Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.mft
File: 1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.mft (raw, json)
Hash identifier: Oe5U5FxwweFeLjG7FBH3JPi/WsTVSwro0u7mgagVKts=
Subject key identifier: 0E:60:FB:F3:9E:B4:01:65:6B:32:3A:A9:D1:50:2E:46:8A:EB:3F:B9
Authority key identifier: D5:99:80:99:5B:B1:1F:B1:FF:AB:E0:C9:FA:A2:F7:66:75:24:14:D7
Certificate issuer: /CN=d59980995bb11fb1ffabe0c9faa2f766752414d7
Certificate serial: 01A0D6BA0EBEAD0095D64B65B91F0F3E841E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.mft
Manifest number: B2
Signing time: Fri 25 Sep 2026 04:01:52 +0000
Manifest this update: Fri 25 Sep 2026 04:01:52 +0000
Manifest next update: Sat 26 Sep 2026 04:01:52 +0000
Files and hashes: 1: 1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.crl (hash: vNJP83LXuL6Ffa7WLBOhtCgPP4jeQODdF79jEp4/BRs=)
2: Z-ZOiTUQ7YjrOleV4YlZJzDgCCY.roa (hash: ZM7zbsbbuuEKFxs+0/hoH2Zyr2M+8XmPDASRtn30LXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:ba:0e:be:ad:00:95:d6:4b:65:b9:1f:0f:3e:84:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59980995bb11fb1ffabe0c9faa2f766752414d7
Validity
Not Before: Sep 25 04:01:52 2026 GMT
Not After : Sep 26 04:01:52 2026 GMT
Subject: CN=0e60fbf39eb401656b323aa9d1502e468aeb3fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:db:7c:09:03:62:4d:68:a9:5d:56:61:44:
e6:52:2b:05:a4:0b:5f:bc:e4:81:fc:a9:af:f1:cb:
89:40:49:fa:a3:dc:da:cc:e5:73:cd:68:5f:58:13:
87:1d:fa:bb:f1:33:b4:bf:67:9c:1c:49:90:3d:10:
6c:85:13:61:c4:1d:4b:3c:95:74:cb:5d:db:9f:f0:
58:8a:84:79:c8:78:3d:96:0c:6e:bc:ba:c6:f2:eb:
d9:fe:b6:60:c2:3d:2a:9c:f4:d5:53:99:1c:10:59:
68:fa:a2:0a:12:2c:d9:af:6f:02:86:32:6b:8a:fd:
29:39:1a:68:82:c9:fb:59:bf:ff:62:49:4a:ca:e1:
9b:34:14:b8:ab:58:72:42:43:2d:a3:06:0d:7e:3d:
5f:19:fd:b9:67:d1:c0:8d:28:d2:e2:9c:02:c8:91:
bb:14:b9:ed:1d:18:e3:0e:ec:de:15:98:95:d7:09:
3a:bc:0e:ae:f8:56:f7:16:14:79:a7:3c:3c:27:94:
fd:64:0e:06:b9:c1:89:79:c1:45:dc:af:dc:1e:2d:
93:bf:67:23:f8:6d:7c:4d:33:85:b2:f6:a7:bc:35:
8d:bb:ed:3b:4a:ee:8a:66:e5:77:06:7c:ad:0c:88:
b0:11:de:79:04:c3:7a:9f:07:dc:f4:83:f6:94:39:
83:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:60:FB:F3:9E:B4:01:65:6B:32:3A:A9:D1:50:2E:46:8A:EB:3F:B9
X509v3 Authority Key Identifier:
keyid:D5:99:80:99:5B:B1:1F:B1:FF:AB:E0:C9:FA:A2:F7:66:75:24:14:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1c:cf:90:bb:88:8b:87:c4:7c:21:f1:63:d8:1c:25:b2:fd:
e1:de:82:36:d2:5f:7e:cb:82:f2:24:32:0c:d3:c8:d2:d2:dc:
45:3a:eb:77:e7:cf:f4:c6:60:d3:91:3f:25:f0:ea:6b:18:49:
2e:5c:38:16:f0:62:7a:31:77:c6:a7:07:47:6f:4e:60:ce:3a:
64:3f:f4:4d:93:9c:f4:5f:f7:73:a5:83:34:24:2e:cb:18:9c:
5a:a4:39:12:f0:68:40:fb:f4:1f:73:1c:2b:23:0b:e9:c7:e4:
78:be:8c:30:5b:93:21:c6:85:a5:71:7f:71:38:28:3c:16:db:
c7:dd:64:5e:1d:10:cc:18:9f:14:ac:85:fd:78:cc:6d:54:4e:
3e:e4:06:91:6e:f4:c0:4c:5a:0f:fb:a1:78:8f:bb:d3:3f:81:
03:68:83:c2:d4:57:48:17:3a:e3:69:2f:35:49:3e:39:c5:61:
c7:15:3b:1f:27:6c:3f:cb:00:f5:cf:98:d8:b3:22:d7:49:09:
15:aa:dc:e0:70:a6:0c:bc:3a:93:0a:74:26:ea:f5:f7:a2:a4:
a4:69:14:18:1a:90:2d:c0:e1:8c:fc:a1:ac:28:b9:67:b7:74:
6a:69:98:4a:26:4c:d7:33:28:0d:78:41:80:a3:da:ae:eb:9b:
be:91:30:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:04:19 2026 by rpki-client