Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File: zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier: bFwkM67aEs5kDBOETiI+thjD2qTa3LpelXUdUl6sdxo=
Subject key identifier: 43:00:4E:1F:48:8A:DD:C5:A3:0A:E7:C4:8C:7D:6C:FB:9C:5B:E6:8B
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial: 01A0F869924FFCCDCA079C1DB4CC4F514CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number: 1A80
Signing time: Thu 01 Oct 2026 17:01:03 +0000
Manifest this update: Thu 01 Oct 2026 17:01:03 +0000
Manifest next update: Fri 02 Oct 2026 17:01:03 +0000
Files and hashes: 1: hP6LOiB-JXjzIxcAoNUeheYCC_w.roa (hash: Am0rp7j+BYvMadHXe785VdV8wLgqVi6auP8kJTGDcRE=)
2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: 8srBVME7flVs6SJznEedWRAfw94disYlBmrBU6OqtSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:69:92:4f:fc:cd:ca:07:9c:1d:b4:cc:4f:51:4c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Validity
Not Before: Oct 1 17:01:03 2026 GMT
Not After : Oct 2 17:01:03 2026 GMT
Subject: CN=43004e1f488addc5a30ae7c48c7d6cfb9c5be68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:59:f0:c1:0b:83:4f:2e:de:52:95:7e:bc:40:
77:d2:f7:0d:4a:73:70:2f:d4:e8:6b:b1:21:be:68:
fc:89:4b:0c:c9:a7:2b:f2:1c:1a:a5:f1:f5:ab:a6:
3b:40:08:cf:5b:09:07:38:76:ba:d2:62:08:b0:07:
b5:b4:f8:1c:29:32:10:2e:f5:a7:15:a8:c4:74:57:
29:14:15:68:a6:eb:f6:d4:01:93:a8:44:4f:01:90:
91:a5:4c:6d:91:78:2f:96:e1:cc:1e:77:f0:1f:48:
be:00:51:42:b3:b4:d3:8f:fc:ae:38:22:66:be:e6:
64:4b:00:59:20:8d:7e:57:41:77:ff:5a:02:83:d0:
52:c4:63:3b:82:3d:a8:49:12:51:e7:1b:1c:de:d5:
d0:e3:2a:18:05:c7:e7:b9:c8:aa:1d:30:cb:c7:2b:
3f:11:4b:00:bb:0d:07:5a:32:27:51:b6:48:e7:0b:
ed:08:1b:1b:25:19:33:00:23:8f:12:f2:1b:94:d3:
cd:f2:b6:2e:22:d8:1b:f7:81:1b:57:d3:5a:53:50:
12:30:7c:ea:b3:b6:6a:25:27:b0:31:81:f7:d8:3d:
c3:b6:0a:15:0b:f6:ef:84:36:62:6e:3f:85:be:95:
68:62:79:9d:d3:62:a1:dc:ca:72:51:65:21:73:92:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:00:4E:1F:48:8A:DD:C5:A3:0A:E7:C4:8C:7D:6C:FB:9C:5B:E6:8B
X509v3 Authority Key Identifier:
keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fb:00:da:60:fd:92:32:8c:b3:81:00:86:35:bc:f9:dc:e8:
ba:70:56:43:ba:78:55:e4:22:05:d1:f9:e1:cc:3a:1b:20:f7:
92:60:ba:a4:23:42:87:a4:c0:ad:ab:b1:38:c2:f3:b5:13:47:
b7:3b:5f:43:2d:3e:4d:e3:1f:23:12:7d:b7:3d:87:b3:21:d1:
69:b2:17:67:06:6e:eb:07:2d:12:aa:cc:4d:86:c5:b8:f7:82:
e9:a3:23:c5:9c:e9:26:2a:c3:c2:19:c2:78:55:44:84:96:e8:
6c:aa:14:14:e0:bf:f6:6f:cf:92:2c:97:c9:29:a9:e2:33:33:
a1:b1:7c:91:a0:39:ec:5d:87:56:1e:46:90:23:23:58:ea:8f:
69:f1:15:79:11:0e:75:81:b5:8c:0f:02:74:a5:09:55:8c:35:
d2:b7:42:2e:5f:0a:53:aa:2a:2d:5e:7e:79:70:65:51:d7:79:
35:04:52:af:92:91:8d:59:22:30:54:44:cd:38:16:8f:00:cf:
61:5f:e0:50:3f:e5:0d:2e:12:f3:f7:d8:c0:3e:71:0d:35:22:
c6:d0:97:23:50:04:6d:f6:91:06:c6:4a:12:41:b0:5a:a9:f1:
11:7d:dc:24:f1:61:e0:4b:59:61:49:9f:99:19:38:c3:11:55:
1c:ff:0b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 12:32:17 2026 by rpki-client