Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier: DqMfH9yE0c2Shkg4hp1zhk23BRCel+d6qgBdhAY26k4=
Subject key identifier: 42:22:BF:AD:B4:C7:7A:F8:46:E5:BA:8A:73:BE:14:DF:A3:24:E1:19
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 01A0E1E1B8D8592C905B830FA8DEF9B5D3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number: 134F
Signing time: Sun 27 Sep 2026 08:01:01 +0000
Manifest this update: Sun 27 Sep 2026 08:01:01 +0000
Manifest next update: Mon 28 Sep 2026 08:01:01 +0000
Files and hashes: 1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: 1ea6CbDDZCZ3q23iDW+KJEFoyPCwfzEJ+lM1XW43LIM=)
3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e1:b8:d8:59:2c:90:5b:83:0f:a8:de:f9:b5:d3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Sep 27 08:01:01 2026 GMT
Not After : Sep 28 08:01:01 2026 GMT
Subject: CN=4222bfadb4c77af846e5ba8a73be14dfa324e119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:2f:a5:cf:77:60:7d:a6:52:aa:76:2e:d6:
2d:c7:06:e1:92:59:34:11:c3:97:90:63:20:8b:66:
e7:a4:cc:fe:1d:61:72:4f:fa:05:a7:fc:0c:fc:32:
64:23:bb:58:83:c5:bf:d5:6f:2c:1a:9f:b8:b3:dc:
66:b1:e1:33:b8:c3:3c:75:6f:19:ec:1d:2a:46:df:
6a:47:08:7b:17:92:e5:89:22:4f:0e:d0:01:a1:ad:
35:a0:89:93:bb:70:32:0a:f3:6e:03:d6:6c:c1:46:
47:f7:6c:2b:3d:bb:61:2b:54:b6:6b:7b:c7:01:1e:
cf:9f:e2:b5:74:3d:b9:75:c1:04:6d:2c:84:6c:a7:
45:a7:42:16:08:b8:3b:ea:78:21:b6:bd:eb:f8:4a:
59:ef:f7:92:9f:67:c0:f4:7d:94:dc:b3:a5:36:6b:
8a:da:3c:e8:6e:32:82:ec:6e:ff:28:ef:45:6d:fe:
82:c9:c4:92:f2:cf:31:cf:1a:6b:97:22:21:66:18:
a7:a1:23:21:73:1a:c5:ed:d2:ba:65:a2:4c:8b:f6:
c3:57:99:d4:ae:7e:88:8e:90:3b:d3:1a:42:33:4e:
6b:dd:16:1d:a0:38:8d:9a:2c:0f:d8:b5:c6:f8:7b:
65:fa:22:6f:a1:c5:3b:df:ef:c2:77:37:94:fa:bc:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:22:BF:AD:B4:C7:7A:F8:46:E5:BA:8A:73:BE:14:DF:A3:24:E1:19
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d1:3c:ba:1d:bb:50:6c:44:8b:67:87:12:dc:d1:fd:b0:48:
16:88:66:56:e4:34:68:9d:08:1a:03:57:82:fc:d0:c3:d6:19:
c2:70:39:0e:03:1d:73:dd:6a:45:16:85:71:e8:0a:83:d4:28:
26:7c:af:99:1b:e7:8f:65:21:56:5e:88:8c:c5:97:cd:90:d8:
32:20:46:f4:07:af:9a:78:fb:90:3f:7e:13:22:c9:df:4f:e3:
f7:8a:07:5b:24:17:34:c5:b0:22:bf:2f:34:ac:11:e4:5b:bd:
43:86:1f:dc:fa:05:4c:49:66:f0:ee:2a:ff:72:24:28:97:fe:
8c:ef:e2:05:a6:2c:71:39:25:f2:a0:ff:b9:73:54:29:23:ca:
52:9b:65:e0:4d:30:6a:c4:65:c9:1a:07:6e:94:97:60:f7:c1:
91:28:b3:62:5b:78:d8:01:0d:1e:11:11:30:0e:7d:65:de:94:
d6:33:b7:0b:e9:e0:31:12:44:a9:bf:d8:5e:3f:b8:05:9d:43:
69:5e:16:ce:f3:74:39:2e:fd:cd:bc:ed:3b:b1:3d:fa:a3:c0:
1c:6a:1e:5a:37:9a:56:24:5a:95:ca:2a:62:d4:35:0d:e3:bd:
5c:dd:1d:3a:c0:fa:6f:3c:14:71:90:a3:78:f8:5d:cf:d1:a8:
f0:ad:56:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:16:32 2026 by rpki-client