Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File: ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier: G1A7D+4i/PNYojDDbEpnenHlBwQSN/UcS9FAGfeoLlE=
Subject key identifier: A5:ED:4A:2B:23:DA:F2:CA:92:AA:08:9B:0B:F4:58:1F:0D:7B:8D:16
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial: 01A0CCD9FCB3B901BAE6F3C8048879D2671F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number: 11D3
Signing time: Wed 23 Sep 2026 06:00:33 +0000
Manifest this update: Wed 23 Sep 2026 06:00:33 +0000
Manifest next update: Thu 24 Sep 2026 06:00:33 +0000
Files and hashes: 1: 2LmzHT0ZIbdBKtvls7SHR70OMro.roa (hash: tbuaZMJ3bR1Rnp3JGF/Y5/b7H89NRs10IqAGEmMX3hw=)
2: Wd51v5bh6CVZd6bJidGHZJXb2us.asa (hash: 7OczW/y3GKch9e1XpUdfbwi9oN+4AbqKJfslhUFyQQo=)
3: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: /7WlFJHEjqQ673wRN6XVcFV9SSjH4hU51lWI3a+EOdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:fc:b3:b9:01:ba:e6:f3:c8:04:88:79:d2:67:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Validity
Not Before: Sep 23 06:00:33 2026 GMT
Not After : Sep 24 06:00:33 2026 GMT
Subject: CN=a5ed4a2b23daf2ca92aa089b0bf4581f0d7b8d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:ac:d6:47:f3:07:e4:0c:54:84:88:28:0a:
27:61:fb:73:bc:c6:49:5d:28:7e:74:d2:ec:a1:90:
1d:95:64:9c:d7:c8:e6:81:28:97:88:d7:b7:38:ef:
c0:87:60:79:83:fc:ed:28:4a:4c:23:c7:c7:62:af:
a5:47:b6:cf:b2:6a:f2:e7:2c:e5:33:ab:88:6c:a2:
73:6b:db:3d:fa:14:a1:7c:9f:af:48:6a:18:28:ac:
03:18:bf:ec:f1:f2:66:51:db:b1:a5:30:c4:41:24:
62:0b:ba:15:06:d5:ed:15:ad:47:83:9f:09:7f:bd:
a8:a4:47:fc:b4:84:1b:67:6c:f1:6f:2a:a8:86:01:
9f:b7:76:96:f9:4e:00:03:9e:98:ac:0a:77:4a:a8:
f0:52:18:bd:f7:72:6a:4c:ce:6e:f9:48:1e:bd:11:
37:45:bf:e2:e0:90:84:e8:4a:39:30:52:99:c9:f2:
c4:92:15:af:83:a9:92:6e:47:bb:49:40:8a:dc:81:
fd:2e:a2:5e:16:e5:37:b0:4d:64:08:6a:3a:17:eb:
61:6f:5a:b9:3b:25:34:a6:34:76:b1:36:a9:4e:07:
cc:8c:80:36:aa:ac:0d:28:7d:81:57:07:e9:6a:57:
7d:01:f9:cf:f2:4a:fa:84:12:1a:5c:39:8a:42:e6:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:ED:4A:2B:23:DA:F2:CA:92:AA:08:9B:0B:F4:58:1F:0D:7B:8D:16
X509v3 Authority Key Identifier:
keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:af:84:4f:dd:bd:2e:b7:16:04:4f:9d:6a:64:00:65:41:31:
f1:9f:de:3d:3e:bb:a3:40:62:4e:8b:d3:f5:ec:3d:e8:15:0a:
16:08:88:dd:76:0f:0f:1d:6f:85:47:35:e5:54:88:ad:8c:7b:
d8:91:01:38:7a:16:df:ab:a9:88:a2:c2:0d:11:c1:92:43:26:
26:a4:58:6f:bc:b2:1d:7d:a1:63:e9:5a:00:ae:d3:58:54:d4:
0e:d7:96:74:f7:08:1b:25:14:88:0b:31:10:84:3d:62:2d:b7:
43:f5:12:fa:8a:06:8a:03:6e:5e:0b:6c:c6:18:bb:e6:97:c3:
32:5c:3b:7e:da:bc:9e:42:b9:e0:a4:48:d6:e4:03:9e:11:44:
4e:11:ed:ea:cc:38:31:3d:b9:35:75:be:41:df:f3:68:ed:c5:
2b:91:d0:73:04:c8:67:ac:f8:46:f9:56:ef:1f:b0:43:8d:b3:
fd:0c:50:e7:87:a7:23:ef:b5:6a:55:62:ec:38:69:71:77:94:
f1:04:3e:1d:fa:9c:4e:58:60:ed:89:cc:92:ca:57:73:70:1a:
71:66:06:bc:1b:b8:cf:8e:90:5e:36:d5:9e:33:f1:1d:be:31:
f3:1b:40:d9:08:f0:7c:01:5b:2c:ba:76:7c:89:22:e0:2c:d8:
fd:58:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:26:12 2026 by rpki-client