Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
File: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft (raw, json)
Hash identifier: eDYSTpLiGmil7HU6yJbkzUm2XRZS1C0IZlXv5Cm8/6o=
Subject key identifier: 9C:60:14:3F:FB:B1:9B:5D:68:CC:9D:CF:87:B3:5A:52:F1:B7:2A:11
Authority key identifier: D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
Certificate issuer: /CN=d191557a20d3299613c702e9993e9d59c39b4708
Certificate serial: 01A1DF4C4C23D4A7D436B4301192DEFFD70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
Manifest number: 0163
Signing time: Sun 15 Nov 2026 13:01:21 +0000
Manifest this update: Sun 15 Nov 2026 13:01:21 +0000
Manifest next update: Mon 16 Nov 2026 13:01:21 +0000
Files and hashes: 1: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl (hash: /StDmUk7hR9z5tvbHWjw10sT/6Clu5siw5vWQl6KZSk=)
2: sxcdm8hMPFs7hwfFtctneyGAbtY.roa (hash: qSfMKSLLYHXoos50NdW6B+8JG0v//N7ZW2DTOD6cmAA=)
3: zKunQbH1Pi1kuPKcXi66B2kK2GE.roa (hash: IW2iL6xlGt6vOJU5K2L4rfi0KiuOBllyiIH+ctseSa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:4c:23:d4:a7:d4:36:b4:30:11:92:de:ff:d7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d191557a20d3299613c702e9993e9d59c39b4708
Validity
Not Before: Nov 15 13:01:21 2026 GMT
Not After : Nov 16 13:01:21 2026 GMT
Subject: CN=9c60143ffbb19b5d68cc9dcf87b35a52f1b72a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:aa:99:04:fd:ae:99:15:0f:04:2c:53:86:
5b:c9:c1:bf:46:99:20:21:9c:08:94:ae:7b:c1:07:
4f:a0:ae:e9:60:6b:0d:27:10:73:31:c9:a9:87:1c:
43:01:3c:e2:b5:48:e4:14:e3:bc:8e:f6:4e:fc:3d:
94:17:82:91:47:6c:a1:62:36:22:b5:ff:4f:ed:3a:
42:ba:e0:9e:57:80:2a:bb:33:28:04:21:cb:1f:a0:
b9:23:a4:ab:96:23:4a:7f:6e:50:ed:ab:e3:03:94:
d3:ca:99:31:60:d1:92:25:b2:92:fd:5a:9a:49:68:
80:ff:c1:13:f4:0c:8b:1a:0a:1a:a0:59:f5:13:48:
e3:97:df:b1:7e:c0:f1:b2:54:70:c2:cb:24:d8:14:
15:42:7b:23:77:77:47:0c:b4:88:b4:ff:84:e2:89:
66:b4:bc:4b:c4:54:42:9b:9c:1d:b6:16:47:61:8f:
43:82:15:1c:22:3e:cc:64:f8:ac:43:25:23:b9:6e:
32:55:0b:00:3e:db:13:fe:1b:88:5c:86:66:34:eb:
33:04:d8:dc:32:77:4d:10:9f:c8:06:3f:fd:db:ad:
f8:81:61:ef:a3:b6:4a:5a:a4:e8:99:3f:f2:f8:cc:
93:92:03:54:6d:58:75:0b:89:0d:4d:e9:83:68:52:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:60:14:3F:FB:B1:9B:5D:68:CC:9D:CF:87:B3:5A:52:F1:B7:2A:11
X509v3 Authority Key Identifier:
keyid:D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:41:53:8c:bd:97:9e:3e:1b:31:35:02:90:52:75:28:c3:ed:
93:3e:6b:68:09:2a:b8:29:32:da:1d:ab:13:98:66:11:fd:b6:
5a:19:70:36:78:44:97:33:c9:4e:1f:e5:41:18:e6:dc:27:d1:
bb:6d:1b:60:63:2c:67:9d:58:2d:7e:d2:b0:89:73:90:b5:6a:
e9:4f:e7:96:bf:70:91:f8:35:89:3d:1b:30:90:3d:cb:3c:7d:
42:80:5c:64:73:95:59:81:67:10:cf:1b:5f:a4:a4:31:a6:6c:
65:e3:35:3c:35:44:1d:bb:8d:ba:d1:92:35:ec:9a:b5:a3:f1:
41:bc:4c:46:52:b1:ed:f8:8c:a7:df:a2:a1:f9:2b:58:03:31:
04:9e:b4:7d:07:7c:76:c3:ca:c5:e0:29:36:68:16:45:fc:06:
4a:88:8c:02:58:76:23:ca:3d:33:8f:88:c0:36:ed:18:74:89:
20:09:8c:89:b0:ad:a2:1d:49:e0:73:01:f5:79:80:7c:1a:47:
a3:d2:bc:67:22:59:70:63:e9:1f:31:e1:aa:9b:8d:7f:5f:01:
cf:b5:8f:0a:0b:08:0b:b6:4a:db:af:d4:32:b7:02:86:17:6a:
00:b0:ec:75:ae:52:72:70:3b:88:bc:48:88:ff:6a:ab:8c:f5:
27:ca:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:21:09 2026 by rpki-client