Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File: fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier: NpzPmvX12FcWR8Bzh7sQnTxDXHwRQymAsRcLLjJM7tw=
Subject key identifier: 16:79:3D:D4:D3:9E:EF:6F:DE:13:CB:CB:36:88:F3:1D:7D:63:E1:A1
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 01A0D2DE30D060B5306458560A8651101B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number: 1196
Signing time: Thu 24 Sep 2026 10:02:51 +0000
Manifest this update: Thu 24 Sep 2026 10:02:51 +0000
Manifest next update: Fri 25 Sep 2026 10:02:51 +0000
Files and hashes: 1: Q69BGamqP9_WoNnMCdnt1bm0Zuk.asa (hash: vaww5N01JjWWsrnL1Alu05fhe0e30iMVsw9GtNm8F+s=)
2: ecJkAb9L5BLrJG4sRdndteYMNv8.roa (hash: wE2gGvfsffXq2etxDqbfTLucpqrE1NBT6xi3whuXMTQ=)
3: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: ODdtCiaVnshsHkV9pqO1uYn0hGPG1QHUpxA5PjuI5Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:30:d0:60:b5:30:64:58:56:0a:86:51:10:1b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Sep 24 10:02:51 2026 GMT
Not After : Sep 25 10:02:51 2026 GMT
Subject: CN=16793dd4d39eef6fde13cbcb3688f31d7d63e1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:65:41:38:75:a4:77:7e:dd:c5:d3:00:e8:e6:
bc:4f:cb:e6:0f:58:d2:d7:57:df:49:b2:46:ad:5a:
ce:d9:8d:3f:01:3b:c8:27:a9:ee:bd:28:b9:16:23:
dd:4d:31:5a:8a:21:e4:b9:ea:4b:64:31:e9:da:97:
70:12:13:ce:15:e4:89:dc:58:11:51:3a:08:8e:f6:
e4:49:bd:cd:be:a7:f6:53:cf:5a:46:ec:19:24:8b:
fe:c0:a7:1a:f6:d6:5a:77:72:d8:e6:87:cb:ce:7d:
f5:fa:65:7d:45:ae:a6:71:84:d9:6b:5b:29:a2:c6:
48:af:39:7c:78:64:54:23:e7:68:0b:a8:61:fd:cb:
14:f0:eb:86:ff:fc:8d:d6:24:44:dd:27:f8:72:5b:
86:05:81:86:05:ba:5e:6b:73:98:19:a2:89:56:23:
69:ff:75:d5:f4:c3:c8:78:89:1c:c2:84:58:8b:da:
1c:40:a3:6a:3f:f1:fd:d1:c8:bf:0b:b6:dd:86:9c:
cc:a6:02:72:7b:23:aa:77:c1:db:30:12:28:81:ff:
c3:41:86:9b:77:22:58:64:1f:7c:78:89:74:ba:a4:
32:67:22:22:7c:dc:1d:6f:a1:d9:e5:a5:5c:c9:56:
c4:c8:5a:22:cc:c4:07:96:30:44:80:73:4f:11:60:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:79:3D:D4:D3:9E:EF:6F:DE:13:CB:CB:36:88:F3:1D:7D:63:E1:A1
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:da:c2:08:81:3a:9f:eb:95:3b:f8:71:93:d9:87:21:d2:c5:
4b:1b:68:df:11:38:fc:84:97:2e:e0:00:27:0f:6d:d1:9e:af:
90:b8:c1:77:a8:4a:b1:dc:33:3d:07:f7:75:4e:03:68:46:4e:
a6:27:a7:d2:18:c1:b7:fa:6c:e8:00:04:df:fa:45:50:e3:64:
2a:5c:62:f7:03:ba:bd:e9:ef:65:94:56:6f:2d:63:84:c8:67:
43:e4:13:3b:51:95:de:61:a8:60:d5:e7:91:7c:df:2c:10:4a:
32:07:c4:e0:6b:cf:b7:d4:99:a5:96:6f:1f:69:08:81:b8:0c:
f6:a1:a5:6d:e8:52:13:59:7f:97:f4:51:38:98:26:37:c7:63:
67:74:b6:1c:cf:ae:24:b7:5d:a9:be:4d:aa:66:35:3b:37:3f:
5c:27:d7:de:24:2f:97:64:e8:0d:e4:b7:a1:ba:28:55:46:12:
c3:12:dc:a4:6e:fe:44:f5:0f:77:d1:0d:ca:f1:71:27:40:8a:
a1:6d:00:92:0d:d6:31:89:54:19:a6:b7:ad:47:a8:21:a1:6b:
47:87:12:bb:ec:73:a6:88:a6:d5:a7:82:c0:de:1b:e5:82:3a:
8a:e6:58:41:cd:b6:d3:7a:26:25:56:88:42:81:c7:2b:1e:f9:
27:ab:0b:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3jDQYLUwZFhWCoZREBsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOTJiNjc0NzUyNzA3NTUxMzZhOGEzY2E4MDJjYTEyYzhh
YzdlNzcwHhcNMjYwOTI0MTAwMjUxWhcNMjYwOTI1MTAwMjUxWjAzMTEwLwYDVQQD
EygxNjc5M2RkNGQzOWVlZjZmZGUxM2NiY2IzNjg4ZjMxZDdkNjNlMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWVBOHWkd37dxdMA6Oa8T8vmD1jS
11ffSbJGrVrO2Y0/ATvIJ6nuvSi5FiPdTTFaiiHkuepLZDHp2pdwEhPOFeSJ3FgR
UToIjvbkSb3Nvqf2U89aRuwZJIv+wKca9tZad3LY5ofLzn31+mV9Ra6mcYTZa1sp
osZIrzl8eGRUI+doC6hh/csU8OuG//yN1iRE3Sf4cluGBYGGBbpea3OYGaKJViNp
/3XV9MPIeIkcwoRYi9ocQKNqP/H90ci/C7bdhpzMpgJyeyOqd8HbMBIogf/DQYab
dyJYZB98eIl0uqQyZyIifNwdb6HZ5aVcyVbEyFoizMQHljBEgHNPEWDnRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZ5PdTTnu9v3hPLyzaI8x19Y+GhMB8GA1UdIwQY
MBaAFH2StnR1JwdVE2qKPKgCyhLIrH53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlpLMmRIVW5CMVVUYW9vOHFBTEtFc2lzZm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wNWU4MTQtY2FjNC00MWE4LTg3NWUt
NDEwYzY3MWU3NTc3LzEvZlpLMmRIVW5CMVVUYW9vOHFBTEtFc2lzZm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8wNWU4MTQtY2FjNC00MWE4LTg3NWUtNDEwYzY3MWU3NTc3
LzEvZlpLMmRIVW5CMVVUYW9vOHFBTEtFc2lzZm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9rCCIE6
n+uVO/hxk9mHIdLFSxto3xE4/ISXLuAAJw9t0Z6vkLjBd6hKsdwzPQf3dU4DaEZO
pien0hjBt/ps6AAE3/pFUONkKlxi9wO6venvZZRWby1jhMhnQ+QTO1GV3mGoYNXn
kXzfLBBKMgfE4GvPt9SZpZZvH2kIgbgM9qGlbehSE1l/l/RROJgmN8djZ3S2HM+u
JLddqb5NqmY1Ozc/XCfX3iQvl2ToDeS3obooVUYSwxLcpG7+RPUPd9ENyvFxJ0CK
oW0Akg3WMYlUGaa3rUeoIaFrR4cSu+xzpoim1aeCwN4b5YI6iuZYQc2203omJVaI
QoHHKx75J6sLwg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:33:55 2026 by rpki-client