Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: 4M/kEMusbKJTAdTuqyHn1x9e7X+xuOh/+FNIowxQA94=
Subject key identifier: A0:5A:7C:56:EC:81:3B:E8:D0:62:AA:17:93:92:EC:0C:93:4A:5A:81
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 01A0D49445F8B10F9F897F238DC16BC712EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 0681
Signing time: Thu 24 Sep 2026 18:01:21 +0000
Manifest this update: Thu 24 Sep 2026 18:01:21 +0000
Manifest next update: Fri 25 Sep 2026 18:01:21 +0000
Files and hashes: 1: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (hash: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: D+DJY42mhPPuz4nTUdG8Sy3Uc9Tf3bfTNyZzrL3FPIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:45:f8:b1:0f:9f:89:7f:23:8d:c1:6b:c7:12:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Sep 24 18:01:21 2026 GMT
Not After : Sep 25 18:01:21 2026 GMT
Subject: CN=a05a7c56ec813be8d062aa179392ec0c934a5a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:29:02:c6:1e:b4:d6:e5:4b:8a:0f:e3:d4:
51:d2:fc:37:77:1e:46:c2:48:4c:4d:b2:15:54:b5:
68:78:0e:9e:e7:03:a5:c7:b2:ec:60:ea:f9:9e:21:
e5:81:8f:f0:43:bc:22:a7:44:7a:19:b2:ff:db:b2:
09:10:f9:20:b0:f2:c9:c8:36:44:83:0a:5e:89:17:
4a:5e:8a:c3:c0:fb:b5:56:ad:85:52:92:1a:33:22:
2c:7d:16:ea:ba:30:3f:3d:4a:33:a5:ed:16:a4:f9:
08:49:d9:c4:9a:24:9f:f3:0a:b2:9d:16:9b:ad:a5:
ac:af:c7:5d:2c:06:26:bf:c9:98:a8:e4:05:61:23:
4e:8c:44:08:b1:f5:ac:e0:ea:84:01:b4:ef:d6:ea:
b9:53:70:6e:1a:f3:5c:38:cd:ba:a9:0c:89:8c:a9:
94:34:39:ae:51:2d:c9:39:e3:75:2a:b3:7c:21:e0:
03:a6:fd:e1:28:fe:d8:80:94:67:13:13:bb:aa:13:
f6:1a:2b:76:63:61:bf:f6:4c:39:c1:f8:31:75:95:
85:0a:16:ec:b6:3d:27:bc:2a:96:cd:49:0e:12:61:
fa:49:1f:68:1b:c6:89:74:7b:fd:34:b1:36:0e:f3:
ef:68:21:56:89:90:1f:cc:63:c8:3c:84:d5:a2:98:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5A:7C:56:EC:81:3B:E8:D0:62:AA:17:93:92:EC:0C:93:4A:5A:81
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d0:eb:48:6b:35:7b:66:14:43:21:4a:ca:55:5d:40:8b:b5:
c8:5d:01:62:8b:6d:f3:c2:99:ac:a6:3c:ee:fe:c5:7b:a5:ec:
69:94:0b:e6:f8:81:fa:ba:37:0e:73:c9:01:12:ca:c8:3e:1a:
eb:51:a8:f4:6b:27:0c:60:fe:4b:f6:e9:ac:5e:fa:0a:3d:51:
74:46:29:81:31:6b:60:d5:b7:ff:0b:18:65:df:59:6b:e2:b0:
ac:4f:c7:6e:b5:4f:25:a2:c9:b6:c4:52:93:b3:ba:f7:f3:3f:
a9:5c:bc:17:18:17:98:9d:57:60:f2:25:ff:0e:33:14:e9:81:
63:15:12:76:0a:af:cc:88:fa:0b:a1:ef:f9:a7:62:a0:a3:d3:
77:3f:0b:2f:0f:79:8b:fd:81:0e:7e:dd:d4:46:97:f1:09:0b:
09:8e:fa:4f:c0:bc:7e:31:32:91:93:08:57:53:08:08:ba:58:
b2:aa:73:65:c7:1c:58:36:f8:30:02:e5:25:36:6a:ab:4e:e4:
fe:3b:ac:9f:a5:56:a3:c0:5e:db:9f:85:bd:bf:1f:d7:70:d8:
71:d2:df:c0:f3:b8:76:b9:57:a9:23:d2:37:f5:7f:39:bf:17:
98:53:d6:e0:9d:32:b9:77:39:4c:06:bf:0d:24:15:42:6b:df:
41:52:30:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:47:45 2026 by rpki-client