Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: ezBNvoOMBXNvPR1oCGCFgR5LbzfgquP5RzouidlPvAk=
Subject key identifier: F5:93:29:41:62:7A:16:14:18:D7:DD:A1:B3:E9:A3:51:66:33:91:3B
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 01A10248F269111AC9D1061D3FA820293D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 14A4
Signing time: Sat 03 Oct 2026 15:01:37 +0000
Manifest this update: Sat 03 Oct 2026 15:01:37 +0000
Manifest next update: Sun 04 Oct 2026 15:01:37 +0000
Files and hashes: 1: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (hash: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: LgsBhnYW1JSdmdhg6ycqAoFNqZzj5Kw4z62Hw76jC/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 15:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:f2:69:11:1a:c9:d1:06:1d:3f:a8:20:29:3d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Oct 3 15:01:37 2026 GMT
Not After : Oct 4 15:01:37 2026 GMT
Subject: CN=f5932941627a161418d7dda1b3e9a3516633913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:6d:76:35:24:5d:e0:3e:a2:01:f0:48:de:
f1:18:66:5f:cb:a8:04:9b:cd:b2:a1:fd:0b:68:84:
67:3e:97:70:a7:24:fe:87:93:93:7b:c5:8a:3c:17:
3b:fe:d1:e4:5b:33:79:a9:b2:45:e7:75:90:ea:e7:
6f:7f:d0:34:70:da:ad:12:27:a2:a9:cb:13:2d:09:
5e:a4:3f:05:37:5c:c5:c4:fa:97:47:61:c8:e2:9e:
05:76:ee:6a:f4:25:53:1c:ee:89:74:59:1b:49:76:
57:2b:fd:87:12:3e:78:2a:ee:46:fb:52:3a:89:f0:
8a:11:00:33:78:a8:f6:47:bc:5a:7b:05:2a:4b:c5:
23:c7:2c:b1:a4:3d:23:46:2b:39:9e:2a:2c:5e:b3:
08:e7:88:f1:db:b8:5b:a6:6a:c5:91:3a:3e:af:eb:
e4:3b:f3:af:b3:de:53:aa:2f:d8:8e:21:b7:ad:73:
3c:1a:87:aa:4c:ae:4f:d7:8a:4d:33:97:69:e8:16:
fc:4e:d5:12:6b:dc:66:78:05:e9:47:6e:28:42:a8:
d2:7d:77:ea:9a:bf:22:2d:89:ae:a6:87:20:dd:7b:
f4:b7:1f:07:65:ad:d6:7b:11:6d:2a:e1:00:96:aa:
ba:f8:db:7c:f3:fd:27:a9:ef:bb:1a:da:a9:c2:10:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:93:29:41:62:7A:16:14:18:D7:DD:A1:B3:E9:A3:51:66:33:91:3B
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8b:f3:05:06:d9:77:db:5b:21:b5:35:24:84:e2:7c:f4:13:
8e:90:21:f8:54:9e:f5:1a:03:1b:fe:c7:67:b3:68:84:b9:64:
b7:a8:13:87:bb:bd:d3:0c:33:b3:36:cd:bd:40:e7:79:e2:e7:
b5:36:32:3b:39:2c:b6:fe:8d:9e:62:63:ea:d6:eb:ce:6d:bf:
15:af:6b:9f:f3:4d:70:6e:4d:b5:fe:a2:23:b9:a3:23:32:09:
6a:63:b6:56:b1:2a:f8:cc:1f:e4:2b:e4:c5:4e:a1:e1:87:c3:
56:70:f9:3e:b7:f2:89:16:72:70:8c:2e:e9:07:74:de:b6:8c:
fc:d9:3a:54:2a:8e:4e:99:a8:79:42:c2:9d:06:b7:38:41:6e:
c9:fc:c5:bd:68:10:8a:e0:7b:55:c8:a3:12:bb:af:50:36:bf:
52:db:a1:ab:b3:8a:a5:9d:d1:fa:70:cd:c7:a2:76:4e:a3:a5:
bf:69:f7:7e:33:af:4e:f9:b9:26:3e:29:c0:b2:78:fe:c6:39:
51:4d:7c:ff:fa:d1:76:b7:c4:9e:8a:54:91:67:a9:91:c7:f2:
ec:c3:5a:15:48:06:e9:31:39:e3:e2:d3:fb:73:07:e6:4f:ff:
94:29:ae:b7:e9:32:28:be:7b:a0:78:3a:ed:b2:8e:01:7f:27:
7e:33:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 04:45:03 2026 by rpki-client