Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: SZVlE+c9Pvdya++p0VHmVMefBzzQet9vRezrs1IxXYg=
Subject key identifier: F8:5C:FC:02:19:D5:CE:70:CF:E3:AC:02:F0:6A:47:0A:A9:E9:C7:AA
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 01A0CFDB691C59CF506CFB63E9A60BFC1A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 20:00:57 +0000
Manifest this update: Wed 23 Sep 2026 20:00:57 +0000
Manifest next update: Thu 24 Sep 2026 20:00:57 +0000
Files and hashes: 1: CT3dS6C-LLdGxg4ufjXioY_GRbY.roa (hash: 2OWY/qBFg0EKWwzsD1nTcACFUzcmAJDh5fmSfds1Lpc=)
2: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: RTeaPt4SmMg5ggn3Ri0T8JLByxnKZdVX9TrqfcJ8vgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:69:1c:59:cf:50:6c:fb:63:e9:a6:0b:fc:1a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Sep 23 20:00:57 2026 GMT
Not After : Sep 24 20:00:57 2026 GMT
Subject: CN=f85cfc0219d5ce70cfe3ac02f06a470aa9e9c7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:ba:27:70:5d:9d:a5:76:e4:45:56:73:ca:
55:85:50:d5:1e:a4:8c:7d:c6:09:5f:99:73:d1:e1:
c8:a1:c8:fa:ef:ba:a8:10:fe:b6:ca:6b:cf:4c:14:
fc:a4:32:88:a3:11:96:d7:2f:66:9a:df:76:4a:e4:
42:66:a5:ee:08:99:3d:61:c1:d2:3a:76:a8:67:cd:
1f:ea:2f:90:74:3a:86:f8:ad:68:1e:d9:d5:66:c4:
e1:63:ea:bb:e8:d8:b3:11:fc:29:64:11:4b:2e:3a:
67:cb:2e:90:01:e7:0a:fa:73:28:44:1d:80:04:94:
2b:f8:b4:a9:77:56:ef:af:7e:8b:67:0e:b9:cb:8c:
9f:d7:3c:43:03:ab:33:a5:d1:55:23:fa:39:b3:6a:
ab:bd:95:98:de:69:c1:37:c5:07:8d:36:0d:5e:8f:
f9:c7:57:9b:c0:06:ae:7a:49:3d:b0:61:88:eb:3f:
1e:89:42:90:cc:ca:b8:6b:26:74:b4:ad:df:c1:37:
ff:88:80:0f:97:0b:ec:31:57:b0:4a:9b:bb:ae:72:
ad:91:12:06:21:10:55:44:91:ed:7e:f6:52:ac:92:
ed:4e:52:a3:69:cc:73:f1:4a:52:22:41:ce:46:63:
38:5d:b0:5e:bd:8f:a6:38:8d:be:be:de:b4:2f:0c:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5C:FC:02:19:D5:CE:70:CF:E3:AC:02:F0:6A:47:0A:A9:E9:C7:AA
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4a:ab:7a:5e:ee:29:e3:57:ce:fc:52:00:47:de:71:5c:a6:
4a:34:78:f3:55:98:83:76:9b:b3:c5:c3:22:c1:b8:c5:f2:f6:
19:8f:4c:e9:dc:d7:44:34:fe:88:a5:59:33:d7:a5:40:92:11:
43:6e:1e:e4:f3:ce:92:6b:92:97:59:b5:04:f6:bf:9b:3e:4e:
7e:f9:e1:88:17:92:0f:19:0c:69:f9:c1:a9:e9:68:4c:56:7a:
89:dc:fb:d0:2f:d4:66:2d:dd:7d:8c:af:5b:d8:96:18:1f:c1:
76:a0:a3:08:7f:08:72:5b:1b:10:fa:52:de:f1:fb:e3:53:b8:
1a:9a:1e:a9:d0:ae:6d:75:1f:65:e7:8e:82:37:44:c1:b4:a0:
77:23:11:63:21:fc:b4:94:94:31:9a:a8:e5:09:62:4d:77:c0:
4c:e0:23:aa:09:8e:c0:ff:8a:d9:b0:6c:4d:66:75:37:da:a1:
87:2f:3e:ed:35:b9:70:d1:49:20:56:55:fc:ae:03:dc:fd:0b:
f5:c3:91:55:80:10:85:69:bb:76:45:9f:cf:dc:d5:2d:9d:29:
eb:71:0f:83:57:61:9d:70:a2:c5:33:b2:b6:35:02:cd:d1:54:
38:ad:28:89:42:6d:e1:d7:01:7c:e7:4b:49:7d:e0:e2:4f:a1:
5c:1e:16:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:49:19 2026 by rpki-client