Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: OQjz0fx5tFQm9xZO8ZjTeBFqbk9IFtJAr7b97rd41MM=
Subject key identifier: 08:B7:05:D0:78:B4:1B:66:A7:CE:B9:F2:CF:3A:4F:0F:7B:A9:C4:C6
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 01A12B0DA75238532831B44606A7F08FC04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 161E
Signing time: Sun 11 Oct 2026 13:01:17 +0000
Manifest this update: Sun 11 Oct 2026 13:01:17 +0000
Manifest next update: Mon 12 Oct 2026 13:01:17 +0000
Files and hashes: 1: Kh2cfJTXoBgXnb5cU5bkPsfJ3G8.roa (hash: OIPaE117G5MhGem++zxKuvBio3gr+RNCi90er+bU030=)
2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: TEtzp6KwpXAukmMC7hQ7vxHmQufK/Ot5bfpT5s5O3Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:a7:52:38:53:28:31:b4:46:06:a7:f0:8f:c0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Oct 11 13:01:17 2026 GMT
Not After : Oct 12 13:01:17 2026 GMT
Subject: CN=08b705d078b41b66a7ceb9f2cf3a4f0f7ba9c4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:61:46:47:dd:d2:43:af:10:01:a6:34:5b:
c4:be:f3:80:f4:a8:c9:0f:22:a9:e5:e0:ac:1e:63:
85:3c:74:87:b0:8e:d7:39:6b:b9:73:fa:71:8c:d2:
4e:64:a9:ba:5a:c9:7b:f3:66:55:58:a4:3e:a4:1a:
ec:8d:01:af:49:2f:07:02:cc:6c:f8:b1:57:0d:53:
2a:0e:a4:4d:e9:04:ac:f4:79:20:be:dd:3a:72:87:
32:4c:ac:ae:2e:ca:bf:20:47:98:72:0f:aa:2f:de:
3a:22:32:f2:16:1a:dd:b8:74:5f:26:cb:23:3c:ac:
1d:82:87:8a:f9:d1:92:6b:b1:5b:22:72:70:b4:9e:
62:63:aa:7b:44:32:dc:2c:07:80:7c:f0:c4:3e:e0:
d1:bd:00:ef:d9:c6:3d:d5:c3:48:df:87:1d:45:b7:
62:9c:12:ca:d2:31:af:93:53:60:d0:61:41:af:83:
03:b2:ca:ce:f8:24:d2:7e:a1:91:a5:06:4c:55:19:
f0:47:43:cc:c7:7f:38:67:38:15:1b:c8:0e:cf:20:
b9:df:61:a0:81:7a:56:a1:28:4f:df:1f:c6:ed:af:
b8:2d:19:ea:d1:2f:a3:c8:46:b5:8e:9f:c0:c1:57:
52:b5:71:70:69:df:23:57:80:1b:1d:65:a3:09:16:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B7:05:D0:78:B4:1B:66:A7:CE:B9:F2:CF:3A:4F:0F:7B:A9:C4:C6
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:11:2b:be:2a:51:bb:76:73:0c:6b:dc:07:01:6d:29:a2:06:
48:41:5e:03:44:f6:cb:eb:55:c6:1c:22:57:ac:ac:53:fb:e4:
fe:f5:8b:57:64:fc:3d:50:70:07:cb:1c:4e:af:09:74:9e:35:
3c:39:cc:b7:69:3e:b2:8f:1f:e9:11:06:c8:be:bc:6f:05:bc:
81:aa:22:f9:4d:65:63:a9:5f:6e:07:e4:74:61:5d:4c:92:09:
8b:85:76:56:08:5f:e9:ce:b9:ed:d4:02:4b:9e:52:8f:77:ef:
62:0a:40:bc:19:9c:62:87:25:2a:8c:29:37:56:95:33:a9:15:
b2:e1:76:01:05:8f:95:9a:31:a8:88:c4:18:de:74:20:9f:76:
91:e9:60:8d:bf:a6:26:b6:12:6c:99:09:7c:c8:69:6b:24:db:
f0:0d:9f:02:c6:ac:85:27:1f:fc:75:ea:24:25:e4:c2:f8:1a:
8e:17:fe:54:37:3b:a1:94:65:92:c9:8c:aa:64:8d:33:a7:84:
30:f5:3a:b6:3f:31:10:c1:34:80:ee:25:cb:fc:62:e9:27:82:
c3:f5:d1:8d:df:84:31:70:3d:45:90:45:de:bc:1d:94:12:39:
67:74:df:19:ca:93:e9:cc:1c:4b:d1:a1:2e:cf:2b:20:4a:25:
d4:d9:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:19:16 2026 by rpki-client