Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier: fy3GE6w+dP9Ei4EkgDHilaBxRFVM3tERFujAMs4kZ5s=
Subject key identifier: 4F:7C:3B:5A:51:CA:2C:5F:A3:5B:C5:ED:63:BF:49:63:9D:53:2E:3F
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer: /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial: 01A1133CA6F6B5A32419CD4509421C3007FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number: 1A8F
Signing time: Tue 06 Oct 2026 22:01:44 +0000
Manifest this update: Tue 06 Oct 2026 22:01:44 +0000
Manifest next update: Wed 07 Oct 2026 22:01:44 +0000
Files and hashes: 1: dyIfoHvYEfN77rehdk6Hr_OLRAE.roa (hash: xcmHvUmEQ2Xk7WqYhP6N4oZ9W7Pc6AjsjVYgGRTZexw=)
2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: mxRyyAnQX2aL9x81QWQSWKdoLHzOuKEl0RClETzBC5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:3c:a6:f6:b5:a3:24:19:cd:45:09:42:1c:30:07:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Validity
Not Before: Oct 6 22:01:44 2026 GMT
Not After : Oct 7 22:01:44 2026 GMT
Subject: CN=4f7c3b5a51ca2c5fa35bc5ed63bf49639d532e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:95:59:81:3e:62:3f:06:47:29:83:ab:e3:
eb:fe:1e:6a:ed:62:37:b9:4f:c2:6d:0f:8e:c9:28:
d5:b0:a3:27:b0:42:c1:6b:49:3f:4a:d7:f5:ff:c4:
e0:d9:03:c5:09:65:e1:21:91:1b:b9:6d:97:39:a2:
9a:db:b7:91:e7:7a:01:27:f0:77:ba:82:4a:71:42:
bb:45:dc:9d:ab:e2:2b:92:9f:e0:79:de:cc:02:4d:
b0:4d:1d:59:a7:4f:f0:5f:30:44:6f:67:b7:66:d3:
67:27:d1:d4:a4:74:a5:8c:45:25:10:c6:33:e9:47:
f7:2d:4d:a2:34:70:60:35:d0:66:f0:71:d6:fe:0d:
a6:04:bf:a0:4f:ae:96:cf:0a:74:bc:74:98:f9:7f:
c1:d2:0a:ec:3d:02:95:55:fe:c7:30:1c:58:a1:1b:
d7:6e:84:3d:78:58:ae:28:96:7f:44:c2:97:23:8b:
b5:45:0b:fe:b0:10:00:d7:3a:08:e9:5e:8f:7c:72:
8d:e8:21:c9:99:9b:70:c2:0a:56:4b:4f:bf:96:83:
d7:55:88:7d:96:a2:1f:67:0b:94:7c:79:e0:60:0c:
3e:ac:ae:f0:02:93:f1:fd:ee:5a:1c:84:aa:3c:eb:
02:fa:d8:d9:6f:f6:8e:0c:52:45:b7:ba:ee:b4:29:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7C:3B:5A:51:CA:2C:5F:A3:5B:C5:ED:63:BF:49:63:9D:53:2E:3F
X509v3 Authority Key Identifier:
keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a5:ae:1f:e4:4b:0a:ac:cc:85:2c:99:53:8f:c8:6f:c3:d3:
26:3b:85:da:96:29:1d:d2:9f:8d:62:9a:b4:48:1a:03:d5:65:
62:22:0c:f5:02:3a:a5:c8:20:22:7f:86:98:42:51:c5:70:0c:
00:e2:df:19:44:1f:45:f7:3d:9c:38:ca:b4:d9:10:3d:99:20:
79:10:15:d0:8d:c9:d2:77:c9:10:d6:9f:f1:1d:15:19:75:d5:
55:95:5d:de:2a:9a:23:18:c1:8e:8a:2e:3b:e0:ca:99:68:e8:
1c:b4:4b:33:3c:bb:2f:41:ad:81:50:1f:eb:ce:f9:84:31:58:
3a:cc:c0:41:58:a2:83:af:5a:6d:7f:2c:9b:b3:0f:82:86:0d:
dc:45:7b:1a:c3:2f:20:48:79:fb:62:fd:27:ad:b9:96:a2:39:
e0:78:ed:d7:b0:1a:dd:cf:c4:dd:0a:89:33:16:43:e5:1d:2a:
cf:8a:27:fb:5e:17:34:03:58:db:d8:a6:80:e0:77:09:da:71:
21:9a:6d:b3:72:d8:00:35:ac:ee:6c:79:16:b0:02:b9:9d:dd:
11:80:a6:5d:d8:ba:7a:7c:c6:53:34:65:e0:79:be:a9:d9:e5:
c1:ee:e8:a5:c0:07:e1:c9:10:1a:d2:40:bf:73:d4:53:d8:d3:
fe:f0:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 03:01:05 2026 by rpki-client