Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier: dO8TQAlsEf9EBPDw6fp2qej7LjGhfYJrlmn9y+wGIOk=
Subject key identifier: 7D:9A:E6:53:81:2C:64:11:AB:2C:3A:FB:61:43:BA:88:87:92:E6:FC
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 01A0EA091F6572C557CED6530AC917A66F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number: 17B9
Signing time: Mon 28 Sep 2026 22:01:01 +0000
Manifest this update: Mon 28 Sep 2026 22:01:01 +0000
Manifest next update: Tue 29 Sep 2026 22:01:01 +0000
Files and hashes: 1: pz_LxxSTUEK41xRGO49WFkaPamo.roa (hash: Po2+r5cJxr4nJHVT6kaSPbOqY0n14cmEkFelVzBg4ko=)
2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: 7vbteIoZhe4Kt9WcDGRFe3PpBHXSHrVSad88QBCL3BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:1f:65:72:c5:57:ce:d6:53:0a:c9:17:a6:6f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Sep 28 22:01:01 2026 GMT
Not After : Sep 29 22:01:01 2026 GMT
Subject: CN=7d9ae653812c6411ab2c3afb6143ba888792e6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ea:22:f5:62:eb:1a:8b:ca:9d:1c:88:29:dc:
c9:39:b2:2a:c1:9e:ec:d3:48:ee:34:e1:3e:9a:3c:
89:94:bf:bd:5f:52:a8:63:bd:4e:25:ae:d3:4d:52:
6c:0f:bb:c3:0e:fe:90:f8:7e:10:02:ea:7c:53:85:
c1:5c:77:5f:04:ac:6b:14:ce:e2:98:80:28:7b:57:
a1:d1:13:61:db:96:c6:45:20:35:13:45:b4:da:1a:
c2:47:74:d7:f6:80:e7:72:2f:a0:52:bb:e0:6f:8f:
72:3f:00:ec:bd:be:cb:7b:98:5e:fa:b5:b9:8c:bd:
39:18:8f:be:6c:77:a7:ef:ee:fd:ad:97:0a:79:4d:
fd:b4:54:f1:58:3f:1e:96:c3:64:76:8d:47:91:61:
cf:d3:47:42:21:94:59:a4:92:32:d6:a1:ca:e3:2b:
30:66:75:0b:af:f5:ab:4c:fc:bb:8d:95:72:c5:83:
42:8d:35:5f:80:e3:51:4c:9c:9f:e2:ff:79:b7:7b:
91:14:2c:3c:b4:5f:be:76:67:d7:80:56:d1:cd:b3:
a6:67:64:d5:07:45:7d:5d:02:bf:b5:dc:b1:10:3d:
08:cb:e0:a4:31:66:aa:9d:e2:8e:76:19:4b:1c:86:
bd:c0:64:b0:8d:f1:ec:21:03:a6:c8:87:78:c3:73:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9A:E6:53:81:2C:64:11:AB:2C:3A:FB:61:43:BA:88:87:92:E6:FC
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:09:e6:81:64:7c:09:82:58:dd:a0:f1:6e:a4:99:f0:30:6a:
5c:81:66:a3:95:88:6d:d9:4b:7c:0d:f8:ce:dd:63:40:f2:be:
04:1a:98:ce:41:1d:6a:21:7e:82:d1:1a:84:ba:a3:a5:e9:8a:
07:04:60:e7:54:e1:cb:24:64:57:65:ba:f2:38:14:17:83:58:
49:dc:d1:28:c8:8a:a3:f9:f5:bb:ca:ef:6c:38:62:08:e5:f3:
30:e2:82:f2:b0:4d:c2:17:5d:42:bc:64:b1:a1:23:fc:f3:86:
f5:c7:e2:04:c0:a9:41:23:2a:2d:37:27:ee:9a:e1:db:1a:d3:
39:0c:1b:90:08:fc:b6:2c:25:51:d0:d5:1f:c0:e0:f0:85:ea:
d3:96:06:e2:03:28:d7:87:45:39:89:ef:77:f8:e1:0e:6a:67:
8a:8c:a0:6e:75:95:44:5e:a2:2c:dd:ed:17:20:ec:2f:c0:ea:
3f:26:01:01:38:78:e6:cf:20:2f:1f:0c:9b:4b:50:51:c3:8f:
1d:ae:16:ad:ce:fa:bf:69:78:6c:1b:5f:68:0b:67:41:77:8e:
df:95:05:3c:55:b9:1f:3b:8f:59:63:47:95:c0:3a:40:fc:a2:
b6:5a:65:b4:66:d4:73:35:77:3f:36:9d:90:d0:9d:80:d2:f5:
21:4a:cc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:13:51 2026 by rpki-client