Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
File: ZfaZywqf4QlubWiLmxNlstPBQIE.mft (raw, json)
Hash identifier: vNc9NBIZY8vLD4Fm787InGOL32MXj/Pmu3hAHcfH3So=
Subject key identifier: 67:54:29:9D:DE:67:1D:86:48:87:A5:53:F2:DD:57:1F:AD:D3:4D:FC
Authority key identifier: 65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
Certificate issuer: /CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Certificate serial: 01A0D07FC714F0BB76EAB92C913BA8724EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
Manifest number: BE
Signing time: Wed 23 Sep 2026 23:00:29 +0000
Manifest this update: Wed 23 Sep 2026 23:00:29 +0000
Manifest next update: Thu 24 Sep 2026 23:00:29 +0000
Files and hashes: 1: 4kefMU7_dHh0pjF04I0GNuOZzgw.asa (hash: Dg793cyO+GCKIEjFm8zI8tkDaVZ6JxafokaSOxdxvjg=)
2: ZfaZywqf4QlubWiLmxNlstPBQIE.crl (hash: B+2R4zMnW0nDfsfCL5LHibYxEerHnkE8JHfGdidH3zQ=)
3: yWQ8Y4v3PEg5DeHoWJUCs-F-6yQ.roa (hash: RGL/uaPbj1P9rnlKrXMsj0QrwOf5G6N6ob7tSgI7xu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:c7:14:f0:bb:76:ea:b9:2c:91:3b:a8:72:4e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Validity
Not Before: Sep 23 23:00:29 2026 GMT
Not After : Sep 24 23:00:29 2026 GMT
Subject: CN=6754299dde671d864887a553f2dd571fadd34dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:29:3b:34:c3:92:ac:4a:09:2d:c7:08:ce:
ca:22:4a:69:37:c7:08:fe:34:f0:71:6c:5a:c8:de:
f9:17:a9:bf:b1:8d:82:1b:95:6b:05:b7:57:15:cf:
81:a6:86:32:ab:4c:49:2c:8f:ef:69:9d:4c:04:fd:
a7:17:0d:67:7c:c1:46:8b:24:39:48:f4:c5:43:66:
6c:49:64:79:ea:07:16:c3:dd:65:f6:a4:98:1d:12:
21:43:b5:7c:f5:22:73:b3:60:d0:7c:76:82:f5:e3:
2a:d0:5d:10:5e:7f:af:68:e0:6a:1a:b3:d9:5d:eb:
0c:1b:31:19:b5:2c:22:65:0c:d8:4e:d1:88:5f:23:
cd:55:f2:b8:40:2b:64:c9:c6:92:16:e6:0c:0b:58:
05:08:0d:28:5b:dd:cc:06:2d:5c:24:c3:0e:d6:f9:
29:e8:ad:de:a3:c8:a7:9b:46:d2:3c:1d:bb:52:f8:
9c:c7:c9:c3:cd:81:fb:46:0e:a4:55:ce:69:73:2f:
bf:f2:c8:a6:47:c5:93:8a:67:52:c7:cb:ad:2e:90:
1f:ba:04:ec:e4:85:7b:4b:d8:88:7d:89:69:ed:18:
3a:8f:4e:1c:d7:0c:1b:fd:aa:b8:62:dc:2c:0c:4f:
23:e6:f9:c6:cd:ce:65:b6:9a:93:75:70:56:39:d8:
e5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:54:29:9D:DE:67:1D:86:48:87:A5:53:F2:DD:57:1F:AD:D3:4D:FC
X509v3 Authority Key Identifier:
keyid:65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:55:26:0e:c4:2e:89:e1:22:e0:5c:7c:e6:d0:51:86:43:ad:
be:d8:80:58:9c:0c:d1:17:63:4f:bb:0e:82:9c:7b:a7:aa:ad:
15:c0:e4:a1:c0:37:b3:9b:e2:13:f6:cc:3d:cd:59:ea:c6:20:
f2:fa:46:59:ec:76:13:42:09:68:5c:4b:dd:52:4c:5c:a1:46:
e2:cc:89:32:c0:d4:e0:f4:0a:5b:dc:20:3f:83:ad:0f:4a:59:
a5:59:93:11:76:d6:65:3f:ab:99:cb:bc:ba:96:15:44:9f:75:
9c:57:10:32:2d:04:c7:20:91:82:dd:db:79:6c:d8:0a:c2:15:
eb:e2:61:0c:32:64:b8:de:ef:d9:c3:52:cd:48:6b:16:91:df:
21:ce:f4:21:d6:85:8c:ad:e8:58:fd:a5:94:ca:12:2a:e9:b6:
7f:9a:a9:97:5a:fb:3c:2f:8d:e4:55:03:4e:06:f5:15:b5:b4:
04:50:fa:d6:ae:bb:76:ff:68:fc:63:46:c7:98:c6:48:1f:fa:
78:42:20:c7:ba:1d:b1:71:0c:01:ab:3e:41:c1:39:72:e2:1e:
f5:2f:4c:af:8e:86:59:62:18:93:ea:1e:19:0d:27:1c:d7:1a:
e4:83:5f:0c:38:6e:e1:33:98:81:8e:64:db:d9:46:db:b6:75:
c3:e0:05:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:49:42 2026 by rpki-client