Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
File: zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json)
Hash identifier: wPORacqE4RrulUo5OFMR6FxW9umEg4RVOdNdnVTx0wo=
Subject key identifier: CC:7E:E1:22:05:53:AD:1E:D2:D7:80:2F:5A:0E:B7:F3:F1:E5:0F:D6
Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a
Certificate serial: 01A0DFBC9E6D326B03A036A5E4064D14717A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
Manifest number: 1A07
Signing time: Sat 26 Sep 2026 22:01:15 +0000
Manifest this update: Sat 26 Sep 2026 22:01:15 +0000
Manifest next update: Sun 27 Sep 2026 22:01:15 +0000
Files and hashes: 1: KGwwtGzR65TxQF-2vzhHlmHOTo8.roa (hash: o/WFBpe3yFcgt0UEYgNY9hSYO7UsE0F6pNNZUvTlLxk=)
2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: a/Ow2rHDqTRnuoFZ+RbuvFDcPDZjxl8rxxFduamdVCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:9e:6d:32:6b:03:a0:36:a5:e4:06:4d:14:71:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a
Validity
Not Before: Sep 26 22:01:15 2026 GMT
Not After : Sep 27 22:01:15 2026 GMT
Subject: CN=cc7ee1220553ad1ed2d7802f5a0eb7f3f1e50fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:ac:ab:fd:85:a4:50:ab:fd:0b:7b:02:33:
62:35:c0:f7:6d:59:27:de:48:5a:76:cf:5d:52:be:
53:eb:1a:09:7c:fb:21:0e:c5:7d:5d:8d:88:66:39:
91:b2:7e:6d:96:0b:29:b8:09:4c:30:c3:5d:78:17:
35:84:0b:5f:96:c6:4c:0f:bf:fb:69:0d:81:38:8b:
6d:33:d0:39:47:04:5e:a2:89:13:0b:18:cb:5a:17:
c1:1a:95:f5:33:d0:03:87:df:9f:08:a7:e1:65:6b:
d2:86:2f:4f:38:69:79:75:09:31:a6:a2:60:4a:db:
eb:d0:ca:a0:62:fa:63:a8:0c:06:81:67:ff:de:c4:
f0:3e:cd:32:f0:87:1b:6b:62:c1:b9:26:80:02:16:
af:d7:8d:54:1c:41:d8:88:be:d7:86:ab:87:06:b3:
7a:fa:c2:26:aa:08:1f:c7:72:af:7e:ff:6f:51:6c:
7c:79:0a:a0:a2:aa:84:a8:e5:52:fa:b2:1f:70:35:
e9:4c:aa:6d:fc:4c:01:90:c4:c4:65:08:46:56:d7:
15:b5:71:86:58:97:52:15:c6:c7:f0:4b:2b:44:92:
03:cd:8c:19:d6:af:74:00:eb:a3:db:da:9f:9e:38:
eb:77:f0:57:1b:66:4a:63:9b:c6:4c:96:9d:45:ca:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7E:E1:22:05:53:AD:1E:D2:D7:80:2F:5A:0E:B7:F3:F1:E5:0F:D6
X509v3 Authority Key Identifier:
keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ad:bb:10:45:e8:05:06:a4:9f:1f:e2:26:e1:d9:56:b9:98:
c2:17:b6:5f:b0:35:07:5c:a5:65:2c:9e:d9:1e:dd:9d:91:e2:
cf:df:a3:10:55:4d:4c:59:72:d8:95:dc:fa:72:db:26:34:e4:
f3:d3:97:2f:0b:ae:d6:e3:cf:f9:9b:6e:fa:63:f6:97:b7:d8:
12:01:f3:02:38:1e:2f:ea:c3:09:96:36:e3:50:4f:98:b2:93:
b4:2b:eb:05:c3:b6:b0:13:f9:d4:18:14:b3:30:7b:49:61:09:
4e:2d:5a:ed:7b:b9:6b:99:08:0b:86:97:d6:22:9c:4f:27:ec:
34:80:92:df:09:37:d4:b9:dc:c4:12:7e:ec:9b:86:00:7c:e2:
95:1e:a2:9f:ec:da:54:ce:ae:8d:d6:57:ed:a9:80:97:1f:94:
5d:dd:4e:6e:af:a4:6c:95:da:20:ba:c5:17:94:81:a2:d3:4d:
c7:d5:fa:7a:96:d5:69:56:cd:3a:11:fb:ad:d6:81:e8:ee:b3:
a2:9c:bf:be:6e:5b:b2:ae:e7:be:90:2e:23:77:cb:85:06:5f:
59:92:89:d7:f6:21:d5:9d:f4:53:3b:fe:c6:12:bd:06:09:78:
08:3b:17:1b:54:9f:f0:01:3a:ac:f5:6b:a2:a6:fd:f4:b6:fd:
e9:60:5e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:51:15 2026 by rpki-client