Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier: 1t6k7QqO2IEZ90+hf0yopl2wvw5v6BcED/LPK8Y90wM=
Subject key identifier: 2C:AB:2D:AB:D6:99:2B:0C:70:0E:00:BE:09:27:7C:44:2B:D4:BE:2F
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 01A0DB3BA769FD272AA82E8443F633FB7F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 01:01:54 +0000
Manifest this update: Sat 26 Sep 2026 01:01:54 +0000
Manifest next update: Sun 27 Sep 2026 01:01:54 +0000
Files and hashes: 1: RsnrJKwmL8cQaNh398zcQEeUvVY.roa (hash: LNyFYXYZiYI7HKKoks5EZWi0DK28Q+wkZrR9sNh6HOA=)
2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: uQHByrpMJ7Od9SIfyTeRnZTkGdbo1LwjquAW1Ma/34w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:a7:69:fd:27:2a:a8:2e:84:43:f6:33:fb:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Sep 26 01:01:54 2026 GMT
Not After : Sep 27 01:01:54 2026 GMT
Subject: CN=2cab2dabd6992b0c700e00be09277c442bd4be2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bd:59:90:2a:ec:27:e0:26:ab:80:0f:ab:58:
1d:55:0a:b9:41:e1:7f:7a:16:21:65:a0:b3:04:9d:
0f:47:ae:a8:6c:c7:16:68:c3:75:01:6c:b1:38:76:
8f:12:d3:be:d9:55:6b:66:0c:1b:02:50:a6:48:6a:
fd:ea:d9:ab:66:36:5e:fe:16:16:08:aa:68:38:d3:
95:ab:d8:de:cf:6c:b6:d9:d8:51:1f:e9:de:62:dc:
06:39:d7:d3:d9:e1:f0:30:1b:5b:95:00:72:84:b5:
6d:7b:da:f2:2f:58:fd:5a:f2:dc:44:d9:50:f0:d7:
bd:60:ff:6d:16:da:dc:02:16:15:74:3d:01:8b:d7:
90:2a:c1:30:3a:82:fa:5a:f6:2d:d9:ce:f7:0a:53:
de:fd:e9:e2:ea:e2:ca:dc:ea:33:6a:6e:25:3a:5d:
1c:e3:cc:2c:5c:85:c4:ce:62:0f:d6:a7:5f:db:0b:
43:04:a6:c3:d8:ea:cc:28:4d:8c:09:97:91:7f:a3:
cf:00:f1:03:4b:0b:91:08:43:d5:a2:b7:04:0c:84:
24:5c:61:b4:39:79:24:0d:c8:9b:71:62:03:fa:1e:
2f:d5:e9:2d:4b:83:68:ac:ec:1e:cf:04:f5:da:de:
21:1b:b9:d2:d9:4a:1a:37:2f:25:c0:25:37:f2:46:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AB:2D:AB:D6:99:2B:0C:70:0E:00:BE:09:27:7C:44:2B:D4:BE:2F
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f5:9b:c0:52:5c:c9:b5:81:d4:3d:2b:0e:eb:6b:00:d1:d0:
06:22:82:17:ca:5c:b4:13:63:93:4b:00:8f:d0:47:8a:18:40:
16:51:cf:44:4a:34:65:eb:b1:1a:05:d7:d0:6b:77:6e:59:9f:
54:d7:43:2b:b5:e2:23:ea:b8:24:84:06:a6:ed:f7:9b:33:4c:
a2:a3:2c:8f:1b:1c:3d:b5:c6:c6:af:05:76:a2:08:fc:cd:ef:
3a:ed:50:c4:27:8f:cb:d5:64:ab:87:04:75:d1:2b:2a:67:2b:
79:dc:54:9d:de:0d:63:43:d4:e3:56:c0:c0:46:e4:ee:6f:4e:
67:99:ee:43:2e:a5:97:8b:78:34:3b:15:ff:20:3c:29:2d:93:
dd:e4:10:fd:f0:4a:16:81:61:af:f6:d5:05:87:51:e9:b0:6b:
2e:54:d0:8d:0d:28:19:9b:45:02:6a:20:78:21:64:ab:d7:12:
af:37:10:87:1c:3e:da:85:23:61:b7:f4:59:53:40:86:2b:ed:
cd:fa:d9:1e:f4:eb:c7:b4:20:20:71:e8:6f:a9:d1:35:8d:ec:
bb:2c:84:fa:7a:4f:f5:54:8e:55:2f:97:77:71:41:87:30:a2:
d5:c4:4b:45:fa:91:b0:01:45:34:6e:54:e1:87:87:dd:7e:04:
c3:89:0b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:18:45 2026 by rpki-client