Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: kDIaIkhr9qQjpDFff1C2Mwf/qrEYFQY+z7r0t7NYvP0=
Subject key identifier: 28:FB:80:8A:1F:14:3C:1E:DA:13:CC:B1:F3:A7:0C:F3:93:96:64:BC
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 01A0BE0BAACE6C13CF5CFBE2C8F3AB649BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 1A63
Signing time: Sun 20 Sep 2026 09:00:30 +0000
Manifest this update: Sun 20 Sep 2026 09:00:30 +0000
Manifest next update: Mon 21 Sep 2026 09:00:30 +0000
Files and hashes: 1: 98fyEBb-PIBiroCj51bzkd-V_i4.roa (hash: 2RN0v3XP/euGb82/ECdLfjWteqkCXDXBbJynvO0cBWE=)
2: y97Q2cCIA4p_jfA1RbOfelZQKOo.roa (hash: oRmoVnYM94QBjpHDaFRFV+BA4jZYdHdlmrs4oEppUqA=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: x+VlYPzAR/l7dTgDdWx5Q0Jyvdmgn8T/fzKHHddk7jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:aa:ce:6c:13:cf:5c:fb:e2:c8:f3:ab:64:9b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Sep 20 09:00:30 2026 GMT
Not After : Sep 21 09:00:30 2026 GMT
Subject: CN=28fb808a1f143c1eda13ccb1f3a70cf3939664bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:4c:d8:fc:37:c0:1c:5a:6f:d5:80:58:54:
ba:3b:e7:5c:de:db:8d:25:bd:fd:a5:8e:cb:2b:ed:
cd:a3:66:ba:b0:f1:98:46:0d:67:ae:75:a6:41:b7:
1d:da:16:b1:b0:95:f4:a4:05:66:c7:55:50:47:a2:
6b:0b:58:7e:2f:2c:b4:ad:84:9c:78:8c:b0:ea:47:
d7:c9:00:08:67:cd:61:92:3f:30:57:fc:95:a8:d7:
99:fa:18:fe:83:41:7f:ac:37:f8:2c:4b:e6:e1:47:
6d:9f:39:19:ca:82:34:1d:ab:9a:b6:30:e4:3d:5e:
e9:51:9d:77:3c:22:2c:0f:b9:98:3e:df:11:bc:e0:
07:60:99:69:60:3d:d3:92:d2:56:96:5f:1b:da:1f:
a7:19:ef:03:89:fc:b0:65:8c:6b:ac:f6:2a:8f:00:
e6:0c:63:ff:cd:75:4e:8a:cd:4a:a5:f8:d6:4d:57:
1b:18:9e:f2:d4:07:0c:02:07:9f:f2:09:e7:e4:6d:
37:5b:29:83:77:4e:b0:1b:d4:1d:f9:4e:97:d5:06:
03:e4:4f:fd:0c:37:23:69:1d:35:67:eb:ce:c8:b6:
0a:2c:e4:04:df:eb:eb:14:f8:2d:3e:fc:9e:d0:05:
23:07:85:5f:93:8a:59:97:49:96:a5:8f:d8:fa:11:
4c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:80:8A:1F:14:3C:1E:DA:13:CC:B1:F3:A7:0C:F3:93:96:64:BC
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:34:35:1a:1d:7d:89:f5:88:32:4c:21:fe:de:dd:f6:a5:8d:
dd:90:28:fd:0a:03:7f:fd:62:3e:85:3f:34:24:e2:c8:a7:48:
7e:83:a1:55:a5:68:2f:79:84:0c:bc:7f:b2:ac:f5:7b:8f:e9:
2a:6a:3a:d2:b4:17:8c:ed:1e:b5:dd:42:4e:e8:01:ca:0a:4e:
76:90:e1:5e:4e:c6:e4:7f:46:e8:c4:8c:d5:94:86:cf:99:ed:
6f:14:f9:d7:60:26:61:8c:74:a5:18:db:97:39:0b:6a:19:cb:
f1:86:eb:65:a7:1d:ec:65:43:bb:55:2d:d8:bb:e9:7f:ca:29:
6e:a5:ea:14:fd:d2:05:c6:2c:44:b5:31:fa:f8:cc:a7:28:8d:
ad:27:9d:86:29:77:1b:a7:45:2b:21:0e:f7:f4:b2:5c:6f:5b:
20:fa:b6:a9:ab:d0:ea:c6:75:60:51:40:2b:a8:62:4c:b5:98:
cb:45:6a:a9:33:ec:8d:12:30:d5:e6:d7:95:34:4e:18:41:07:
bd:fe:70:01:27:fc:38:90:e2:4c:c2:58:34:a6:2e:f0:fa:01:
ce:81:42:83:68:c2:9e:ce:63:53:70:f4:e4:8b:35:67:a2:6b:
1d:8e:ab:40:65:05:2a:33:8f:4d:d6:c8:86:fa:a8:9a:5c:00:
29:e9:81:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+C6rObBPPXPviyPOrZJvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDBkOTYyNDJiMDgyZWZlNWI0ZjIyNTg4MjBiMzA1OTM5
NjE5OGQwHhcNMjYwOTIwMDkwMDMwWhcNMjYwOTIxMDkwMDMwWjAzMTEwLwYDVQQD
EygyOGZiODA4YTFmMTQzYzFlZGExM2NjYjFmM2E3MGNmMzkzOTY2NGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYNM2Pw3wBxab9WAWFS6O+dc3tuN
Jb39pY7LK+3No2a6sPGYRg1nrnWmQbcd2haxsJX0pAVmx1VQR6JrC1h+Lyy0rYSc
eIyw6kfXyQAIZ81hkj8wV/yVqNeZ+hj+g0F/rDf4LEvm4UdtnzkZyoI0HauatjDk
PV7pUZ13PCIsD7mYPt8RvOAHYJlpYD3TktJWll8b2h+nGe8DifywZYxrrPYqjwDm
DGP/zXVOis1KpfjWTVcbGJ7y1AcMAgef8gnn5G03WymDd06wG9Qd+U6X1QYD5E/9
DDcjaR01Z+vOyLYKLOQE3+vrFPgtPvye0AUjB4Vfk4pZl0mWpY/Y+hFMDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj7gIofFDwe2hPMsfOnDPOTlmS8MB8GA1UdIwQY
MBaAFMxA2WJCsILv5bTyJYggswWTlhmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTkt
YzFlYmU2MTU0OWNjLzEvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTktYzFlYmU2MTU0OWNj
LzEvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTQ1Gh19
ifWIMkwh/t7d9qWN3ZAo/QoDf/1iPoU/NCTiyKdIfoOhVaVoL3mEDLx/sqz1e4/p
Kmo60rQXjO0etd1CTugBygpOdpDhXk7G5H9G6MSM1ZSGz5ntbxT512AmYYx0pRjb
lzkLahnL8YbrZacd7GVDu1Ut2Lvpf8opbqXqFP3SBcYsRLUx+vjMpyiNrSedhil3
G6dFKyEO9/SyXG9bIPq2qavQ6sZ1YFFAK6hiTLWYy0VqqTPsjRIw1ebXlTROGEEH
vf5wASf8OJDiTMJYNKYu8PoBzoFCg2jCns5jU3D05Is1Z6JrHY6rQGUFKjOPTdbI
hvqomlwAKemBaw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:45:01 2026 by rpki-client