Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: 8QEiJoEGN59mvIPZVX9FRxjaPMg0SQimmRvAO2priN4=
Subject key identifier: B6:F9:CE:47:2E:05:95:87:E8:E2:D3:2E:E8:48:1C:01:F3:89:A5:95
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 01A0E92DB98F8D7C0EAA5ADDA31079D91C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: 032A
Signing time: Mon 28 Sep 2026 18:01:22 +0000
Manifest this update: Mon 28 Sep 2026 18:01:22 +0000
Manifest next update: Tue 29 Sep 2026 18:01:22 +0000
Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=)
2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: VYn0UcJ3ZvbbxLiKjBDfULxWfmcRJPH64J6bWUplOOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:b9:8f:8d:7c:0e:aa:5a:dd:a3:10:79:d9:1c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: Sep 28 18:01:22 2026 GMT
Not After : Sep 29 18:01:22 2026 GMT
Subject: CN=b6f9ce472e059587e8e2d32ee8481c01f389a595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:72:64:0e:8c:ce:1a:2b:97:db:1e:20:ba:
43:27:bf:20:82:09:0f:3d:de:4b:f1:70:be:f0:b4:
fa:9a:75:32:9c:76:75:28:2b:69:1c:98:ad:25:60:
a4:be:00:a3:31:1a:d0:c5:15:28:ab:f4:aa:84:c5:
67:8b:7c:55:2d:e8:93:ef:ee:04:d5:ba:7a:2b:a8:
f9:b3:02:35:c6:e8:ee:bc:26:48:26:74:d3:42:27:
3d:6e:4b:62:15:ad:79:b4:dc:61:00:29:45:ba:d2:
79:8e:9a:16:08:be:c1:9e:d8:8c:62:70:25:0d:19:
d3:f3:5b:85:6a:36:e5:5f:74:06:6e:21:45:ab:77:
fa:34:65:6a:2d:07:d5:f5:10:9c:69:d2:5b:b6:4c:
c2:bd:b6:b0:c1:d0:c2:70:4b:e2:96:21:de:0b:86:
88:56:86:25:3c:b4:b2:cb:eb:e1:e4:73:ff:7c:15:
6c:42:68:fa:a5:00:a3:cb:8a:ff:e9:ff:9b:de:b5:
77:b5:04:b4:f8:91:94:f1:9b:b3:d4:21:81:a4:bc:
03:f9:3b:ad:0d:05:6a:4c:c9:ab:9b:28:ec:ff:bf:
25:03:22:6b:b7:ca:33:85:23:9a:68:51:e8:e9:b1:
24:2c:38:df:b8:0a:fb:ce:a5:c5:81:cc:07:a4:09:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F9:CE:47:2E:05:95:87:E8:E2:D3:2E:E8:48:1C:01:F3:89:A5:95
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f3:3d:e3:5e:46:0a:6f:c1:ec:bf:ff:8a:22:ca:63:9f:0e:
39:14:e8:98:9e:3e:e8:1e:b5:88:9e:1a:86:dd:c6:cd:e2:b4:
24:ea:18:06:f6:04:b4:ca:4a:df:25:f8:a0:c6:13:15:33:21:
74:be:1b:ab:ae:b4:e0:02:8a:7a:47:7b:75:a2:94:94:b0:fd:
fa:14:ae:8d:83:ba:d6:c6:af:8c:43:d8:e2:8a:fa:98:79:82:
48:38:01:1b:60:32:b6:fe:76:7d:73:d7:69:82:9b:45:4a:42:
77:a6:9b:74:23:ac:e6:2a:2f:2b:61:d6:47:54:19:d2:ab:64:
53:67:65:6f:02:7f:5d:31:eb:04:f8:8f:25:bf:4c:cc:41:ec:
34:3e:37:6d:87:6e:9a:c6:cc:d9:22:f9:d4:91:32:a1:11:d2:
e6:79:67:c5:d0:d4:28:0d:c0:02:e0:de:fb:60:17:c1:d5:f6:
cd:99:29:ac:26:d0:2e:16:a1:9c:81:fb:0b:92:ed:f6:10:0f:
53:14:c3:87:bd:84:07:ca:87:57:dd:f5:ef:17:c6:29:9a:5e:
5b:5e:a2:de:59:78:7c:e9:a2:37:f5:e8:36:0d:1b:24:94:28:
fe:b9:13:db:2b:fb:0e:96:5f:58:3e:f1:e2:98:d2:2c:33:ce:
c8:c3:96:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:45:32 2026 by rpki-client