Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: 5PkBb4iqUq/csYw/3MfnGXIRc937dkx23McfcF0yoXg=
Subject key identifier: AB:D3:AF:54:29:52:48:A6:84:F2:67:0C:4D:50:CF:73:67:57:07:BE
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 01A1352322F350D6DD484E620E14D58778E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0F57
Signing time: Tue 13 Oct 2026 12:00:57 +0000
Manifest this update: Tue 13 Oct 2026 12:00:57 +0000
Manifest next update: Wed 14 Oct 2026 12:00:57 +0000
Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=)
2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: dRsOkndsgNFME3+qTtQxUhhPJbzYgv2jQVB5FdfvvGs=)
3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:22:f3:50:d6:dd:48:4e:62:0e:14:d5:87:78:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Oct 13 12:00:57 2026 GMT
Not After : Oct 14 12:00:57 2026 GMT
Subject: CN=abd3af54295248a684f2670c4d50cf73675707be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:05:70:67:b8:c1:9d:cb:48:6c:a2:64:5f:
26:fd:2b:a5:7d:a4:e1:fd:53:86:4b:b7:17:e5:90:
ac:2c:cb:1d:6a:70:d7:ac:6e:77:03:f3:64:dc:18:
11:ab:a9:94:d4:41:ab:10:5f:51:ec:f6:b4:10:99:
2b:99:8c:a8:f3:0e:43:3e:2f:da:04:e9:45:de:a7:
bd:ae:fa:5e:01:df:83:05:9c:c4:c6:48:36:e1:45:
85:90:36:ea:32:f1:84:96:7c:c4:83:95:68:8d:ee:
eb:23:cd:64:3f:03:c5:e1:68:70:94:8e:fa:29:51:
b8:38:14:64:5d:ff:b4:b2:a2:35:05:73:5a:6e:82:
72:6e:e5:65:4e:b6:01:17:cd:4a:ad:bc:d4:41:c5:
cc:b3:08:15:93:55:57:95:e7:11:0f:1d:62:70:d1:
dc:d0:c6:87:d5:21:2f:64:80:09:9c:23:14:76:c4:
e3:74:62:07:4b:b6:9a:29:aa:cf:60:da:0e:b6:13:
28:6b:fc:26:36:4e:46:d8:78:dc:88:a7:7c:e0:1e:
2e:39:f9:d0:da:e4:28:4d:6f:ed:88:b8:f2:ed:78:
6b:13:18:cf:c9:39:bd:90:9a:36:4a:05:4c:9f:87:
0e:16:72:d6:cb:c0:a3:1d:cd:04:51:58:d3:94:3a:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D3:AF:54:29:52:48:A6:84:F2:67:0C:4D:50:CF:73:67:57:07:BE
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:10:1c:6d:f5:fc:7d:a0:f7:37:72:70:f4:ad:6f:9d:8b:fd:
cb:fd:97:7a:a6:6c:13:13:25:6b:b7:a7:e6:bc:52:3e:f9:3a:
65:ae:2c:9a:4e:27:a3:a2:11:f6:4b:5c:99:bb:0f:59:7c:9c:
9a:58:27:bf:7f:a2:3e:95:58:dd:e0:5d:05:e8:69:9d:d9:03:
c9:b3:ac:21:b9:38:46:b6:9b:2f:7d:01:37:b7:3f:9e:44:b6:
cc:66:99:8f:89:77:75:eb:33:6b:cb:74:ea:c9:03:21:6f:b6:
17:c3:e8:08:b9:b4:c4:7c:51:bb:79:f4:4c:7c:45:2a:62:87:
1c:79:f4:75:58:ce:82:aa:6b:23:d5:d1:b8:57:ff:e4:f5:6d:
aa:29:f5:22:35:64:2c:3c:37:28:a8:db:9f:ee:1f:1e:bc:24:
21:be:5c:5d:dd:0e:e6:0b:f3:2b:d0:29:cb:73:52:4d:a8:e9:
e6:33:f8:f5:1d:57:94:84:b8:b6:b3:80:f3:09:48:aa:91:4c:
8d:90:6b:6e:9d:8f:55:c2:0c:63:d3:ba:14:18:c9:08:5f:62:
c6:e6:f7:a9:a3:14:2f:26:7b:65:21:d9:80:c1:d7:e3:be:88:
cc:5c:a4:a2:77:3d:d5:96:37:36:2a:e5:40:e2:c8:60:73:85:
36:66:23:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:49:37 2026 by rpki-client