Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
File: ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft (raw, json)
Hash identifier: QxxxmIE1ImPU0/EDvsSQnT6Z/JWoBpwE4kLEhPYECIA=
Subject key identifier: 3C:CF:91:04:74:8E:B1:93:68:1F:04:64:F6:09:8C:D1:56:FB:F1:BA
Authority key identifier: 65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
Certificate issuer: /CN=65f852cbd1cdf244a170edac2440d0d2f4bd5319
Certificate serial: 01A0DC4E1728E566B749627C3041F9D4F875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
Manifest number: 01A4
Signing time: Sat 26 Sep 2026 06:01:40 +0000
Manifest this update: Sat 26 Sep 2026 06:01:40 +0000
Manifest next update: Sun 27 Sep 2026 06:01:40 +0000
Files and hashes: 1: ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl (hash: zXcZVgLJ8+EgPlj+9FtWTzl79SxbUW41bHF8MtVk+QE=)
2: fX47DA3aknJjMaNF3kpMk1RfVDY.roa (hash: QnbSVkKJ1tgtZD036KjNU81Gb7v/2YPgVvv50U+eDiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4e:17:28:e5:66:b7:49:62:7c:30:41:f9:d4:f8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f852cbd1cdf244a170edac2440d0d2f4bd5319
Validity
Not Before: Sep 26 06:01:40 2026 GMT
Not After : Sep 27 06:01:40 2026 GMT
Subject: CN=3ccf9104748eb193681f0464f6098cd156fbf1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:08:d2:b6:dc:cf:e9:f1:03:d4:a3:f7:f1:
37:c3:4d:53:d9:bd:47:aa:8c:f5:6f:cc:c8:22:18:
c3:33:1e:62:98:d6:61:ac:57:8f:9a:0d:2b:5c:a6:
92:f0:ae:74:e7:5c:8a:17:dc:be:a5:86:0d:cf:66:
3f:c1:5b:b7:8e:46:c8:57:1b:49:cd:be:ab:83:42:
76:ac:b5:44:03:9a:67:fc:36:2c:5b:28:6b:ee:92:
5c:ac:68:22:04:46:61:c3:04:36:8b:91:a9:a9:68:
a4:31:a0:e8:c3:da:77:94:3c:46:f1:50:cd:64:8c:
89:76:64:88:91:30:e8:72:27:2a:6f:7e:3e:5c:bb:
9d:54:c6:7f:84:af:12:c6:b4:39:30:fc:fb:a4:69:
d8:22:42:f1:41:06:67:cc:39:f9:47:e2:5f:23:f1:
5d:21:44:e6:fb:42:1d:a5:d5:a5:3e:2d:07:14:ce:
22:3e:4c:84:31:32:a7:fb:d3:33:89:96:cf:65:9d:
ab:90:65:04:eb:cc:f8:72:21:11:45:22:9a:7b:12:
4b:10:bd:59:21:a1:22:5a:f1:1a:83:b4:54:2f:28:
1e:59:68:e8:21:cb:48:c8:c9:3b:51:a3:35:be:1c:
7b:e8:ec:1b:9a:84:f0:2f:ba:a1:d9:49:10:cd:11:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CF:91:04:74:8E:B1:93:68:1F:04:64:F6:09:8C:D1:56:FB:F1:BA
X509v3 Authority Key Identifier:
keyid:65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:57:ac:2f:d7:48:c6:0d:c9:c5:2a:39:cf:97:2b:09:b0:77:
3f:9d:ce:2e:d4:d4:85:af:7a:58:6e:53:34:64:31:12:44:bc:
14:1a:d6:ad:dc:55:9b:9d:63:77:91:1c:74:24:ee:73:21:6a:
f0:c1:ba:47:3b:70:7a:be:cd:31:27:30:9f:69:0b:3c:35:7e:
88:fd:34:c5:ef:e9:b7:05:f3:26:2f:42:23:78:9b:47:67:4f:
e5:ee:f0:08:d7:b4:e1:c3:93:e6:b8:cf:d1:81:b7:e6:fd:e5:
42:e9:b8:30:23:e4:4a:2e:67:5d:6d:9c:47:c4:9e:2f:32:29:
e8:a8:68:58:a2:5a:df:4a:30:b6:c7:1f:4c:ab:66:0e:90:2e:
5c:c5:04:cd:18:2f:5d:5d:b4:7b:22:0f:88:4e:d6:9a:b6:ff:
44:1b:89:05:2c:e2:80:d7:7c:5c:89:c4:2f:14:cb:01:1f:13:
a5:94:59:30:48:e8:19:45:92:4a:17:0d:c3:ec:a2:fb:7a:7c:
23:b1:83:d4:d6:29:01:0c:d7:0e:10:e1:8c:79:13:ab:b4:70:
c2:83:51:7f:31:94:31:92:d0:e4:16:78:78:bb:06:dc:67:0b:
c5:d4:26:22:4e:8f:3b:3b:85:fd:f3:46:7f:08:b9:a4:ec:c1:
f1:c0:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:17:32 2026 by rpki-client