB:62:51:6C:67:3A:D1:62:F8:7A:9F:23:80:85:F1:2F:84:E1:99:09
Authority key identifier: CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67
Certificate issuer: /CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
Certificate serial: 01A0F0B0A273B87A9567C2C93E9C97C4AD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
Manifest number: 029B
Signing time: Wed 30 Sep 2026 05:01:42 +0000
Manifest this update: Wed 30 Sep 2026 05:01:42 +0000
Manifest next update: Thu 01 Oct 2026 05:01:42 +0000
Files and hashes: 1: FpEkjvz9ExCU8WF_yZEuTynNxEk.roa (hash: 1Ak172v20VjTJ5IkMewnA1XPtCQFB64d4MBqUxG0hTA=)
2: MP8cv65ITY8cNWNWM9JIwSTr0Og.roa (hash: rx4izqKgskJfzl6CODgjsArLoXvxQVPJAAPmsXR/tZI=)
3: zt0ju4440Jd0Yzyw20Llog1-F2c.crl (hash: qBvyzMCy33XYczC7aZYS6If+nDGezPuPSLgTsmuQjpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:b0:a2:73:b8:7a:95:67:c2:c9:3e:9c:97:c4:ad:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
Validity
Not Before: Sep 30 05:01:42 2026 GMT
Not After : Oct 1 05:01:42 2026 GMT
Subject: CN=ab62516c673ad162f87a9f238085f12f84e19909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:be:bf:00:22:9f:92:f0:b1:7a:b4:7c:5a:a0:
6b:39:0d:da:1b:40:8a:7e:15:43:a9:f3:cb:11:56:
6f:5a:da:5a:12:55:6c:46:1c:23:9e:7e:d3:a7:e2:
7b:70:00:00:c0:7b:7c:66:a6:96:69:f9:66:57:af:
18:e1:23:3d:28:53:9e:7f:e8:54:fc:8c:e1:24:56:
6d:4e:af:d7:a7:53:8b:66:08:78:2b:fd:d4:36:f7:
92:47:df:24:81:ce:0b:2e:13:5e:54:62:f3:87:2e:
7c:88:71:e9:b5:4b:8c:20:79:6c:11:f7:b3:6d:34:
4b:86:25:fe:d3:1d:dc:8a:91:7a:e2:14:8e:ea:49:
20:4e:d6:a9:de:67:e0:53:02:30:cf:51:bb:c3:13:
6d:c2:60:39:9f:a0:3e:8d:e8:72:0f:da:da:5b:b7:
3b:2a:a1:07:f6:7c:3e:74:4f:70:22:5f:99:a1:5a:
97:31:9a:6d:fe:e5:b5:df:90:1c:e2:f4:63:1d:91:
50:67:88:df:af:ff:ca:f6:cf:75:7e:99:96:9a:6a:
e5:80:c5:29:77:2f:62:8a:2e:a2:4f:59:23:08:61:
dd:1a:c4:3f:71:11:2d:32:15:f7:51:57:20:da:d6:
05:62:75:0e:f4:03:db:27:a1:ed:a2:88:70:fe:57:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:62:51:6C:67:3A:D1:62:F8:7A:9F:23:80:85:F1:2F:84:E1:99:09
X509v3 Authority Key Identifier:
keyid:CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:88:53:22:70:ec:b9:ac:47:91:56:84:0f:44:7e:f8:01:52:
be:f7:c9:38:83:55:e1:5d:74:3f:99:6e:a9:27:2c:4a:af:5c:
5f:ed:d8:53:ea:c0:7a:52:17:68:07:83:d6:53:0a:1d:31:0b:
87:09:03:49:5d:4c:7a:05:22:54:0b:86:7b:28:4c:e9:96:b7:
2e:58:80:62:b7:f8:f8:b4:2e:9b:d5:dc:55:2b:45:d9:5a:eb:
ce:5d:0f:f4:2b:0b:f4:70:ea:fd:05:8f:0e:9a:fa:ba:c7:f9:
d2:e9:d0:21:fe:6f:ad:14:f3:bb:96:a6:e5:d0:93:42:f7:2e:
4c:e3:5b:f1:fe:52:24:15:70:11:ae:85:fd:4d:aa:4c:ac:0b:
6d:1a:6b:5b:3f:e0:ff:f8:6a:11:7e:6f:df:59:76:3f:a5:0c:
51:2b:bf:e0:0a:72:f4:88:09:73:c7:31:7c:d1:46:16:c8:b8:
35:67:e9:19:5d:39:c5:60:a6:c5:a8:6f:a5:33:46:65:b3:4a:
93:a2:37:87:b5:ab:ca:0d:00:c7:7b:58:c5:6f:78:f3:11:20:
3c:ce:24:b6:a0:58:28:ed:d0:79:c5:20:d3:48:a8:7d:a3:39:
5a:6f:8c:3b:01:e5:a5:44:85:b2:46:6b:17:be:ad:fa:31:ba:
ed:46:f1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 10:23:46 2026 by rpki-client