Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
File: ZRHOXi9Tt7uMrI854pTomkWyACk.mft (raw, json)
Hash identifier: mvJlINc3LQOFm+dvqicrvjNBBOEtVxpem1RrVtiiq0I=
Subject key identifier: 42:2F:FA:82:FB:72:2E:8A:3B:77:39:2B:97:E9:36:38:2C:EA:E5:60
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial: 01A0DD6099B963B579A7ACCB06C02E7B5989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 11:01:30 +0000
Manifest this update: Sat 26 Sep 2026 11:01:30 +0000
Manifest next update: Sun 27 Sep 2026 11:01:30 +0000
Files and hashes: 1: 7a3jx1e7OA1EvpScFrXmNMe5y_M.roa (hash: tYNpUtLbZOwbXL/8gGlkXA0JhxkITkZz7z+FpesOG/s=)
2: LO7eXF6OcCBWRqiHSI58WfsNfTc.roa (hash: kS9qCezSVg1pWa1B2LuRlgPBMoX60MqXPWVZsOzHZq8=)
3: ZRHOXi9Tt7uMrI854pTomkWyACk.crl (hash: ffzEKUJ5CP0S9SGcPlrSfphrmC1blqWnUziJ3xZTxXw=)
4: osWiuCxFKK7p5wtHqJimdeaWv-0.roa (hash: uNL2gHPQqgqmPM9/9Y5/YfTqQyz7bRjGXXYyc1z5tGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:99:b9:63:b5:79:a7:ac:cb:06:c0:2e:7b:59:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Validity
Not Before: Sep 26 11:01:30 2026 GMT
Not After : Sep 27 11:01:30 2026 GMT
Subject: CN=422ffa82fb722e8a3b77392b97e936382ceae560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:1a:7b:cb:5e:84:f8:bf:48:48:0e:57:23:
60:89:8d:ab:74:aa:30:96:c9:d0:6e:39:5c:1d:00:
3d:5b:1e:d6:ce:63:75:fa:93:88:37:7c:a5:f7:0f:
2f:83:37:cb:85:3f:2a:68:7f:68:27:77:a5:6f:2c:
12:a2:5a:85:7e:4d:61:ac:e6:72:9c:82:41:75:95:
a9:64:5f:4c:ac:6e:a8:34:ce:d1:4e:a0:8b:d2:b8:
8d:07:5b:0c:60:9e:bf:54:fa:bf:ec:cb:38:37:a1:
42:57:5e:14:12:4a:6e:dd:ec:58:ae:eb:d2:81:22:
52:d9:6b:a9:d6:1d:29:e5:6c:38:9b:8f:1b:e6:60:
96:b3:21:fc:02:39:86:91:3d:57:78:7d:1f:9c:55:
f4:29:cf:27:c2:6d:a1:43:14:3c:48:ca:c1:ca:bb:
06:71:e0:2a:f1:20:09:9a:25:c3:57:53:1d:ea:ba:
75:0f:34:ab:7e:11:20:f6:17:8f:e8:46:86:78:1a:
99:a2:23:9c:de:45:13:c5:87:07:e1:e8:3f:8c:6f:
22:19:11:52:1c:68:0b:ae:b9:e2:50:4d:7a:9e:9b:
59:01:60:51:02:f4:c8:1e:39:1d:cf:43:f6:62:48:
11:a1:ff:c5:f3:4a:8b:53:ef:fb:2e:4a:7e:80:6a:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:FA:82:FB:72:2E:8A:3B:77:39:2B:97:E9:36:38:2C:EA:E5:60
X509v3 Authority Key Identifier:
keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:52:1b:f4:b4:41:c6:b3:1f:1d:9c:64:d0:15:a5:45:67:6a:
7a:61:77:ee:04:da:26:b9:c1:58:4c:2a:03:3a:ef:b7:58:49:
1e:4d:4a:aa:b4:ef:7a:c7:df:95:75:b3:ab:5b:05:d3:5e:19:
cb:eb:9c:d5:4d:8b:f4:ba:02:7e:e6:29:ea:69:16:2c:2f:20:
62:3d:aa:19:15:f4:02:a4:b0:e7:29:2f:90:1f:bf:a5:f7:26:
c1:67:31:51:cc:3c:14:51:b4:2d:07:94:ff:b8:bb:ac:4a:b6:
09:f4:92:84:12:77:4a:d6:ff:8f:42:79:b5:dd:56:7c:48:07:
63:4f:56:e1:d3:08:4c:9b:ad:2e:66:09:e5:af:a9:3b:8e:35:
4c:84:dc:f2:23:1c:d7:64:a5:48:4b:e9:e7:de:58:96:c7:a8:
bb:6a:30:49:39:97:2a:ac:bf:4c:b1:dd:c1:1a:73:36:11:c2:
87:08:55:20:3b:5a:ad:eb:b7:33:30:46:fa:9f:07:6c:05:08:
fe:4a:f0:e5:00:90:6d:1e:c7:1d:5f:f5:2f:d9:21:a8:6b:f2:
02:05:88:46:f5:77:15:12:0f:a6:d0:9d:60:df:37:92:a5:38:
71:52:e8:5b:78:c5:0e:90:1f:e7:b6:5a:7f:22:24:4c:6f:d4:
84:bc:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:16:13 2026 by rpki-client