Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: FwWzNmVUDESeWeeaZget2HPq1pYNlFB8UuJ2idl4or0=
Subject key identifier: D6:15:90:FD:99:D3:D7:73:19:FA:77:EB:8B:E6:7B:BD:03:5E:86:A6
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 01A10813C7BE151FE7F790FC34E116E4EE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 14A7
Signing time: Sun 04 Oct 2026 18:01:16 +0000
Manifest this update: Sun 04 Oct 2026 18:01:16 +0000
Manifest next update: Mon 05 Oct 2026 18:01:16 +0000
Files and hashes: 1: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (hash: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: mfFLMRe3IexW2nIMC/b5heh4UHlADfJg9wnDPFxUB3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:13:c7:be:15:1f:e7:f7:90:fc:34:e1:16:e4:ee:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Oct 4 18:01:16 2026 GMT
Not After : Oct 5 18:01:16 2026 GMT
Subject: CN=d61590fd99d3d77319fa77eb8be67bbd035e86a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:da:8f:e6:68:d7:d8:b1:e3:0b:c2:7a:d9:
2b:d0:b4:3a:17:77:09:8b:9a:54:71:f4:e7:cd:b4:
06:ba:fe:39:d4:80:7a:1b:49:d1:d1:3e:5f:9c:b5:
62:73:eb:0c:d7:87:c4:3e:a0:dc:2a:27:87:65:56:
04:4c:c9:12:85:0c:32:45:c1:7b:eb:fa:99:9c:40:
46:7e:98:3f:84:56:bf:df:fe:21:84:8f:1e:80:3a:
cb:b5:06:32:59:1a:10:30:2c:08:7b:a5:2a:7c:68:
b3:9a:ad:00:4a:02:94:f4:3a:bb:89:8f:e7:86:cf:
b7:57:e1:d3:a7:3d:4a:a7:c0:dd:48:17:8a:ff:4a:
4d:f0:99:00:8c:44:f6:6b:d6:68:1c:1a:ae:6e:a1:
b1:10:e3:36:75:1a:c7:d0:55:d2:61:00:c9:49:f4:
e9:a5:ab:f1:f3:19:36:20:15:04:95:e4:a2:51:b9:
17:94:23:a5:a7:84:1e:1c:f7:d9:66:f5:e1:30:9a:
33:52:7f:b5:0d:c1:58:d1:bb:90:75:37:bf:34:5f:
86:fe:48:a3:82:c3:da:1c:ca:75:d4:2e:31:27:c8:
b4:ec:2a:45:26:ae:e6:85:dd:47:03:71:65:59:d2:
4c:ed:bf:e6:f7:25:1d:1b:ee:a5:58:d3:a8:7e:73:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:15:90:FD:99:D3:D7:73:19:FA:77:EB:8B:E6:7B:BD:03:5E:86:A6
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d6:e6:cf:08:c2:4f:0b:ee:81:c3:e8:a7:18:ae:04:c9:24:
7e:00:3a:90:34:b6:c3:27:fe:a8:e7:a9:b8:5b:84:ba:f6:ea:
6d:ba:fa:cb:31:36:8e:ad:79:ed:7c:76:b9:78:5c:98:ca:4d:
f4:23:0e:af:6c:fd:ff:61:1e:4b:f5:dc:da:8a:d9:bc:e2:cb:
1d:63:dc:6e:ff:68:3b:49:5b:4e:75:c9:cd:5a:34:3a:c0:a6:
41:6b:23:a0:53:31:a6:ed:8e:d5:2a:df:3f:0f:63:eb:7f:53:
ff:5f:7f:c0:d3:c6:19:96:23:da:40:82:45:ca:8b:71:f8:92:
2e:74:38:3a:b8:03:34:fa:76:1c:d2:0a:ee:0f:b3:d4:9b:dd:
01:ad:2b:62:2d:28:15:89:d2:75:a3:9a:24:55:b6:12:54:c7:
af:57:1d:6a:ed:25:3c:19:23:ca:4d:67:03:a9:49:dc:22:db:
c1:76:e8:71:f4:7b:55:d8:ac:7e:fe:a6:6c:0d:39:9a:15:4d:
27:9b:68:24:05:35:01:70:c3:e8:b0:b8:36:a2:d6:e2:c4:ae:
6a:b6:73:3f:a2:e4:ae:dd:8f:7a:23:2f:e2:60:40:6b:2a:5f:
40:9c:ff:fd:de:70:f0:1a:22:d8:7a:b0:6f:09:59:58:83:ff:
61:54:bf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:02:35 2026 by rpki-client