Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: OChCxNHrNI/nqgY+BJK3OM6bV9twnX7xa5YZ13nSXT4=
Subject key identifier: FD:ED:22:EA:CD:DE:3B:00:84:D9:C9:B0:36:84:D9:B1:45:4D:2E:D1
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 01A0DFF3B21F87BBB602253B062134E0F859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 0795
Signing time: Sat 26 Sep 2026 23:01:25 +0000
Manifest this update: Sat 26 Sep 2026 23:01:25 +0000
Manifest next update: Sun 27 Sep 2026 23:01:25 +0000
Files and hashes: 1: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (hash: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0=)
2: voKmqzxnpt1_Etyi16YW_6f_LiA.roa (hash: FSyRyjfIYpd8tAuhdZ0kMGNXftsQsnkKkGGZLUK2+XE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: FmU31TlH+ukETpHDYBwLNsdUGjZiqX7am77DzjNTIyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:b2:1f:87:bb:b6:02:25:3b:06:21:34:e0:f8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Sep 26 23:01:25 2026 GMT
Not After : Sep 27 23:01:25 2026 GMT
Subject: CN=fded22eacdde3b0084d9c9b03684d9b1454d2ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:80:be:d5:1e:65:3d:4c:4e:c1:48:c6:bd:
d3:72:4b:fe:3b:e5:83:4c:41:f4:60:e3:29:b1:95:
b4:04:a3:de:5b:b9:80:8e:ad:5d:33:f7:cb:19:8c:
96:6a:fa:1e:fb:cd:ed:aa:4b:e5:48:74:7a:23:bd:
7f:8d:c9:e5:31:91:4b:6f:8c:5b:06:51:76:4b:84:
d5:da:77:99:93:80:63:b3:6c:67:ab:02:0a:96:30:
09:3c:6a:2c:72:1f:60:52:1a:9b:9c:4a:20:41:22:
10:c3:cf:48:f8:57:c3:f5:fa:84:b3:86:52:60:31:
5d:bf:d7:54:b5:c9:21:5c:1e:2b:d8:82:07:bd:72:
db:ac:8b:66:53:29:bd:9b:7f:f6:e0:1b:35:6b:aa:
d7:67:3d:a8:fe:09:43:d6:db:d1:25:7f:51:61:61:
dd:dc:dc:5e:48:e1:4a:b1:bc:96:a4:1b:1f:e0:81:
f4:26:c1:ed:e5:44:14:3f:e7:88:58:f8:e7:59:f4:
48:b0:6a:8e:d4:53:32:39:04:23:83:13:e1:b4:b4:
8c:1d:ee:2d:bc:93:cf:ea:17:7a:6d:16:7b:58:ec:
39:0c:85:e6:4f:ea:dc:02:a7:a6:b4:d1:55:47:d4:
b8:7c:9d:69:9b:26:a0:1f:4f:aa:53:0e:ff:25:e1:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:ED:22:EA:CD:DE:3B:00:84:D9:C9:B0:36:84:D9:B1:45:4D:2E:D1
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c8:40:1c:8b:a7:86:97:d2:31:2e:5a:e0:d5:a2:b9:ee:bc:
e9:a0:31:fd:26:ff:73:79:c7:33:16:80:d9:3f:63:40:0b:c9:
62:a3:a1:f0:3d:ac:42:21:20:04:b1:56:a2:10:e2:a2:d5:32:
fe:16:ed:64:31:3a:80:85:02:10:f9:f0:b3:c3:f0:48:9a:50:
60:1f:db:fc:08:35:b9:e7:dd:79:38:b8:a3:c2:12:56:39:42:
79:3d:8d:6b:fb:4e:80:e9:5b:9d:2a:2a:be:4e:b1:6a:9a:a1:
4d:63:6b:37:0d:fb:4c:dc:f6:78:83:32:98:10:e6:94:17:c4:
24:6f:6f:0f:14:9e:f9:3e:de:0f:0d:e0:ce:f9:09:2a:65:76:
0c:82:e0:33:aa:5b:96:ba:06:61:d8:e5:4c:9c:28:84:fa:8f:
fc:92:5a:0b:41:fc:e9:13:2d:7d:1a:ad:b7:e8:cd:d1:cd:16:
e6:87:98:0e:62:7c:74:23:5c:38:48:ad:ab:64:3f:6c:5e:95:
16:33:86:6c:07:8d:c0:52:fb:6f:cd:bc:fb:eb:a1:4f:5c:e9:
47:27:df:98:02:c9:55:37:fe:f6:e5:eb:44:90:22:ee:6c:46:
8d:f2:c7:7c:75:64:0d:1c:78:bb:c1:d0:f1:ee:be:45:d7:f8:
f6:5f:f3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:46:23 2026 by rpki-client