Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
File: sZPxphH_PZUKvZZlLNqgVaNR20U.mft (raw, json)
Hash identifier: mHsYNrHzWKjPnQE8OWhxJerueCck/poJgy3Qzgul0+s=
Subject key identifier: 5C:A3:80:90:89:10:0C:66:3A:48:3F:77:80:57:C1:D9:54:C8:AF:AD
Authority key identifier: B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
Certificate issuer: /CN=b193f1a611ff3d950abd96652cdaa055a351db45
Certificate serial: 01A0ED0A8D561E32F4E56F1182464BEE2165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 12:01:26 +0000
Manifest this update: Tue 29 Sep 2026 12:01:26 +0000
Manifest next update: Wed 30 Sep 2026 12:01:26 +0000
Files and hashes: 1: 0o1C4vwLrtJhxZJe2NWXXgCUrq8.roa (hash: 3Fe9Azb+RrHGaKENizsao17NNGxQe5yH/WD4Wqllrkg=)
2: sZPxphH_PZUKvZZlLNqgVaNR20U.crl (hash: iVFTWD2t18OTjVYBK7FlLJRp8NZrkt97dvdOqSbxRLw=)
3: zzpXRXiaaDaUNJgb8J2uf-9tibo.roa (hash: 6IAZNXyLJkKu4qRWV3DHkLx2sFZt0DSc2M4cQ6BsTRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0a:8d:56:1e:32:f4:e5:6f:11:82:46:4b:ee:21:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b193f1a611ff3d950abd96652cdaa055a351db45
Validity
Not Before: Sep 29 12:01:26 2026 GMT
Not After : Sep 30 12:01:26 2026 GMT
Subject: CN=5ca3809089100c663a483f778057c1d954c8afad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:58:e6:87:40:bd:39:32:c7:60:eb:4b:ef:
43:74:3e:f0:fe:ee:52:23:00:d6:a9:01:11:41:e9:
24:00:b0:a8:c7:27:73:ea:b7:46:81:b2:9e:8a:2d:
a6:fe:48:9b:a7:01:d0:e1:c6:fb:97:55:4a:ef:3e:
e7:35:1e:0f:f1:ad:07:c0:d8:6b:b5:71:be:84:26:
b9:76:b9:cb:0a:47:33:78:ec:3b:5f:9f:b2:f8:af:
de:b8:ea:4f:49:41:1b:04:ec:74:cc:df:51:0a:0f:
16:9a:44:4f:ad:68:f8:cc:b6:0d:e0:0c:9a:b9:44:
df:6b:90:92:9a:66:48:41:7c:cf:da:4b:3a:d6:f6:
8f:06:39:38:22:62:d6:e5:b1:ba:39:95:f4:2f:3f:
5f:c9:41:0f:6e:dd:53:7f:e8:03:a2:1c:31:22:73:
b7:07:38:bf:45:8d:a9:dd:d6:bd:65:7b:6c:08:44:
7f:39:79:80:cc:0c:14:72:8d:cd:43:cd:50:54:45:
a2:c4:a6:3c:bc:17:b9:27:f0:9e:5c:c6:c5:e4:f3:
27:61:91:d0:f5:07:ba:a6:fa:40:5e:5e:33:b0:15:
bd:b9:4e:52:06:75:0e:db:e8:02:df:2d:70:66:c1:
32:62:4c:06:35:1a:35:6d:e2:b9:19:69:fd:cc:64:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A3:80:90:89:10:0C:66:3A:48:3F:77:80:57:C1:D9:54:C8:AF:AD
X509v3 Authority Key Identifier:
keyid:B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:77:ab:8e:be:0e:bf:8b:81:e3:be:40:c4:d9:e4:00:15:9c:
e4:31:18:d9:29:a7:a2:5b:6b:fb:55:8b:39:aa:2a:3a:05:f3:
0e:f7:fb:04:ca:5e:f0:03:04:bf:ac:93:44:37:18:d0:5b:9b:
b4:2e:95:0f:a5:4a:db:29:f6:6f:a3:11:51:3e:2f:70:6f:3a:
7a:a8:9d:0a:c1:2f:d5:fe:62:28:0c:2a:0f:62:e4:06:1c:7c:
92:f7:00:66:44:6d:3d:9a:d3:67:ad:38:df:61:f2:29:95:f2:
44:2a:16:eb:b4:55:59:1f:19:1a:13:c3:bf:69:14:78:77:8b:
f9:84:c9:f4:2c:0b:48:93:06:e6:75:3e:e9:88:5c:cf:9b:f7:
52:1c:d6:0a:7d:b9:20:fd:7c:60:dd:1d:ee:61:0b:a8:2b:80:
44:c2:2b:be:6c:58:ec:5f:29:93:a9:cb:94:ab:29:61:0f:94:
ba:0b:d7:ac:16:68:0a:ef:77:a4:8a:49:6a:9b:dc:2a:00:55:
b8:98:b5:9e:dc:0f:92:6a:ab:d9:4f:f6:73:ae:bd:1b:21:f2:
c7:10:36:38:39:25:0b:51:b9:db:a9:dc:cf:90:e9:88:6f:d1:
38:0c:31:6b:97:3a:99:7a:c7:b0:63:6c:cb:f1:92:71:b0:56:
4e:58:93:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:37:53 2026 by rpki-client