Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
File: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json)
Hash identifier: pMNV8nCcC3ajB366hEfJrupwMiJjLnefTxQv5y5Aa8U=
Subject key identifier: 33:7B:EF:F4:45:35:44:FF:B8:8F:C5:9C:FE:F9:15:5C:79:AE:72:61
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial: 01A0CD7E867D02EE301AEE6647E3DC4AFF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
Manifest number: 1066
Signing time: Wed 23 Sep 2026 09:00:16 +0000
Manifest this update: Wed 23 Sep 2026 09:00:16 +0000
Manifest next update: Thu 24 Sep 2026 09:00:16 +0000
Files and hashes: 1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: JOAs04NdrTE4RlZkxU0XsvtUKdDQdFc0JdC3uqtsfYE=)
2: lnfrhHR0jynfR2q7TVFHy_A4Fqo.roa (hash: WwqXm5S9kqC02dQFsZ5mFoZfT2ZEKlRHGYMQ2u0hdl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:86:7d:02:ee:30:1a:ee:66:47:e3:dc:4a:ff:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
Validity
Not Before: Sep 23 09:00:16 2026 GMT
Not After : Sep 24 09:00:16 2026 GMT
Subject: CN=337beff4453544ffb88fc59cfef9155c79ae7261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:14:f8:8a:1f:49:95:3e:8e:46:e7:d2:0f:
c1:7c:5e:80:a5:09:75:fa:72:bd:d4:26:9c:22:b9:
d9:97:2d:18:83:ed:ac:a1:80:c4:3b:35:b2:98:37:
17:b6:04:9f:cf:35:e8:25:f0:e9:41:96:00:b0:a9:
f1:a6:87:dc:19:e8:e6:e0:db:ee:41:b7:18:77:ba:
5c:9c:be:65:28:ac:1f:f3:2a:19:f8:d3:80:25:21:
c0:0a:5a:ef:7d:69:5a:94:e6:28:8f:77:ba:9e:3d:
a9:d1:a5:0b:ac:d8:6d:70:f1:9c:02:9d:41:6a:ce:
90:27:10:87:97:a8:61:dc:c7:70:b6:d7:ee:f0:2a:
37:bb:79:56:6f:15:8f:aa:99:d2:cf:f4:7b:6a:ab:
b1:6f:3a:a2:58:c6:f9:32:c6:ab:16:d8:01:8a:53:
c3:f0:fb:b9:69:9e:2d:05:bb:af:a9:e3:78:4c:19:
87:1e:67:46:2a:ab:29:44:56:ee:ca:98:11:8a:4c:
cd:18:59:12:d7:1a:b4:fa:7a:11:97:5c:d5:49:33:
6b:01:98:6c:64:a7:5d:cf:5b:52:48:d9:7d:5d:16:
d9:35:4a:32:53:fd:a6:47:26:e7:2e:ed:45:b8:9e:
25:8c:36:5a:19:db:e6:81:98:93:e0:6e:e3:21:0d:
e2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7B:EF:F4:45:35:44:FF:B8:8F:C5:9C:FE:F9:15:5C:79:AE:72:61
X509v3 Authority Key Identifier:
keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:23:0b:2f:9f:09:74:ab:a7:09:04:c0:ef:aa:63:1e:da:db:
b4:81:60:bf:b1:4a:44:e2:db:b0:96:37:2f:fd:ad:4f:32:72:
6e:c4:fa:69:37:fc:69:bc:8d:bc:41:1b:1d:46:02:aa:7c:6c:
5e:9e:4b:29:98:d6:47:fc:40:0d:01:b8:9a:9b:8b:82:40:59:
03:22:9d:bc:23:1b:28:99:9b:ca:9b:b0:f9:5f:fd:d9:ed:d7:
40:43:99:a0:47:0b:a1:44:0b:5e:fc:43:cf:cd:64:ff:a9:16:
73:55:8f:23:b4:55:5b:2c:d6:0f:8b:a9:08:2c:e1:d4:96:ee:
97:42:fa:e7:cc:c0:cc:79:e8:ce:62:4e:91:97:0f:c4:66:74:
2e:56:20:e0:a4:31:7b:99:ff:20:94:01:98:3e:57:3b:95:74:
41:8f:f3:b5:43:96:99:46:5a:fc:6f:3e:74:b6:75:27:e2:2b:
d0:18:db:f6:5a:56:8b:1e:c9:7e:a9:f4:9e:a8:d1:b4:82:ab:
88:0c:78:17:be:92:74:b9:71:c0:ca:62:db:90:cc:90:d1:9e:
1c:90:9f:dd:2b:5a:a4:ba:a4:b2:f8:fe:aa:07:98:b6:38:44:
68:97:17:4e:7c:05:f5:14:2c:7b:62:5e:fd:f0:fa:c3:7b:25:
bc:e8:c0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:20:55 2026 by rpki-client