Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: 3bkcr45MnPgsQNPtc3qA8PcUtGz75+RxNJ5kWvTutqw=
Subject key identifier: B5:83:22:97:81:33:18:02:86:02:7F:BF:01:AC:0C:62:37:B2:37:29
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 01A0DACDC7E5A85385074AC159FE5ED8F3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 1944
Signing time: Fri 25 Sep 2026 23:01:53 +0000
Manifest this update: Fri 25 Sep 2026 23:01:53 +0000
Manifest next update: Sat 26 Sep 2026 23:01:53 +0000
Files and hashes: 1: Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa (hash: HdfFsuae+bs6Px2O/nXidzw9nHeIbmVY360ACfcO/uA=)
2: apKWJZAqjwjRd0dehHbbTa9ZY3A.roa (hash: nVaIovGi66UncedynfpwyGBTPpXsXon+jV7FMQbYQEg=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: akpBgO3jWW7SVyo0JU2OOgqLbUURSA4U4hR+hQdhk2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:c7:e5:a8:53:85:07:4a:c1:59:fe:5e:d8:f3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Sep 25 23:01:53 2026 GMT
Not After : Sep 26 23:01:53 2026 GMT
Subject: CN=b58322978133180286027fbf01ac0c6237b23729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:23:9f:09:81:8f:20:70:fd:9b:39:f1:8f:45:
00:ae:ea:c3:e5:21:4b:86:17:eb:ce:3a:45:e0:19:
7f:35:98:f2:40:e8:9f:2c:00:ae:69:74:fb:f4:51:
e4:1f:63:7e:dd:11:4c:75:c5:ec:a4:70:11:4d:9c:
80:09:2d:75:76:49:72:4c:bf:56:14:fb:d7:80:7d:
a4:f4:1c:87:f7:f4:a6:f2:8a:95:d0:6b:fe:ea:48:
fb:1b:33:28:4f:92:5a:30:60:58:05:d8:2f:10:cd:
c5:d4:e8:ba:e9:ff:a3:76:d0:10:a0:d6:16:eb:64:
df:b0:a2:50:36:dc:32:f7:25:4b:cf:cc:a6:67:75:
68:0b:47:cc:9b:02:66:e3:0a:50:73:4e:bd:c8:98:
80:a6:61:48:35:e5:f2:1d:72:c9:da:9b:5e:aa:71:
7c:cc:39:5f:ce:9b:ee:f6:20:97:0b:79:f1:51:0d:
a4:2b:b4:60:75:16:ef:68:cd:fd:6b:17:4e:dc:41:
25:18:91:52:7b:96:d8:4d:a1:7a:fb:f4:ef:a8:5b:
4a:14:98:87:14:69:63:ad:07:a5:12:02:fd:b5:93:
04:ac:d9:3e:18:3b:25:a2:34:d8:1c:13:36:10:35:
cf:16:04:83:61:81:b4:c3:93:bd:d6:08:3e:a8:f8:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:22:97:81:33:18:02:86:02:7F:BF:01:AC:0C:62:37:B2:37:29
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ad:4c:ef:af:69:02:c5:16:00:f5:91:06:84:1a:90:17:bd:
3d:15:ae:6f:b8:f5:c4:d6:2f:3b:c8:65:35:9f:6c:27:2d:c6:
29:35:54:02:ac:5e:be:78:45:a1:46:0a:6b:c7:32:83:d9:85:
1c:4d:8c:6f:3f:7e:33:4d:ec:ec:9c:62:b3:e7:de:0d:5c:1b:
17:fa:b4:6d:ec:52:a4:63:28:33:70:37:c8:fd:61:90:3b:b8:
92:e7:13:7d:19:02:7d:e6:f7:d0:f8:70:4c:6a:87:65:81:0a:
ef:fc:ba:32:61:e5:c7:c7:9e:71:f1:36:ea:61:90:cb:31:0d:
ea:f4:97:91:9f:45:42:fe:19:5a:6b:8d:65:40:45:5a:84:ad:
a1:dc:e0:04:90:c2:e2:5e:42:fc:e2:85:75:17:e2:c5:7f:ce:
df:ac:80:d7:97:b9:c0:ee:a8:e2:bb:b1:bb:71:c7:5e:be:5c:
ab:07:f9:11:d3:09:fc:ed:ba:f9:67:da:26:4f:0b:d8:6d:84:
8f:2a:43:ef:de:ff:64:b5:ed:4c:32:0e:f4:26:ba:70:47:ab:
9a:cf:f3:d6:1e:c7:52:7e:d9:db:55:69:d5:7f:c6:1e:6a:fe:
35:ab:a6:78:8c:9c:3b:65:58:9e:9b:93:55:78:2b:6e:8e:b6:
df:c1:55:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazcflqFOFB0rBWf5e2PPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOTc3ZTlkNTJhZmJjNDc3OTlkMzk3NWZjZWU4YWM1MWNh
MGNmNmEwHhcNMjYwOTI1MjMwMTUzWhcNMjYwOTI2MjMwMTUzWjAzMTEwLwYDVQQD
EyhiNTgzMjI5NzgxMzMxODAyODYwMjdmYmYwMWFjMGM2MjM3YjIzNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCOfCYGPIHD9mznxj0UArurD5SFL
hhfrzjpF4Bl/NZjyQOifLACuaXT79FHkH2N+3RFMdcXspHARTZyACS11dklyTL9W
FPvXgH2k9ByH9/Sm8oqV0Gv+6kj7GzMoT5JaMGBYBdgvEM3F1Oi66f+jdtAQoNYW
62TfsKJQNtwy9yVLz8ymZ3VoC0fMmwJm4wpQc069yJiApmFINeXyHXLJ2pteqnF8
zDlfzpvu9iCXC3nxUQ2kK7RgdRbvaM39axdO3EElGJFSe5bYTaF6+/TvqFtKFJiH
FGljrQelEgL9tZMErNk+GDslojTYHBM2EDXPFgSDYYG0w5O91gg+qPghuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWDIpeBMxgChgJ/vwGsDGI3sjcpMB8GA1UdIwQY
MBaAFMyXfp1Sr7xHeZ05dfzuisUcoM9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTkt
ZTIzMDQ2MmZjNTdiLzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTktZTIzMDQ2MmZjNTdi
LzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZq1M769p
AsUWAPWRBoQakBe9PRWub7j1xNYvO8hlNZ9sJy3GKTVUAqxevnhFoUYKa8cyg9mF
HE2Mbz9+M03s7Jxis+feDVwbF/q0bexSpGMoM3A3yP1hkDu4kucTfRkCfeb30Phw
TGqHZYEK7/y6MmHlx8eecfE26mGQyzEN6vSXkZ9FQv4ZWmuNZUBFWoStodzgBJDC
4l5C/OKFdRfixX/O36yA15e5wO6o4ruxu3HHXr5cqwf5EdMJ/O26+WfaJk8L2G2E
jypD797/ZLXtTDIO9Ca6cEerms/z1h7HUn7Z21Vp1X/GHmr+NaumeIycO2VYnpuT
VXgrbo6238FVEw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:00:13 2026 by rpki-client