Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: S+fRreuSCFpZi5KuKQhIUZz9jh7dvzDSKGhI6eFj4PY=
Subject key identifier: F1:2A:5C:E8:1C:BD:F9:F0:67:BC:34:46:9C:50:64:B6:65:B5:54:A9
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 01A0D0121D953028F068316F1DA131B3227E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 0A24
Signing time: Wed 23 Sep 2026 21:00:43 +0000
Manifest this update: Wed 23 Sep 2026 21:00:43 +0000
Manifest next update: Thu 24 Sep 2026 21:00:43 +0000
Files and hashes: 1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=)
2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: /gN2O5BFkcVVOBbB6m/jp9rz2wQtFlaL2VZFUUfivyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:1d:95:30:28:f0:68:31:6f:1d:a1:31:b3:22:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Sep 23 21:00:43 2026 GMT
Not After : Sep 24 21:00:43 2026 GMT
Subject: CN=f12a5ce81cbdf9f067bc34469c5064b665b554a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:55:50:c9:8c:58:a8:4e:ee:c8:37:4c:06:
26:11:30:d7:ed:ac:cf:78:19:de:01:6c:b3:96:66:
9f:0c:c5:14:96:25:f8:cf:8a:bb:4a:82:04:d1:45:
dc:77:d4:aa:15:ef:ce:4f:0b:bb:dc:75:59:9a:ae:
38:a3:35:89:b2:27:2a:da:82:eb:32:57:e9:37:e0:
30:03:70:7a:11:26:f6:60:b1:fa:25:24:48:97:24:
07:39:7e:a0:cd:a6:8d:01:bc:21:58:69:f4:cd:f2:
2d:18:06:f9:2e:9c:7f:c0:91:e7:ac:90:99:95:b7:
50:2d:4c:25:80:d4:93:83:a4:d1:87:45:67:37:a4:
74:e1:b5:12:0b:c0:57:30:63:24:ec:f2:fd:d7:02:
2b:55:70:9c:7c:c1:ed:fd:2a:e3:b2:4e:ac:b1:8e:
f7:62:45:bf:cb:23:09:6b:b3:25:72:d1:35:3f:7b:
f4:a5:0d:02:61:c1:db:99:2b:fa:9f:7a:3b:3a:4c:
8d:81:2a:c6:35:1f:a8:91:8f:f9:f0:1e:87:c3:17:
fb:b2:fa:35:09:49:af:61:fa:41:9d:3b:17:44:e5:
04:c5:d8:9d:7c:68:82:aa:50:fb:4d:01:30:33:31:
53:50:91:1f:33:ce:5e:ac:06:2b:08:f3:84:f0:a4:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2A:5C:E8:1C:BD:F9:F0:67:BC:34:46:9C:50:64:B6:65:B5:54:A9
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4a:df:73:c4:8d:5d:8c:1a:91:85:25:56:49:d1:b1:c1:c1:
3e:6e:44:90:d2:9d:53:18:26:22:55:6b:c5:b9:0f:c5:af:dd:
28:85:2d:5f:29:35:61:49:8f:73:f8:3c:0a:95:fc:d8:88:42:
09:23:ba:9e:91:bc:05:5f:43:f0:45:4d:43:cc:fc:6f:ff:0b:
1c:b6:0c:0f:a4:20:3f:c7:4a:a4:50:d5:d0:21:c9:d7:cd:15:
4f:d6:ca:1e:43:b4:14:9c:63:62:0e:79:c5:a7:3e:5e:7f:23:
58:e4:5a:53:aa:5e:44:5d:54:8c:22:60:73:5c:3e:b5:dd:8d:
57:36:c1:af:f5:6d:3c:1d:9b:44:69:05:9f:0f:8d:9c:81:83:
93:bd:a4:4d:70:62:10:d4:1f:b5:47:02:42:1c:85:41:a5:af:
e0:9b:ff:4f:d9:bb:6e:ae:ec:ec:08:4b:c0:d6:aa:82:83:af:
a2:a9:93:4b:fd:05:72:74:3c:0d:b1:b2:7f:c8:2f:a3:05:71:
c2:c7:e4:4f:b4:a6:90:84:be:c4:58:05:13:e9:2c:a9:90:bd:
ef:f2:e6:39:f3:79:18:63:de:49:b4:34:16:42:90:c4:01:e8:
fb:b8:1a:80:fb:a7:cd:20:63:30:d9:81:41:33:d5:57:b6:6d:
af:27:e8:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEh2VMCjwaDFvHaExsyJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlY2QzOTFjNjYwYzNlNTdjNTNiODdjMGI1MmVjMGQyZjJm
NDI3NzUwHhcNMjYwOTIzMjEwMDQzWhcNMjYwOTI0MjEwMDQzWjAzMTEwLwYDVQQD
EyhmMTJhNWNlODFjYmRmOWYwNjdiYzM0NDY5YzUwNjRiNjY1YjU1NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhFVUMmMWKhO7sg3TAYmETDX7azP
eBneAWyzlmafDMUUliX4z4q7SoIE0UXcd9SqFe/OTwu73HVZmq44ozWJsicq2oLr
MlfpN+AwA3B6ESb2YLH6JSRIlyQHOX6gzaaNAbwhWGn0zfItGAb5Lpx/wJHnrJCZ
lbdQLUwlgNSTg6TRh0VnN6R04bUSC8BXMGMk7PL91wIrVXCcfMHt/Srjsk6ssY73
YkW/yyMJa7MlctE1P3v0pQ0CYcHbmSv6n3o7OkyNgSrGNR+okY/58B6Hwxf7svo1
CUmvYfpBnTsXROUExdidfGiCqlD7TQEwMzFTUJEfM85erAYrCPOE8KSupQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEqXOgcvfnwZ7w0RpxQZLZltVSpMB8GA1UdIwQY
MBaAFM7NORxmDD5XxTuHwLUuwNLy9Cd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEt
YTRkMzU5ZDkxMjUxLzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEtYTRkMzU5ZDkxMjUx
LzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACErfc8SN
XYwakYUlVknRscHBPm5EkNKdUxgmIlVrxbkPxa/dKIUtXyk1YUmPc/g8CpX82IhC
CSO6npG8BV9D8EVNQ8z8b/8LHLYMD6QgP8dKpFDV0CHJ180VT9bKHkO0FJxjYg55
xac+Xn8jWORaU6peRF1UjCJgc1w+td2NVzbBr/VtPB2bRGkFnw+NnIGDk72kTXBi
ENQftUcCQhyFQaWv4Jv/T9m7bq7s7AhLwNaqgoOvoqmTS/0FcnQ8DbGyf8gvowVx
wsfkT7SmkIS+xFgFE+ksqZC97/LmOfN5GGPeSbQ0FkKQxAHo+7gagPunzSBjMNmB
QTPVV7ZtryfoOQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:43:07 2026 by rpki-client