Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: 7U5sRynvYFvaXGEIaExDuQ+PObgah2VkN84dCIG4Fvc=
Subject key identifier: A0:E8:9D:4C:6D:6A:D1:F2:E7:BD:82:D2:E2:CB:BA:BE:DA:73:EC:C3
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 01A0CB5973F11AF0A80FE33D0A8EE7C0B6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 193C
Signing time: Tue 22 Sep 2026 23:00:32 +0000
Manifest this update: Tue 22 Sep 2026 23:00:32 +0000
Manifest next update: Wed 23 Sep 2026 23:00:32 +0000
Files and hashes: 1: Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa (hash: HdfFsuae+bs6Px2O/nXidzw9nHeIbmVY360ACfcO/uA=)
2: apKWJZAqjwjRd0dehHbbTa9ZY3A.roa (hash: nVaIovGi66UncedynfpwyGBTPpXsXon+jV7FMQbYQEg=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: yPgd4RFqIurH0IcMv7/IuW3Eal8YLSXHmMTgMnyC57U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:73:f1:1a:f0:a8:0f:e3:3d:0a:8e:e7:c0:b6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Sep 22 23:00:32 2026 GMT
Not After : Sep 23 23:00:32 2026 GMT
Subject: CN=a0e89d4c6d6ad1f2e7bd82d2e2cbbabeda73ecc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:af:79:cd:c2:dc:76:bf:4d:67:ee:6a:4a:
4e:bc:f3:d2:3b:10:e0:5f:11:88:35:65:02:51:82:
6e:df:99:f3:64:72:0d:b1:72:a5:a3:92:04:2b:94:
fb:83:7b:59:b2:d0:5c:af:31:0c:63:3a:d5:93:f0:
fa:28:70:94:bc:43:ad:ff:a4:11:06:8c:34:16:bf:
8a:5d:10:b6:c9:13:4d:b1:cc:b6:9e:72:ff:26:1f:
e8:fd:30:7b:af:7b:12:46:7e:ed:12:ac:77:21:a0:
2b:10:3c:87:ee:d1:d2:72:01:0d:b1:49:fe:0a:4f:
88:09:0e:07:f1:42:62:62:34:b0:e5:15:1a:48:d3:
5b:8b:3c:2b:05:3d:82:a5:0b:d3:9b:da:22:53:43:
a6:e9:74:a7:5a:17:94:3f:03:ae:46:ea:e1:e8:cd:
45:83:3c:71:d0:af:63:58:ca:f7:ef:f3:5e:8d:8e:
67:15:9b:6c:17:4b:40:93:63:89:0b:94:9b:38:94:
cf:fa:86:a2:ad:13:04:fe:b1:a1:0f:d7:c8:c1:bb:
f2:7a:3e:f8:a3:94:10:5d:bb:da:2b:ee:01:89:49:
8a:3a:cd:e7:0b:68:6e:a7:89:dc:5c:15:d2:12:22:
be:8a:6a:42:e8:29:78:ca:4b:46:76:48:97:8b:c6:
1e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E8:9D:4C:6D:6A:D1:F2:E7:BD:82:D2:E2:CB:BA:BE:DA:73:EC:C3
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:09:96:13:1f:36:80:c7:5d:f1:ed:2d:13:e1:d7:ac:0a:c3:
86:27:c6:dd:d2:ca:d2:f2:e1:6c:17:fd:b6:03:c0:e3:5b:a7:
5a:62:8e:4d:7a:d9:5d:cb:34:8b:91:b6:90:57:5a:1c:b8:52:
2f:71:af:5b:72:3a:17:f4:fc:80:a3:a7:45:9e:6a:1a:08:db:
b9:c7:43:2a:d8:07:99:e6:88:e4:10:9c:83:9f:5d:3c:43:7f:
ae:21:08:d8:1b:a7:c8:64:52:37:c4:78:f7:21:90:d5:e9:21:
3f:ff:00:a6:f5:5a:a3:c9:aa:b8:a1:a5:08:62:68:d2:03:21:
c2:37:1e:a1:c0:51:ae:bc:1e:d4:9f:aa:87:9f:57:91:35:90:
e0:9b:75:88:26:c2:1d:0d:32:4e:09:ce:63:ee:53:98:b9:4e:
c1:4c:50:ee:2a:13:cc:aa:54:c1:50:30:c1:36:4b:d7:4b:73:
d6:53:d6:c6:02:51:fa:f6:56:9f:7a:17:76:66:d7:a1:b6:bc:
ae:48:3c:5c:f0:7b:2d:27:74:98:8c:9b:0c:67:14:d2:db:5c:
68:18:85:de:d0:69:46:47:b0:86:87:12:95:38:6f:54:2f:00:
7d:ae:d6:10:7e:fe:af:25:25:42:df:8f:e3:26:c8:ce:d8:37:
b1:ad:c5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:31:05 2026 by rpki-client