Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
File: zBlkheZzlI1VUF23UQ87lXfNOts.mft (raw, json)
Hash identifier: IlmhpAyYf5quIBHZ9a28y+9dFs2V24WyRggtKgXpOGo=
Subject key identifier: 53:6D:EA:A3:29:31:BB:31:CE:27:8A:C6:3F:0B:7F:14:3C:B3:64:06
Authority key identifier: CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
Certificate issuer: /CN=cc196485e673948d55505db7510f3b9577cd3adb
Certificate serial: 01A0C40E226017F77019D437F1B41E059A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
Manifest number: 01E2
Signing time: Mon 21 Sep 2026 13:00:55 +0000
Manifest this update: Mon 21 Sep 2026 13:00:55 +0000
Manifest next update: Tue 22 Sep 2026 13:00:55 +0000
Files and hashes: 1: X2BbHndtPwpXSs2sGEdVgFLq9BU.roa (hash: emzj289yDYGpibBHeVzv0i5u6U+HSsPi/OSfpVmeMAM=)
2: zBlkheZzlI1VUF23UQ87lXfNOts.crl (hash: JZNgJU/JUmz6FQws7iToqFf3H8eo+LIddtixIKoMUQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:22:60:17:f7:70:19:d4:37:f1:b4:1e:05:9a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc196485e673948d55505db7510f3b9577cd3adb
Validity
Not Before: Sep 21 13:00:55 2026 GMT
Not After : Sep 22 13:00:55 2026 GMT
Subject: CN=536deaa32931bb31ce278ac63f0b7f143cb36406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:2b:4c:b1:a2:14:63:bd:f5:a6:e2:a5:f5:
39:95:18:33:74:15:78:94:aa:d9:96:83:76:12:06:
27:7a:e9:e9:f5:ad:76:1e:3b:94:68:55:c8:69:85:
45:7c:6a:56:d5:0f:cd:13:e7:2e:0d:62:7a:a2:ba:
b1:3e:76:96:45:09:13:27:99:4e:9b:bd:de:74:10:
8d:cb:11:53:a1:00:d1:5b:a0:fb:cd:b7:de:bd:09:
f6:86:2b:00:27:11:42:b1:80:b0:da:7c:c5:04:8d:
32:99:6c:18:0b:a2:52:37:bb:5e:d8:ea:f4:f1:8b:
57:bd:15:de:d3:c3:f5:da:2a:c8:fa:da:71:bc:e4:
10:4d:b1:1b:b2:79:90:b4:ac:f4:36:01:e7:61:98:
0a:89:2c:5d:f6:45:ec:9a:a7:53:59:d3:bc:24:a0:
f6:c8:b2:dd:cc:a4:ca:02:cc:a8:19:f0:bf:73:9e:
b5:60:6a:f8:1c:7b:84:7c:b0:8a:59:44:63:25:68:
9b:c1:2d:ff:ac:9a:0c:e4:41:6c:4f:39:59:f2:ba:
48:be:47:e2:84:c6:b6:0e:c4:cd:7e:8d:88:f7:ed:
f5:27:bd:5f:5e:49:a6:24:03:55:f4:5c:c7:5b:21:
ac:5d:86:f6:38:22:c2:63:dc:b2:98:e9:bc:32:62:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6D:EA:A3:29:31:BB:31:CE:27:8A:C6:3F:0B:7F:14:3C:B3:64:06
X509v3 Authority Key Identifier:
keyid:CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a3:8c:a8:8b:7b:77:81:54:d9:c0:14:28:85:3f:1f:15:4d:
74:2a:fd:6d:42:fa:b4:6e:9b:73:81:e0:8c:e5:67:61:58:b4:
5e:24:f3:15:2d:14:a7:32:a3:c8:d2:4b:a0:b5:b0:a2:c8:35:
6b:fb:c2:d4:a8:f7:d2:01:12:7b:e9:a1:b6:17:2b:f5:bd:4d:
11:b5:b9:72:5e:cd:e3:6e:38:ec:10:c9:e4:6d:e3:c5:0d:22:
2b:13:43:00:e1:79:f7:4a:3e:c4:7e:39:fd:58:df:b7:07:30:
91:7d:20:c4:b7:3e:56:07:c4:a7:d0:83:a6:6b:f9:0d:73:55:
0b:a5:90:29:19:07:00:c3:67:40:1b:c8:5d:a3:50:26:9b:42:
e1:02:a0:9c:0c:0f:26:c8:18:3f:6c:b0:da:80:4e:32:cb:c6:
3a:b8:02:c6:03:50:97:08:7e:6b:4b:bd:f8:a7:1d:cd:55:46:
de:e5:12:bc:89:6a:4e:74:3b:6b:ff:3d:a1:9a:22:eb:f8:a2:
49:c1:f0:d9:cb:31:ae:71:70:ef:b1:36:cd:1f:ad:70:5b:08:
a7:ee:87:67:13:31:c0:bb:a5:9f:b9:89:bc:6f:d4:c5:13:f9:
7e:40:3e:c4:a7:e9:b0:a4:18:49:78:23:23:1d:7a:81:43:aa:
5b:86:cd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:43:07 2026 by rpki-client