Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
File: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft (raw, json)
Hash identifier: fOaBcaV978PQEWYw3tZnxWISgCQr0+risezC9fzJZaU=
Subject key identifier: 0C:00:6F:25:56:59:C2:CE:98:20:EA:B1:C9:53:26:49:1E:4E:4F:46
Authority key identifier: 65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
Certificate issuer: /CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Certificate serial: 01A1279E4F5B62B457C16410665000939123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
Manifest number: 0168
Signing time: Sat 10 Oct 2026 21:00:48 +0000
Manifest this update: Sat 10 Oct 2026 21:00:48 +0000
Manifest next update: Sun 11 Oct 2026 21:00:48 +0000
Files and hashes: 1: 3zMRh1jlUnNdxEr1g7CUVjVS7Io.roa (hash: sT+SSBni7dZcvlHSV+3jhOFDUsj7LFoenmqYmqUNvq8=)
2: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl (hash: x8243kvSOJZCe2Rvx3ZEIZT1fC1cBrG8dK31hwv/ZrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:9e:4f:5b:62:b4:57:c1:64:10:66:50:00:93:91:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Validity
Not Before: Oct 10 21:00:48 2026 GMT
Not After : Oct 11 21:00:48 2026 GMT
Subject: CN=0c006f255659c2ce9820eab1c95326491e4e4f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:ba:34:d4:79:af:fe:87:b0:e7:7b:28:62:
53:45:9b:f3:02:cb:6e:c9:89:94:3f:dc:5c:4b:7f:
62:8a:e5:f3:aa:a1:f8:80:ff:45:25:08:1c:00:2c:
7b:77:14:44:d9:a7:2b:6a:06:0e:12:7b:8c:4c:7a:
cd:76:d3:61:7b:b0:04:c5:24:75:d3:59:e6:c7:0f:
e0:3d:cf:16:9d:11:17:79:69:15:70:3b:e5:ad:d2:
d7:2c:a7:bc:90:21:d7:b5:34:7d:5a:c6:0c:8e:ea:
81:11:ea:e9:bd:ee:2e:6f:ff:f6:b5:d2:7a:ae:37:
3c:8f:85:e9:75:69:b5:54:86:b7:84:da:21:b3:47:
99:e0:87:db:e7:d0:a3:0a:6a:cc:0c:04:7f:d7:73:
84:e3:d6:96:35:9c:a3:d3:76:fc:2b:ca:e9:12:f6:
bd:85:cd:26:c9:20:ff:7a:c3:c6:f9:9d:65:29:06:
5b:81:a1:67:c8:eb:c5:8b:30:5d:e3:be:fd:78:bc:
9c:e5:1c:40:e8:0f:f1:dd:3a:75:f4:08:db:51:63:
7f:1f:23:5a:62:fe:90:e7:d1:f5:36:10:12:95:2d:
3b:5a:d9:de:9d:4d:cb:7a:1e:8e:78:72:11:1d:8f:
b6:9a:87:65:20:81:51:7e:b1:3d:59:66:1e:2c:e9:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:00:6F:25:56:59:C2:CE:98:20:EA:B1:C9:53:26:49:1E:4E:4F:46
X509v3 Authority Key Identifier:
keyid:65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:19:01:32:22:31:58:6b:b5:b2:ec:a6:b7:9c:a9:9e:a3:44:
c0:9b:83:ed:00:b3:93:7a:c4:5b:c2:60:69:cd:41:0f:a4:bd:
4a:6d:57:04:0e:17:00:17:6d:82:3b:89:8c:0f:53:70:98:86:
16:dc:c9:91:0b:db:91:2f:ca:27:a7:3f:89:ab:39:a9:1d:02:
93:ee:90:5c:49:c5:90:ee:eb:45:51:cb:1e:b1:63:67:ad:b5:
dd:24:37:2f:14:8d:65:08:f8:8b:d5:bd:84:08:62:fb:9b:1b:
ef:75:6d:eb:87:7c:65:22:33:a1:cb:74:13:f7:a0:28:64:c1:
a2:e3:61:d5:c3:2c:54:35:c9:60:c3:b2:57:c8:a8:dd:ba:62:
52:9b:da:2e:da:43:f4:9c:69:f1:bc:c7:1a:a3:fc:00:11:35:
e7:da:29:ca:d1:77:92:70:08:47:33:e3:f1:44:32:fb:c2:d7:
01:3f:cf:32:74:b9:1e:fa:83:f4:4c:21:e7:e9:e3:c7:cb:ae:
31:77:29:48:ff:85:0f:2a:16:25:10:66:bd:6f:20:e9:00:c9:
e2:64:a4:e8:be:dc:6b:30:0a:42:56:16:4b:c0:95:00:7f:4d:
1e:02:33:cc:cb:0a:f1:73:fe:71:41:a2:c1:79:64:8f:48:44:
f3:84:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:37:11 2026 by rpki-client