Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: WCuVpNwONZLLKgKvlAHo/rDlyTXMtSVNt3hfiRVcBHU=
Subject key identifier: 7E:11:C6:E0:1C:CE:1F:33:33:0B:A2:84:18:E2:EC:12:AD:55:ED:FB
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 01A1E05F1F1EDA92C2D2553C544164B205C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 0A95
Signing time: Sun 15 Nov 2026 18:01:32 +0000
Manifest this update: Sun 15 Nov 2026 18:01:32 +0000
Manifest next update: Mon 16 Nov 2026 18:01:32 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: IAnS6bEzch3TIofLALz1ygB0iyo.roa (hash: lyXUvYyQfJt4aH/SJqViQQv03gKvKKB5vsWtq0xG3Ro=)
3: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: 1KhRDvsD7IKGjJzyBdEChXSQTMtVxmJPsSJKSQOfewE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:1f:1e:da:92:c2:d2:55:3c:54:41:64:b2:05:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Nov 15 18:01:32 2026 GMT
Not After : Nov 16 18:01:32 2026 GMT
Subject: CN=7e11c6e01cce1f33330ba28418e2ec12ad55edfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3c:92:96:0c:73:b8:a4:4f:8c:2c:07:b9:00:
36:31:02:90:fe:41:44:20:1e:a6:7a:5c:35:ec:d7:
d8:28:8c:4d:a1:97:1c:ac:b9:d3:e9:d0:90:99:08:
e0:85:e7:c1:1f:97:d6:01:69:9e:5a:1f:de:2f:85:
fd:a3:f4:0b:47:58:9f:dc:83:c0:82:9d:8c:f6:88:
f7:2f:b6:fb:51:2f:21:37:5b:7a:05:5f:47:7d:07:
dd:37:fe:f7:c3:3e:72:a4:c1:22:d9:9b:c8:11:e7:
15:44:8f:8f:f9:7f:42:d2:64:ca:ca:42:c0:3d:be:
02:23:16:c5:2a:e0:a5:cc:ed:63:9e:d2:5d:5b:84:
93:59:1f:2f:40:13:31:99:c4:bb:3f:38:97:96:36:
1b:e7:d7:0c:c6:6e:ec:b7:c1:9b:4a:97:b7:2d:5a:
2d:12:53:c2:f0:37:30:af:11:d9:45:f7:cc:a4:7a:
83:ea:95:63:25:29:75:90:e5:5e:d0:df:84:4b:28:
8e:f6:f2:cd:2a:f0:f0:b8:b2:e8:00:72:61:46:e9:
81:40:c8:d9:2d:fb:8e:e6:9c:99:54:fe:87:71:48:
46:b9:1d:30:3a:fa:21:ef:f2:71:43:43:39:28:0a:
2e:85:9c:fe:14:31:9d:ee:09:93:29:06:e4:3e:5e:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:11:C6:E0:1C:CE:1F:33:33:0B:A2:84:18:E2:EC:12:AD:55:ED:FB
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fd:3f:79:f2:d6:fa:be:7f:3c:18:0f:b5:81:84:6e:57:36:
bb:14:46:e3:fc:f9:6f:18:c0:bf:cd:2a:88:7c:86:dd:59:76:
b5:09:1f:fb:7d:28:69:bd:77:f9:0e:80:f7:34:31:d8:ef:e0:
4e:12:fa:1d:fb:dc:1d:50:c6:ce:5b:51:1c:75:53:38:65:0a:
5b:9e:12:1f:ed:7e:d2:db:46:24:1e:f7:8d:f3:4a:ca:c6:02:
f7:dc:2b:a5:87:3d:ae:a5:f5:2c:5e:ce:0b:b1:d6:dd:73:50:
2d:38:8a:e7:cd:f2:53:08:7a:a4:b9:2e:b6:8f:f8:a1:87:4b:
e4:94:61:37:21:6c:6c:d0:a1:00:b7:8f:f9:56:44:35:69:44:
29:9f:50:cd:87:a8:b2:d1:55:1e:de:eb:5e:17:71:2a:ab:53:
ae:45:58:6e:d9:15:48:91:eb:e1:7a:29:9d:c4:5f:6e:f8:f6:
94:b0:0d:43:d4:ea:a0:1f:09:68:af:70:7b:c0:bb:cf:bf:a1:
da:b8:69:de:0c:70:1e:06:2f:8e:fe:85:33:da:bf:87:45:4a:
cf:17:d7:4b:ba:68:08:22:c9:77:71:10:c0:ea:34:44:2c:5c:
4b:eb:a6:ff:ea:ae:27:26:39:7e:18:85:b3:e4:b9:91:9e:23:
5d:52:c0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:08:52 2026 by rpki-client