Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: A/Xs75U+y5HpKiZGv1kPnR5d3CYIkI8YMbnIBfNYO/0=
Subject key identifier: 54:41:3A:F9:CF:0D:3F:A0:78:50:75:88:59:8E:2D:3F:31:C1:26:24
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 01A0CE5B06BF841F1959271043134B27353A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 1315
Signing time: Wed 23 Sep 2026 13:01:06 +0000
Manifest this update: Wed 23 Sep 2026 13:01:06 +0000
Manifest next update: Thu 24 Sep 2026 13:01:06 +0000
Files and hashes: 1: 5GenFMQsSYDx9FcfiAXgf9Uomdw.roa (hash: 4H+3cPhJ7oDZNP6D43X5l+hl9KT5PURFIDgzFceABtg=)
2: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (hash: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: oKdGm+02c4FKLPyvHJ7p9qrgaiqKd1U7Pa8OrtT61Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5b:06:bf:84:1f:19:59:27:10:43:13:4b:27:35:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Sep 23 13:01:06 2026 GMT
Not After : Sep 24 13:01:06 2026 GMT
Subject: CN=54413af9cf0d3fa078507588598e2d3f31c12624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:5a:e3:53:eb:8e:26:62:03:38:c4:c7:9f:
09:eb:83:83:ea:44:9b:97:96:91:35:d2:43:8d:92:
3f:27:cb:dc:4d:1d:65:22:e9:d8:6a:e8:7e:00:a9:
13:20:04:fa:d2:43:14:64:6c:62:27:96:00:10:61:
27:0e:23:a7:0a:9c:34:9f:ec:2f:81:3c:1c:79:56:
e2:be:2d:c3:af:a2:2e:ee:a2:a1:cd:f6:e0:ec:04:
a2:11:42:e3:07:f8:42:e4:d7:a1:90:71:c0:6a:c7:
d4:bf:4c:95:9b:39:08:06:45:fc:d5:95:41:d8:b8:
37:81:f5:7d:32:5d:40:3d:8e:2a:ed:70:f9:1f:37:
26:b9:2f:83:18:e3:96:f5:e3:28:42:28:5f:b7:76:
d6:67:1c:c8:d9:b8:b9:6c:a4:c2:7c:88:c4:4c:fc:
95:6d:c0:90:32:79:bc:92:fb:b3:85:54:69:8c:b2:
24:ea:23:42:8c:40:01:85:e3:f8:0e:8a:4b:6c:f8:
5e:63:61:c4:04:a4:ff:83:c5:e1:b0:a5:ca:f5:86:
b8:2a:8d:bd:7b:f6:c2:03:2a:05:12:02:67:ab:ca:
5d:56:ae:8d:53:ae:ac:5c:65:b7:ff:3f:38:6c:f4:
b8:95:55:dc:c9:b5:40:8a:f2:3f:6e:7c:52:75:f9:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:3A:F9:CF:0D:3F:A0:78:50:75:88:59:8E:2D:3F:31:C1:26:24
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:97:cd:73:1c:e6:01:b7:18:92:e6:c8:84:70:b3:36:bb:0c:
5c:6d:2a:43:dd:b3:13:0f:6b:b6:23:be:cd:d9:64:6f:7c:78:
69:31:6d:d6:e6:bc:16:1f:a8:b0:79:81:3a:4c:04:d2:18:3d:
ea:c7:69:43:1c:f2:c6:4f:cf:3c:52:f8:49:1c:2e:da:55:a9:
77:2b:10:5d:7b:f8:7e:02:49:2d:c2:1a:07:6b:3f:aa:2b:7e:
db:a9:09:f8:6b:0d:e5:22:cf:ec:0a:8c:1f:ee:85:f0:5a:88:
5d:ab:9d:23:bf:65:5c:b6:30:83:36:72:c8:31:08:1d:bb:b4:
f3:ad:95:7e:18:36:3b:9a:a2:aa:53:73:30:07:50:c2:fc:d5:
90:b4:ea:a5:e6:71:6d:ee:27:80:b8:15:ee:19:31:0a:a7:ea:
3e:d0:0f:cc:0d:0d:f8:0d:7b:2d:16:4d:10:c2:9e:44:73:44:
37:98:98:ab:b1:90:2d:d9:22:88:f5:1d:45:c8:ff:91:e6:43:
ef:3b:bd:51:76:0d:a9:96:6e:70:f5:aa:a8:fb:36:cc:94:2f:
be:a7:fc:1d:cd:1d:fa:0b:44:6d:70:8b:90:31:40:c8:37:e5:
75:0f:9a:4c:ea:18:a0:0d:60:54:20:f1:6d:18:a2:7e:6b:12:
0a:3e:81:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:30:59 2026 by rpki-client