Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
File: Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json)
Hash identifier: u7m9oX1vTj0I5wL7ZevASgTP4c7s9Lg1b7Dwy2QBZhY=
Subject key identifier: 40:B3:B3:91:97:1A:FD:3A:CE:93:25:3F:88:9F:9F:D2:68:B0:00:A5
Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
Certificate issuer: /CN=670ec53068393d90db601ec295e42908525e10c2
Certificate serial: 01A0D2DDDB1140C356F3C4ED3AAB60A488F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
Manifest number: 1157
Signing time: Thu 24 Sep 2026 10:02:29 +0000
Manifest this update: Thu 24 Sep 2026 10:02:29 +0000
Manifest next update: Fri 25 Sep 2026 10:02:29 +0000
Files and hashes: 1: Nh6TGiZWo0EOxhMqHLoTd_RYjgw.roa (hash: jvTmWCCcSLAGtI/9GquGJ7vRIPsivGfTGeyKsvphVGk=)
2: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: NA31HZvaam1v3nctLMCuTzV/ODDKzm2LqiS34ON6SYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:dd:db:11:40:c3:56:f3:c4:ed:3a:ab:60:a4:88:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670ec53068393d90db601ec295e42908525e10c2
Validity
Not Before: Sep 24 10:02:29 2026 GMT
Not After : Sep 25 10:02:29 2026 GMT
Subject: CN=40b3b391971afd3ace93253f889f9fd268b000a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:48:33:98:50:f5:c4:12:b9:c3:61:32:99:
8c:d3:e1:91:2d:bb:28:b3:91:0c:d5:0a:a7:86:ba:
64:13:1f:e1:38:3e:d0:68:c2:6a:3c:bd:22:de:65:
2c:90:54:2d:a1:1d:8d:fb:58:9c:29:39:27:34:cd:
b7:c3:a2:cb:e4:61:92:ac:d0:35:c3:9b:39:71:0e:
fc:37:d0:80:c3:3d:2e:3e:ff:e7:fd:13:a8:83:47:
19:e9:27:8c:5f:bc:ca:65:e0:d1:db:f9:d9:73:f5:
e2:08:27:17:02:5d:64:4d:12:d3:0d:d9:9b:eb:79:
39:2a:76:bd:ca:a5:c0:e4:92:1c:ff:6f:1b:ad:bc:
9d:18:eb:5b:23:82:a9:ae:64:e2:3c:c7:c0:34:79:
9f:e2:eb:20:28:73:4e:90:4e:83:d6:e5:70:66:08:
85:e6:27:97:01:b3:a0:47:f3:03:e7:6f:cb:30:7d:
8a:7f:fc:6c:7e:6f:b8:9c:b2:e2:b8:fd:a1:31:d7:
58:91:87:bd:67:91:c9:3e:c2:99:05:97:b7:3d:89:
18:d3:9a:cb:27:0d:47:5d:52:8f:4f:46:06:87:50:
ea:a4:d7:01:5f:92:ae:4f:0e:29:64:fd:34:25:42:
3d:36:5c:83:3d:63:f0:d5:7b:d3:f6:0e:c9:9b:64:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B3:B3:91:97:1A:FD:3A:CE:93:25:3F:88:9F:9F:D2:68:B0:00:A5
X509v3 Authority Key Identifier:
keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8c:1f:8f:b2:b1:de:2f:fe:c2:38:d1:f0:c5:a8:bb:8a:15:
94:86:ef:5f:ea:1c:85:dd:33:b2:97:38:85:af:80:ca:e7:36:
38:07:b3:18:cb:bc:1a:7e:67:04:d7:45:62:da:5e:f1:cd:13:
b8:4c:33:23:b3:05:f4:78:f3:7d:da:10:37:84:11:c0:42:de:
ae:a3:3b:83:c7:9c:cd:71:54:e0:82:d4:d1:cf:94:0f:88:54:
22:45:94:c9:cb:33:d3:44:2c:84:84:78:a5:81:30:22:f6:bd:
0c:ac:3d:32:3c:b0:4a:6e:da:1d:29:56:94:d9:a8:6a:d1:12:
9d:22:0b:0e:15:b8:f4:82:66:23:88:e0:44:07:28:f6:a2:ee:
11:5b:25:2c:aa:37:b3:77:87:de:f1:aa:9f:1b:2f:b0:9e:66:
4a:44:7c:bd:30:8f:4f:d5:1d:18:96:99:a0:97:c8:c5:cb:15:
09:73:e5:c4:a0:53:eb:aa:4b:43:a7:8b:32:ab:1d:5b:eb:29:
79:c1:a2:9b:06:47:d9:86:31:26:6b:a7:6e:b1:66:ea:57:fd:
36:b0:3d:18:84:9f:1f:bf:8e:8e:5c:62:ed:ad:08:52:36:4d:
34:fb:c9:36:74:35:37:fd:b3:f9:5c:f4:a8:64:56:68:ab:e6:
62:a4:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:01:14 2026 by rpki-client