Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: NxE2+ShvrhIAZwBggL7rEZnAk0XwOKL7uY9fB/8GI8Y=
Subject key identifier: 96:AB:8D:8F:D7:FD:B9:C8:17:01:AA:8E:13:0C:FF:BF:64:3E:76:18
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 01A0BE4347C7C6BA39FD74B677BC647C1859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 1A64
Signing time: Sun 20 Sep 2026 10:01:15 +0000
Manifest this update: Sun 20 Sep 2026 10:01:15 +0000
Manifest next update: Mon 21 Sep 2026 10:01:15 +0000
Files and hashes: 1: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: S6jPnCKopac5a4wYD1GHKQyO0EdNu5MvEhg7A2od6O0=)
2: tLzYTCMgcEaSpA6pqJ49xM0mJhg.roa (hash: v1AukhZWCgWLe1okLFBBNkZmMt/d4/1gGQHfd9186v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:43:47:c7:c6:ba:39:fd:74:b6:77:bc:64:7c:18:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Sep 20 10:01:15 2026 GMT
Not After : Sep 21 10:01:15 2026 GMT
Subject: CN=96ab8d8fd7fdb9c81701aa8e130cffbf643e7618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:3e:9b:2c:3f:4a:f0:de:91:4d:0f:34:96:
ba:9a:c6:b7:8e:1a:5d:ff:f8:ed:ab:fe:3a:40:ac:
b7:f4:06:27:f6:d0:fd:9f:32:36:16:ab:a6:44:42:
e8:19:d2:0e:6e:4c:44:ac:72:65:ab:83:4e:22:a5:
1d:6d:a1:71:df:b6:42:12:aa:42:62:d6:2c:5d:d4:
d5:b6:ab:25:d7:0e:f7:f4:ff:ad:8b:2c:08:34:98:
70:9d:c3:37:03:48:da:53:01:9a:5e:84:5c:c8:47:
a2:88:12:3e:40:2e:c4:f3:46:2c:37:46:ba:6c:8f:
f4:a6:e2:b0:84:e6:a8:02:5c:16:88:95:d8:25:55:
5a:0c:55:cd:d7:dc:00:35:e8:06:b7:07:11:9b:19:
e4:c5:ee:5d:06:b0:af:9c:e9:5c:a9:28:d1:5d:7e:
56:4b:82:8e:14:41:1a:ea:57:c0:98:fb:04:68:99:
03:ba:f7:ae:90:40:a1:24:bd:59:db:fc:fd:b7:22:
c5:63:d4:04:a2:e4:d0:53:cf:26:e4:33:a9:85:16:
f4:8e:68:98:29:03:17:44:1f:83:c8:6e:2b:1d:85:
de:51:4e:4c:82:db:ed:c4:03:b6:05:6e:40:5a:8e:
2b:07:20:fb:5d:b2:63:65:81:5c:1a:0b:e2:11:99:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AB:8D:8F:D7:FD:B9:C8:17:01:AA:8E:13:0C:FF:BF:64:3E:76:18
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:10:00:de:a8:ea:e1:50:83:64:52:ac:c2:cb:b0:fa:f4:7d:
b3:48:ca:02:a7:67:67:9d:dd:74:f7:5e:9c:b9:24:a7:93:c1:
21:d5:31:a2:fc:26:56:2a:c5:a7:28:72:bc:c2:03:e6:10:8a:
b9:79:05:33:ee:ab:48:f3:44:5f:2c:db:e1:12:90:1b:a6:85:
0a:4b:aa:3d:fe:1c:ca:a3:6a:9b:f1:f1:5f:0e:50:24:94:8e:
4e:5f:7c:94:b5:d1:44:54:dc:59:bf:05:90:43:bd:17:59:44:
e2:53:49:70:af:6e:09:1a:79:bc:17:13:7d:1e:51:71:71:db:
c1:8c:7b:e1:7f:51:a9:c5:f8:d1:92:91:c0:b8:c4:77:53:40:
74:96:76:5d:9c:1e:b1:19:99:39:41:9f:77:52:74:bc:c6:f6:
84:17:cf:02:a2:5e:73:50:d2:e0:3c:15:97:2c:a1:47:4f:30:
35:49:be:9c:a2:2a:5a:b8:09:e5:12:89:7f:7c:4b:68:ae:22:
51:a5:88:76:91:98:44:c7:34:f0:77:87:3e:1d:9d:f0:55:af:
b4:89:f3:3d:5e:c0:4a:91:b9:37:b4:0c:64:ce:5d:e0:cd:b7:
e3:bd:71:a1:88:64:73:1d:0d:07:da:eb:5f:5a:00:f7:fc:4b:
68:5c:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:47:08 2026 by rpki-client