Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
File: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft (raw, json)
Hash identifier: 3l5yzOdbzOB1F8qPi1kyYoprX8vm3iN6gQKYKzG4stc=
Subject key identifier: 7F:73:77:AF:2E:18:8B:BE:C4:40:B1:68:68:0A:68:81:47:88:17:18
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 01A0E62D263F75EBB39F144041A45BF80C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
Manifest number: 0D6D
Signing time: Mon 28 Sep 2026 04:01:53 +0000
Manifest this update: Mon 28 Sep 2026 04:01:53 +0000
Manifest next update: Tue 29 Sep 2026 04:01:53 +0000
Files and hashes: 1: PlJpj7jP73E4zbfMxQODYMcp_7s.roa (hash: 6ejhDKH+4IAoIUxzT6kMmGZlbm0mSbrfcniUm7Rso6I=)
2: Ro5FYTNVl_lnAyMdvuGnbsPkpGI.roa (hash: Rrtw6rU9+BgwK1Mhs6SeDqlpBkER/cCVfCVvQJ88CfE=)
3: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl (hash: eQ7Jn9wpz2bFE9ytytwgOvKxlRYzetdt3DS1Viiml4I=)
4: bIeZHg3Uhc7PxzDnAJbvoR_eDis.roa (hash: 0mAuojM4+s3m+PHBAZ0OOPnrAMWk8qmOfpDqg61GYeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 04:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:2d:26:3f:75:eb:b3:9f:14:40:41:a4:5b:f8:0c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: Sep 28 04:01:53 2026 GMT
Not After : Sep 29 04:01:53 2026 GMT
Subject: CN=7f7377af2e188bbec440b168680a688147881718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:3d:d6:58:68:2c:3d:8d:2d:f4:8c:08:c5:
33:52:ad:74:82:06:c2:5c:4c:fd:a9:af:8f:11:ed:
95:e0:43:d6:8a:e9:5d:75:f0:f6:7b:dd:a8:88:7b:
ed:48:67:4b:65:74:5b:2a:60:7c:32:f1:bc:90:6c:
eb:c7:e7:8e:a9:5e:31:81:58:2e:42:f3:dc:b8:45:
19:13:2a:98:6b:fb:30:a5:f2:22:fd:a6:cc:88:1e:
03:68:d3:d8:f7:c7:2d:0d:49:78:9c:ea:19:15:32:
37:c2:b8:15:45:35:b4:29:0f:a7:ca:b5:65:87:46:
8d:b9:31:95:5a:62:0c:82:6b:48:e6:da:87:09:f0:
13:c0:d6:09:e7:83:b0:23:d9:0b:6f:e5:68:7f:7b:
47:07:79:d3:6a:5c:e2:8a:34:e1:bb:d2:de:49:a7:
3a:f8:14:b7:85:12:6b:74:f5:2f:4f:d8:c3:87:97:
20:df:0c:2f:d9:56:0e:ae:8d:42:af:56:0e:64:d2:
3a:08:45:66:3b:13:60:87:b8:de:f7:0e:97:96:61:
61:44:3c:f6:5a:82:be:f3:e8:cf:b6:6d:d9:32:d0:
9e:6c:10:4e:6a:59:9e:70:df:6f:7f:12:e8:9d:d0:
27:6c:8e:63:e0:ee:86:9e:99:5a:8e:40:40:08:95:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:73:77:AF:2E:18:8B:BE:C4:40:B1:68:68:0A:68:81:47:88:17:18
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:02:41:be:a4:f3:e2:5e:a1:57:8c:74:ac:b4:06:e2:66:05:
7c:bc:77:38:3b:b1:fc:4d:25:8f:5e:1f:a8:5c:5a:e8:fb:61:
6e:39:fd:99:5e:0f:e7:52:0a:e6:9d:7a:d4:1b:de:ee:65:f1:
71:e9:25:01:32:95:b4:9c:a0:d8:ca:d6:6d:0c:16:f2:19:3f:
8b:74:30:43:0a:fa:e6:5d:e8:07:19:0f:e6:22:75:5f:e3:d0:
d1:a6:da:06:d1:e6:d2:14:1e:c8:00:bd:38:7c:e3:a0:71:50:
f6:4c:e5:12:47:c2:50:81:fc:27:30:2a:ef:70:c8:b9:1b:cd:
a2:5f:af:9f:23:14:8c:27:be:52:55:ec:d6:c3:0a:0c:bf:e2:
08:32:b4:2e:13:1a:a2:8f:49:f7:10:f4:bd:56:73:fc:84:04:
c0:82:ad:20:3f:7f:ac:31:48:a3:9c:dd:12:b5:a6:49:2d:a2:
a5:cb:a8:0c:58:b2:0a:0e:a7:c9:b9:54:24:01:82:52:7d:24:
38:62:e6:20:72:bb:bc:03:2f:a0:49:14:5f:ef:68:6e:71:d7:
c8:4a:5f:56:df:d6:61:ec:d7:eb:2b:08:ee:97:e9:5d:30:10:
98:c4:ba:01:16:25:6c:22:95:64:9e:c5:f5:e5:75:26:36:9c:
fc:39:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:27:03 2026 by rpki-client