Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: yDLeWzldogvcMD95F6W3WLVb31xscXf/91e7+K4Z4YE=
Subject key identifier: CE:B9:B4:0E:87:4E:D3:BC:E7:0B:DE:7A:CD:C5:45:28:4E:44:4B:7C
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 01A0E062376C7B9F028DAF1CF84D61D990D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 14B4
Signing time: Sun 27 Sep 2026 01:02:08 +0000
Manifest this update: Sun 27 Sep 2026 01:02:08 +0000
Manifest next update: Mon 28 Sep 2026 01:02:08 +0000
Files and hashes: 1: SWC8q5CH8zumHrflzVp4e7i8dGY.roa (hash: z98d01QAmvPs9qVeEUxQJcsgJEzGZb8FADftU7i+UZw=)
2: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: SeKbzrhR6VOZfGH0H1Jmv3ANrI0DthrTCehOOHnzCKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:62:37:6c:7b:9f:02:8d:af:1c:f8:4d:61:d9:90:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Sep 27 01:02:08 2026 GMT
Not After : Sep 28 01:02:08 2026 GMT
Subject: CN=ceb9b40e874ed3bce70bde7acdc545284e444b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:8a:3a:82:64:29:ee:12:a1:13:82:67:50:
73:af:e5:56:e7:30:24:23:f6:6f:a4:20:15:48:ee:
82:12:4b:ce:c2:11:b6:59:6a:73:12:b7:68:1a:1c:
2d:c2:92:3b:fd:2f:6e:38:9f:f7:30:6e:0d:5f:04:
b8:ca:11:16:4c:d7:bc:04:28:db:14:0a:d0:06:49:
d6:31:9d:76:ac:33:c0:ba:04:c9:c5:27:38:f3:1a:
70:25:e2:59:8d:ae:7b:0a:3d:9a:29:2b:6d:62:90:
85:d1:51:be:ec:ea:73:e5:99:04:cd:bd:b5:99:d7:
09:69:5a:39:b4:8d:b8:70:85:ff:7f:06:14:c5:e4:
73:c3:35:da:62:c3:7f:62:ae:a7:77:b4:4f:08:ce:
ec:c9:ec:30:0d:97:d8:a6:5d:a2:1c:1a:de:6c:bc:
45:20:76:11:4b:94:9b:7b:75:a6:a4:60:ba:cb:8c:
6c:e3:d8:50:d7:09:c1:09:13:86:db:bf:27:76:d5:
da:c1:25:7d:03:26:f0:d4:14:d6:67:89:a7:32:e1:
11:99:4e:64:76:8e:75:07:62:78:7a:4c:35:f4:4a:
a9:ed:0d:4e:b3:e2:6a:80:74:30:05:3f:95:7f:97:
d8:62:50:a1:ea:95:e8:7a:6c:11:45:a1:01:e7:56:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B9:B4:0E:87:4E:D3:BC:E7:0B:DE:7A:CD:C5:45:28:4E:44:4B:7C
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7e:74:32:88:9a:31:27:c7:c9:3e:84:40:28:25:8e:82:79:
74:27:69:53:e5:e8:3c:37:29:04:66:c0:8a:0b:94:c1:76:8a:
3c:6e:e0:a1:53:d4:e8:cc:2f:94:b2:7b:65:38:f0:3f:ea:ae:
94:ae:78:2e:6e:f5:9e:b4:94:62:67:8c:cd:f8:98:db:18:d7:
ab:69:5d:f0:ad:9c:60:6d:67:35:e0:56:2b:49:80:01:43:f7:
eb:af:b4:46:e6:0a:39:08:c7:99:2f:09:96:17:5d:69:2c:6d:
17:be:97:fb:d3:b3:dd:31:c9:83:43:fb:e6:d2:d0:7b:0c:08:
9e:c8:10:69:38:d7:87:3b:2d:72:4f:ae:c8:83:2f:bd:7b:d2:
75:e9:e6:e3:cd:83:3b:f2:34:52:42:33:b6:7c:7f:67:d0:a7:
f2:c1:f6:21:ba:7a:05:36:14:6c:c4:f4:75:3a:97:dd:9b:73:
81:4c:37:d4:35:f6:17:6c:34:7e:00:da:e3:ac:96:e6:e0:f1:
76:14:4f:64:f2:dd:54:9b:0e:29:d0:73:b8:4f:02:23:d8:08:
30:21:83:a8:8d:82:8c:dc:0b:67:48:72:de:3e:db:49:da:96:
6e:d2:66:11:5c:27:53:32:cf:81:3e:f1:89:c4:a6:c6:85:d6:
8e:98:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:34:57 2026 by rpki-client