Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
File: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft (raw, json)
Hash identifier: 0YR+PRJXhr2wUvc5BXfrFMCzqt2zHVWVnWQgQfzDXRs=
Subject key identifier: 48:79:A3:B2:3F:4E:8A:4F:E7:C1:FB:B1:E5:CF:AD:61:B6:39:72:E9
Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
Certificate issuer: /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Certificate serial: 01A0D45DFD9E29D7EE63BFA8C881A3D3197F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
Manifest number: 091A
Signing time: Thu 24 Sep 2026 17:02:04 +0000
Manifest this update: Thu 24 Sep 2026 17:02:04 +0000
Manifest next update: Fri 25 Sep 2026 17:02:04 +0000
Files and hashes: 1: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl (hash: YO1rYZDjzGW8bIF0AJIVXf6hlI/Dg4vCkF2mduihaSc=)
2: zYgAkQEZ_3KbBbpb8eeekWBJNsM.roa (hash: adtaF+5W4MxrQ+0iffQsTYlJHGFBvciDfETz57Ec0LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:fd:9e:29:d7:ee:63:bf:a8:c8:81:a3:d3:19:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Validity
Not Before: Sep 24 17:02:04 2026 GMT
Not After : Sep 25 17:02:04 2026 GMT
Subject: CN=4879a3b23f4e8a4fe7c1fbb1e5cfad61b63972e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:f3:40:3d:72:34:6d:e3:79:42:44:a1:99:
5c:fc:5b:e8:93:e8:e8:17:c7:f2:f0:63:87:1d:d9:
23:d0:8d:41:45:11:c9:79:57:19:f7:5c:dd:0d:ff:
cd:5c:08:8f:d1:23:ab:0c:8b:7b:c3:ff:20:95:8f:
f3:d7:e5:ed:44:c5:ea:3b:e7:74:83:3e:8e:b6:5d:
19:9f:d0:25:d7:eb:f0:9d:a0:c3:d8:ad:ed:d7:c2:
e6:49:4f:0a:8d:13:22:d5:28:25:6b:3b:9e:c1:09:
ff:3f:10:15:73:e5:b6:a6:2c:da:65:7b:30:92:46:
ab:11:34:5b:c1:5b:9f:6b:b4:92:49:62:f0:da:5f:
05:52:49:00:ac:26:35:ff:9a:74:e2:66:60:16:c6:
2b:4e:63:39:35:92:b7:23:08:c6:4c:8c:93:ab:28:
8d:1a:da:d4:d8:b7:a2:6e:62:fa:85:7a:6c:ab:bc:
5a:cd:88:d5:05:0b:f9:23:bf:d3:dc:e1:52:21:df:
63:4f:c2:65:7b:b5:9f:26:68:5f:a4:fa:cb:17:08:
66:88:15:9d:f3:25:3d:e1:97:49:33:4e:82:5e:14:
cd:83:f9:31:04:00:38:70:d2:5d:07:67:d7:6e:37:
c1:87:4b:b6:1d:60:4d:a0:d5:82:33:8e:a9:f6:25:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:79:A3:B2:3F:4E:8A:4F:E7:C1:FB:B1:E5:CF:AD:61:B6:39:72:E9
X509v3 Authority Key Identifier:
keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:84:bb:83:ab:4c:ac:e0:f2:a4:ce:df:e6:d1:e7:48:d2:4e:
8c:a4:a2:b6:49:1f:95:f4:f6:5e:b0:53:30:13:3f:3a:ab:14:
5d:7c:8b:a0:97:e6:d3:fe:4e:ee:d5:2a:63:0c:4c:3c:fd:bf:
7d:35:87:3e:5a:30:a1:03:ee:15:12:30:72:02:b6:51:11:0c:
63:f6:8a:3e:cd:a4:51:a9:f4:14:d3:e8:3a:e8:67:36:2e:bc:
39:04:9d:de:01:21:6a:5a:0a:3c:cc:e4:af:ee:cf:06:6e:eb:
b4:50:40:9c:0e:de:dd:d3:b7:3b:85:f3:a5:98:c5:58:ea:70:
fd:90:2b:27:64:a5:7b:f6:88:76:b1:d4:2d:56:bc:60:d4:88:
7c:eb:37:5c:fd:d0:53:9e:d2:fb:6a:4b:8b:39:ba:47:ad:db:
e5:f9:15:91:21:26:e3:ae:54:85:cc:d7:c2:64:02:b0:d7:be:
53:3b:db:da:65:24:7a:df:55:11:64:a6:eb:d7:bd:c3:63:94:
66:85:ab:51:18:a1:a8:71:7d:1b:68:31:73:23:71:db:4a:2e:
05:23:2a:04:0b:80:fd:c4:be:a1:4e:10:7b:04:43:91:49:f3:
b2:a5:c4:cc:d3:03:42:54:99:a6:81:bd:ff:9e:2d:6d:6f:82:
49:d2:fa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:49:12 2026 by rpki-client