Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: Detx+i5RSs+0NyU9VlKUe5E9MlFJos5UczfA7WBU59c=
Subject key identifier: F9:C7:99:04:A7:AA:51:59:6D:8B:0F:18:D1:7A:66:CC:E2:83:59:A6
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 01A1371199D411573CA294D546FFEC340959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0F58
Signing time: Tue 13 Oct 2026 21:01:02 +0000
Manifest this update: Tue 13 Oct 2026 21:01:02 +0000
Manifest next update: Wed 14 Oct 2026 21:01:02 +0000
Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=)
2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: VFIXZMV6r6FbDnJlvHdJmvKvT0+5Wu0+fZp/V2YvqIk=)
3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:11:99:d4:11:57:3c:a2:94:d5:46:ff:ec:34:09:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Oct 13 21:01:02 2026 GMT
Not After : Oct 14 21:01:02 2026 GMT
Subject: CN=f9c79904a7aa51596d8b0f18d17a66cce28359a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:79:e0:78:9e:8c:64:a4:0b:4d:7b:e1:e7:
2c:20:0b:4c:9a:8c:11:ef:23:fa:93:8d:7f:25:13:
60:59:fa:0c:3a:c6:4c:5e:b2:d4:db:9e:c0:6c:31:
18:28:c7:49:5b:de:a7:dc:04:f1:b4:3c:d4:38:99:
d3:9e:fa:27:3d:09:ff:6a:3d:b6:3c:66:1b:af:73:
43:4d:f5:04:6f:83:d8:a5:ed:32:f1:e6:bd:ca:5a:
2b:33:e3:0d:21:84:1d:8e:ba:f6:e4:49:a6:db:8e:
b7:4d:51:31:b2:f6:93:94:9c:51:11:84:29:6c:4a:
85:97:64:38:13:90:cc:c6:74:69:f0:10:25:4c:60:
ba:d2:8d:c4:5a:9f:12:d7:3a:92:1a:5a:d9:92:fc:
28:a4:7e:da:52:ac:6e:ec:b6:b9:0d:a4:a9:0d:f0:
78:30:f5:8e:ba:e8:80:9b:df:e4:41:7c:5d:e1:6a:
a9:fb:29:8a:43:53:97:41:cb:6c:fb:16:d9:b2:d6:
aa:68:64:a6:8b:5b:be:be:df:2b:3a:ab:c8:66:61:
f0:9e:f8:26:9f:cd:2d:44:16:53:91:da:f6:44:96:
2a:36:0b:4d:18:1d:33:2d:59:e9:c4:26:dd:5f:ff:
5d:81:10:13:cc:78:95:08:cd:96:88:83:f0:df:fe:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C7:99:04:A7:AA:51:59:6D:8B:0F:18:D1:7A:66:CC:E2:83:59:A6
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:04:d9:02:d6:37:c9:38:07:57:a7:2c:96:87:2f:55:22:4a:
e2:98:5e:03:20:1d:8a:d4:f3:3f:d8:2c:4f:03:4e:5b:c1:62:
c7:20:9d:3e:25:7e:99:2c:05:2b:50:91:9a:4e:3c:15:af:17:
ca:76:0c:f2:0d:c4:e4:08:ca:fe:2f:fe:27:7d:d7:80:1b:a8:
12:73:75:5c:4c:d6:f9:2d:66:75:ed:40:82:8c:e1:b2:78:ca:
03:d3:46:b4:5d:09:06:cb:37:fe:9b:a9:b8:d5:43:88:16:04:
20:b6:77:4b:f5:c8:97:5d:ed:92:64:47:96:30:83:23:39:4c:
be:c3:0f:87:fb:89:14:f8:ae:a6:85:93:f0:ea:38:90:51:da:
e5:f7:ab:db:18:69:3c:18:1f:a9:b7:f7:7a:e9:03:be:de:3e:
66:5a:ef:95:d8:fc:88:a3:25:60:83:39:d3:f7:26:f5:78:d6:
74:06:08:74:dd:e8:d6:8c:33:78:d9:2d:5f:7a:48:d0:b3:25:
05:e2:49:27:0f:ef:b3:d0:0f:68:b4:42:2d:63:28:e9:5b:e5:
74:22:c1:0f:3f:d5:e3:53:3b:65:00:40:83:88:a2:7c:76:17:
5d:b7:6a:bb:16:5f:60:5c:0a:f9:d9:e4:86:24:36:51:e8:38:
4b:2c:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:33:09 2026 by rpki-client