Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: j7Hu+dMN4gUqT201vwieE9D3kKmPpaGrcQfCSEve8cs=
Subject key identifier: AA:0E:9C:17:09:98:F0:AF:D2:2E:0F:FA:84:91:2F:57:26:CF:E8:B6
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 01A0E8C1B282C714FF19B8BF28FE6FF69E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 1A0A
Signing time: Mon 28 Sep 2026 16:03:23 +0000
Manifest this update: Mon 28 Sep 2026 16:03:23 +0000
Manifest next update: Tue 29 Sep 2026 16:03:23 +0000
Files and hashes: 1: TnpKsIrCpfum69mVWYffLpmGkW4.roa (hash: GTcF25unpZajDdgtvW9ktN1du2kJWKPqouAAWsJtWlU=)
2: iUEHX1o0_l8jTQlhzAvjptzhPL0.roa (hash: DpWo5iq7cHsCZy0a6PUHW0Vs0n1oWSh3Ty0O4gm3/dU=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: SE9xAoQWnjBHDRaA0aFfZP05s/ss+9kpei2Ek8R1K+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:b2:82:c7:14:ff:19:b8:bf:28:fe:6f:f6:9e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Sep 28 16:03:23 2026 GMT
Not After : Sep 29 16:03:23 2026 GMT
Subject: CN=aa0e9c170998f0afd22e0ffa84912f5726cfe8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:4e:b3:a6:0b:2a:9e:b7:75:de:cc:0c:97:
83:a1:02:54:5d:b1:3f:74:2b:d5:78:6a:f9:5a:4c:
5d:f9:4d:f0:b4:27:5d:ef:43:09:66:39:b1:51:56:
55:2b:eb:a0:cc:30:b4:c7:d3:4a:50:3f:ba:ba:6a:
3a:e5:75:4b:57:cc:16:e1:c3:df:94:bc:48:15:78:
ed:de:3e:9e:60:60:b3:1c:0d:08:dd:5e:54:91:5e:
08:03:4a:4b:4f:2e:51:9d:6c:05:5b:c0:21:b0:ee:
46:45:ee:7c:30:fe:67:74:2c:dc:77:dd:4d:49:6d:
f2:5a:b7:5c:d1:d6:3e:0f:35:fe:7d:14:9b:dd:ef:
d7:2b:c4:81:b0:d0:7c:a5:58:e4:79:46:10:13:41:
36:3e:59:fc:56:ee:46:8e:b5:a1:98:49:a7:07:73:
a0:c7:04:0e:c4:8c:81:ed:48:96:7d:bd:2d:ca:4b:
61:09:ae:50:00:a1:d9:95:de:b8:94:3b:61:2e:06:
e8:c7:c6:14:9e:05:d4:c0:05:ae:a7:a1:88:0a:87:
6b:9b:6b:28:4d:92:d4:97:c2:94:f7:ac:47:14:47:
de:be:1a:eb:9e:e0:1e:ae:e3:5a:3f:a8:e4:b4:85:
a6:17:06:42:00:53:b4:40:bd:d8:5d:ff:b9:98:a0:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0E:9C:17:09:98:F0:AF:D2:2E:0F:FA:84:91:2F:57:26:CF:E8:B6
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4a:58:82:5a:95:fd:45:64:f2:8f:48:d4:fb:56:8d:06:9d:
c9:58:52:05:39:28:4c:1c:14:76:7a:c4:ad:ff:0e:54:a6:13:
cc:01:d6:5e:2d:8b:84:3d:c8:cb:99:be:3d:12:ce:37:fb:0c:
79:a7:fb:23:78:25:e0:63:e0:9c:fb:f7:a0:5f:9e:62:8b:37:
b8:cb:a2:f8:d9:c2:1b:42:9d:89:0c:da:ff:c2:5c:ae:2d:1d:
50:2d:30:79:61:9f:d4:13:62:5c:ac:bd:a8:fd:4b:36:65:9c:
68:4a:1a:8e:b8:05:49:1d:8a:b6:a0:58:d7:a4:da:cd:b4:8f:
79:71:40:93:f1:72:dc:37:27:8f:d8:9d:2e:f5:ef:24:c6:1a:
bb:e7:33:2f:db:8f:e0:1c:62:2e:06:a9:57:b1:2a:e0:e0:cd:
04:ef:58:f3:cc:25:2d:51:be:5e:09:0e:25:cd:48:ce:f3:c5:
f5:70:6f:a0:b1:1a:5b:b9:6c:ec:a6:93:be:55:25:33:1e:42:
e4:4b:cc:07:8c:1c:9c:aa:57:e8:ce:46:52:4b:aa:f8:f7:69:
af:bd:31:56:a9:b4:ce:38:eb:0b:a4:8b:a9:62:15:a9:cf:1e:
28:7b:97:7f:11:a2:76:dd:4b:4f:eb:ce:20:e9:0c:7f:fe:1c:
60:0c:29:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:42:26 2026 by rpki-client