Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
File: zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft (raw, json)
Hash identifier: ySBQa+o7HrJi2iqxvmBzZbX6o3pzRYDb97G7b8RekT8=
Subject key identifier: 39:36:02:AD:F0:0B:38:18:37:58:0B:AC:FC:01:D6:29:53:B8:B3:55
Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Certificate serial: 01A0D9174767D883BDCCC99B564536E4A56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 15:02:56 +0000
Manifest this update: Fri 25 Sep 2026 15:02:56 +0000
Manifest next update: Sat 26 Sep 2026 15:02:56 +0000
Files and hashes: 1: P2B766sld6YbwOxda85NHhDsjNc.roa (hash: Rh+n3/ugGLGil4AXCXWWDwwftkzN5fZJ5lMUe38d6gg=)
2: zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl (hash: JSgUNAoR56PiRFGiqPaO3SeIGhlIJgXsOLRyg1A8JBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:47:67:d8:83:bd:cc:c9:9b:56:45:36:e4:a5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Validity
Not Before: Sep 25 15:02:56 2026 GMT
Not After : Sep 26 15:02:56 2026 GMT
Subject: CN=393602adf00b381837580bacfc01d62953b8b355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:15:02:d2:1b:00:57:a7:31:1c:24:b4:0f:
dc:ab:08:e1:19:c4:a3:ed:45:83:b4:2b:9c:f2:a6:
c0:f1:1a:8b:a8:9e:a1:6d:55:11:d1:1b:ee:85:45:
c6:21:56:20:ea:33:91:d3:b7:c0:3b:31:ab:7a:cf:
07:5e:a5:3f:18:cb:55:cb:1a:63:9d:54:b7:4a:f6:
2b:4c:b3:90:cc:4a:61:c2:43:24:02:72:64:ec:d4:
5f:bd:b8:c1:56:a8:99:32:45:2e:cb:64:70:5c:f2:
89:d4:66:a3:50:29:6c:95:0f:5d:3e:b2:9d:3c:1b:
f5:10:21:a4:ce:1f:54:39:73:e1:5c:5f:fd:47:bf:
5f:04:8a:54:81:35:f5:92:92:e9:87:37:0e:8c:3a:
d7:f4:de:90:93:a1:a2:0b:92:07:d3:e3:45:7f:0b:
b6:8d:95:3e:d6:42:f6:ac:99:c8:61:37:cb:9b:5d:
b9:fd:2e:4b:ef:c1:90:80:31:4d:c8:e9:6e:91:7a:
10:13:01:f3:4c:96:f8:19:b5:5a:af:e4:db:74:02:
79:65:22:78:9f:09:75:88:77:28:8a:96:05:8a:ea:
6d:f1:02:1c:e4:db:0f:c8:b1:ce:e1:d1:5f:e4:a2:
0b:75:61:a8:98:e3:9f:0d:d2:df:bc:fe:aa:fc:fd:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:36:02:AD:F0:0B:38:18:37:58:0B:AC:FC:01:D6:29:53:B8:B3:55
X509v3 Authority Key Identifier:
keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ef:8e:34:fd:b3:90:b2:5b:02:76:fa:42:8d:4c:4d:5d:95:
c3:5b:9c:f9:f4:bb:79:ca:d2:d7:59:d6:95:7d:4d:05:cb:8a:
6d:c0:c1:fa:b6:41:1f:a7:77:8a:85:e5:e6:cd:09:47:d7:e8:
46:09:ff:cc:9b:b5:76:2a:36:09:1c:d9:f9:45:d0:38:10:66:
75:c5:0c:7a:db:1e:6a:ab:9d:f3:36:76:3d:ac:40:82:63:3c:
eb:04:8b:ed:79:c3:22:f2:1e:6a:e2:31:f0:ef:f5:e2:01:3b:
76:c6:44:6b:6c:81:6e:24:f8:2c:37:a5:58:3f:60:4d:71:e4:
33:9b:44:bd:98:3e:28:e3:ac:15:d6:0e:ba:eb:01:8b:10:02:
4b:e7:80:62:be:7b:0f:bc:0c:02:80:6a:33:f2:72:47:bc:f4:
1b:50:33:29:7f:5e:d2:b3:62:50:61:b6:4f:20:1e:2d:1a:e6:
88:2d:69:cd:a2:d0:85:5e:72:40:95:67:76:a5:11:a8:81:72:
21:bf:2f:43:d8:75:78:e7:a2:5d:8f:28:3d:a2:3f:f8:97:5d:
17:35:6d:a5:9d:26:33:0a:cd:e3:39:39:88:a4:09:22:50:3a:
f2:46:bf:c4:39:e6:3c:94:28:e4:d4:d8:78:23:32:54:e8:56:
79:b3:21:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:32:17 2026 by rpki-client