Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: glYrRpIze36TYJ4MGic//xle5tzpltiieJgBDESnA8g=
Subject key identifier: 0D:16:10:A4:77:92:09:9E:06:F9:28:6C:61:B6:B5:3B:F7:93:67:DA
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 01A0F3B1D5AEF719D48F0DB03462F07DB98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 1534
Signing time: Wed 30 Sep 2026 19:01:52 +0000
Manifest this update: Wed 30 Sep 2026 19:01:52 +0000
Manifest next update: Thu 01 Oct 2026 19:01:52 +0000
Files and hashes: 1: HY8y2aUxH2zl7Z8uEFKyCs4_DZE.roa (hash: pgB+L4R4Q18tDhMP8CyO3Aai8GigL3mxjQcI8MoXdXI=)
2: cKZJLTzeqYRhpsddyswZAoLcpsE.roa (hash: HgvgjBFasTjpcgFlyoecgapQ0MDuq029z3qYeWnH2Zk=)
3: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: gIkM1G09EN2POlMNPsfxPcnuShwDAnwyFtY0RkIuROQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:b1:d5:ae:f7:19:d4:8f:0d:b0:34:62:f0:7d:b9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Sep 30 19:01:52 2026 GMT
Not After : Oct 1 19:01:52 2026 GMT
Subject: CN=0d1610a47792099e06f9286c61b6b53bf79367da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:d4:69:f2:38:eb:71:56:5e:ba:07:51:39:
aa:8f:40:87:2f:01:ea:c2:f8:9b:e6:be:18:b8:3f:
03:7c:d0:c6:6a:aa:05:fa:a0:3e:d5:6b:8d:52:c7:
eb:39:be:0c:56:eb:2e:23:a6:7a:5a:ae:d5:4f:69:
6c:fe:49:b2:21:4f:47:44:5f:44:18:5d:90:f6:c3:
73:af:5a:8a:cf:c3:29:cf:86:37:32:68:46:a4:21:
62:81:42:f5:2a:9f:79:a9:8f:1a:be:99:fe:bd:48:
e0:ab:17:7f:83:c5:d3:f0:40:54:71:98:14:53:d5:
ff:9c:d2:de:be:0f:e1:9e:07:5d:9e:f5:bc:2c:b2:
52:58:92:04:9c:c4:43:b9:3c:fc:7c:7f:c6:c8:1b:
2e:73:dc:00:66:7d:f1:f5:e0:1a:da:fb:76:72:60:
f6:e3:00:20:9d:84:1f:82:40:cc:f3:c2:fb:54:53:
57:9f:c1:a4:a2:64:b5:75:9f:cf:4a:df:5a:5c:c0:
7a:f9:08:00:70:79:ec:60:fd:e6:f3:f4:a3:c9:a0:
22:15:35:d0:68:82:46:3a:25:c5:88:cb:8e:20:7a:
c6:89:e7:18:2b:bf:67:36:3c:96:66:7a:aa:23:d3:
d0:12:79:80:40:19:1e:35:3d:aa:63:4f:bb:28:54:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:16:10:A4:77:92:09:9E:06:F9:28:6C:61:B6:B5:3B:F7:93:67:DA
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ef:13:49:4c:05:c5:a8:47:b0:aa:18:2f:98:a6:8b:43:9e:
a6:2a:f5:51:0f:57:e4:90:c6:e6:df:14:a1:50:87:e4:b5:be:
c9:d9:f9:da:09:59:59:a5:a8:76:97:17:8d:91:2e:6e:8d:88:
17:01:28:45:59:aa:30:82:b5:10:b0:1d:f9:35:08:74:71:7a:
f3:9f:f0:bb:98:65:0e:bf:3b:f0:49:fc:41:92:7f:ad:51:b1:
51:90:ca:f1:9a:a9:6c:32:fb:df:2c:f2:72:94:c1:fb:0c:44:
e7:cf:d7:d5:6d:eb:91:39:9b:9e:96:68:d4:c0:c0:e2:14:b7:
38:dd:1b:4d:e8:c5:12:65:94:e9:3b:85:2d:6b:ed:42:ca:65:
81:9e:79:a2:0b:6c:79:b7:88:90:a9:11:59:24:20:3f:82:32:
fa:d7:6d:64:bc:9a:79:29:75:93:12:33:75:ed:b8:34:f1:96:
60:7b:7a:93:03:a2:ee:4f:ca:1f:1a:04:a6:e8:44:f8:f3:52:
18:e4:95:10:93:6a:55:7a:ef:d5:b9:2a:b3:6b:f1:b5:f5:c9:
d6:68:c0:43:7c:1f:72:ab:88:21:60:06:be:93:ef:0b:7d:c6:
16:d5:29:fb:1b:b1:8c:58:3e:59:8b:67:73:f9:af:b1:04:29:
c0:fd:88:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 02:27:27 2026 by rpki-client