
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier: QeQL8/9kBcfO1KgmMoGQGlmynNy8vIVDPt707p9zqCs=
Subject key identifier: 67:AB:17:5B:66:6E:9C:DB:F7:4C:1B:36:CD:DB:C1:AD:FF:31:0C:F4
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 01A0EDE6069C2F8EE99E8E1911F0A1369E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 16:01:10 +0000
Manifest this update: Tue 29 Sep 2026 16:01:10 +0000
Manifest next update: Wed 30 Sep 2026 16:01:10 +0000
Files and hashes: 1: 1-ar0P82ef_StXuE7zueriWBD8hE.roa (hash: u9ZMHFdbfeEonEHEjHmh9TkFg76are6Y/T2IPG1BknM=)
2: HmIJXkixJ1rahF7EYYPCTla8Klc.roa (hash: gwb50AaVi0ThYCb3TRftn7wyLBQSCU21VtQTQhMGtAM=)
3: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: 9d6kDaaR4ypdGzxOG2wvXjefT3H/zfpmjxKCt+Py5gs=)
4: g95v2zig0ZqaQU7eeusrbdTK5G0.roa (hash: cLTgf25tE2pedm+NWY4o5xvbCdWa6GTqSbkhECMQQmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:06:9c:2f:8e:e9:9e:8e:19:11:f0:a1:36:9e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Sep 29 16:01:10 2026 GMT
Not After : Sep 30 16:01:10 2026 GMT
Subject: CN=67ab175b666e9cdbf74c1b36cddbc1adff310cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:77:16:02:45:07:9f:b9:da:a1:21:e5:4c:
aa:2d:be:be:32:5d:7d:dc:df:66:50:7a:7c:be:50:
1e:39:71:fe:8d:7b:c8:01:a3:2b:5e:3c:aa:79:bc:
c3:6d:81:b4:33:a9:39:4a:05:69:93:32:9f:b2:69:
11:cd:df:83:89:0f:4c:70:ac:a4:e7:62:a9:9c:60:
b0:e7:1b:df:d4:85:39:52:25:af:9b:11:b4:b1:9b:
c2:ba:79:50:09:3a:6a:dd:d8:73:84:4b:dd:b7:52:
ca:3e:18:05:8e:ef:a1:10:86:6c:11:56:c3:a7:0b:
0a:14:4d:76:44:b8:5f:95:ce:84:f6:03:64:9a:b1:
81:85:14:ba:ce:d0:87:b4:72:94:ff:2a:71:6a:dd:
1b:b2:69:72:16:8a:86:15:f4:d8:d6:87:44:bd:ef:
2f:d6:8f:8b:b9:dd:c7:22:46:7e:0d:9f:e2:4d:79:
54:16:45:8b:b9:62:a5:3c:e8:64:77:b3:de:36:75:
c1:a8:cf:96:ed:b1:8d:00:aa:ee:c4:1d:ec:bf:0e:
c4:a2:6d:4a:e7:68:06:4d:75:da:a4:7e:cc:83:e5:
13:71:58:2a:b8:43:48:e2:4f:48:0a:0a:18:c4:6f:
de:a8:76:38:29:b5:83:5f:82:49:19:d2:63:61:bd:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AB:17:5B:66:6E:9C:DB:F7:4C:1B:36:CD:DB:C1:AD:FF:31:0C:F4
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7d:70:5f:ff:b8:56:55:1f:ee:89:47:7f:3b:01:0b:5a:06:
6c:a3:d5:82:46:31:9e:56:71:49:3b:c0:ce:2d:a8:5d:a8:99:
8f:7a:5d:6f:6a:79:c6:48:11:bb:80:b5:7e:0c:ec:1c:9e:18:
eb:64:5d:db:ef:6d:b4:f6:e5:da:83:df:bd:74:a6:cf:27:2a:
a2:3f:7b:35:57:81:c8:03:52:2f:36:06:31:83:a0:a0:17:f8:
02:63:4a:e4:eb:f1:9b:dd:db:da:89:3b:b4:b3:a9:b4:ba:92:
84:1c:ee:e4:d1:43:4f:1d:23:09:c0:5b:45:56:75:70:e8:64:
b2:61:d5:9f:00:60:70:25:9b:fb:2c:9b:80:bb:6e:90:4e:42:
f7:90:61:03:09:45:cb:fe:04:3f:11:0c:60:60:25:0d:ce:62:
8f:b9:06:68:e3:73:e7:24:09:5d:5a:39:8c:cf:22:83:f8:b7:
44:4a:b7:62:0a:33:ad:98:02:95:5d:24:ee:03:b4:65:50:ad:
9a:34:cf:91:a9:96:f7:5a:ae:28:bb:51:a8:0a:85:43:bb:20:
a6:8a:f4:85:e7:91:29:f2:3f:80:51:44:a9:e9:45:8d:92:62:
94:d0:e2:d4:2d:84:53:e8:60:e8:a8:af:a8:d6:97:8c:8e:5f:
17:49:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:18:05 2026 by rpki-client