Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: JDBSIiFDg3PfNiejNHD+4bmyQkNw2Msc5IeOXHlCgwY=
Subject key identifier: 59:31:67:39:23:D0:E5:32:A7:B0:A9:53:D9:08:9E:58:9C:AD:78:4D
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 01A0D15BB52BCA448E0D406550CE71AD8B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 03:00:43 +0000
Manifest this update: Thu 24 Sep 2026 03:00:43 +0000
Manifest next update: Fri 25 Sep 2026 03:00:43 +0000
Files and hashes: 1: 98fyEBb-PIBiroCj51bzkd-V_i4.roa (hash: 2RN0v3XP/euGb82/ECdLfjWteqkCXDXBbJynvO0cBWE=)
2: y97Q2cCIA4p_jfA1RbOfelZQKOo.roa (hash: oRmoVnYM94QBjpHDaFRFV+BA4jZYdHdlmrs4oEppUqA=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: eQO+o8XtduK2Q2KmNbZpOOPxfMPYfZ7Z2AfIjAmwYLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:b5:2b:ca:44:8e:0d:40:65:50:ce:71:ad:8b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Sep 24 03:00:43 2026 GMT
Not After : Sep 25 03:00:43 2026 GMT
Subject: CN=5931673923d0e532a7b0a953d9089e589cad784d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:8a:9d:20:2a:d4:88:d6:fa:14:7e:06:e7:
6c:72:2b:d5:8c:cc:cb:d0:8d:d3:de:4e:5e:62:10:
d5:e1:65:bf:32:ab:3d:09:40:ee:58:d4:75:96:7d:
25:d0:17:d8:42:04:fe:2d:ea:17:eb:f3:44:e6:34:
57:3b:10:6e:d3:41:9e:c1:56:f5:91:74:ea:aa:5f:
db:3c:c6:33:c6:cf:f4:f8:b9:8b:9b:ac:2f:75:a2:
cf:65:81:4a:69:1e:de:ca:fc:6c:50:0b:1b:68:40:
6f:87:ba:3c:e9:2f:11:30:59:d9:35:5f:5b:11:37:
2e:87:63:22:4f:df:79:98:77:30:88:8f:08:58:db:
44:78:3f:ff:76:9c:ce:ef:fa:c0:d7:ed:39:b2:49:
04:eb:40:d1:9c:30:3a:a5:16:f8:00:60:e2:8c:fd:
5e:85:24:d5:8e:b3:b5:ec:8c:04:f8:f9:ce:e3:06:
94:81:b2:f8:85:3d:93:8e:55:9d:a3:aa:7c:7f:28:
d7:5f:63:d0:c6:33:ef:df:ad:10:7c:38:db:e0:56:
d3:2c:45:87:f3:e1:92:27:f3:b0:69:56:25:80:c3:
7a:e1:1f:8c:36:0e:c3:d5:f1:2e:63:b2:93:23:dc:
d2:a1:76:4d:7f:5a:44:3f:46:75:41:61:0d:6a:2b:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:67:39:23:D0:E5:32:A7:B0:A9:53:D9:08:9E:58:9C:AD:78:4D
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:83:51:4b:89:34:c3:35:ff:d4:2c:db:27:4c:09:7c:07:9e:
61:fe:9c:3e:da:0d:1a:a8:9e:48:36:88:01:70:bd:c2:cb:ee:
2a:7f:33:4b:d2:f5:c3:7b:67:da:91:0a:5f:01:c4:6e:37:be:
f9:20:6d:00:b8:ad:a7:43:d2:24:a8:6b:0b:84:60:ef:8c:9c:
cc:e3:88:76:38:dc:a6:c9:f6:de:fb:9f:35:4b:7d:7d:f2:44:
7f:b3:87:4c:92:b5:05:55:c7:a2:4d:09:7d:99:74:1a:1e:a1:
61:2a:05:a0:6f:e1:e5:c0:5c:02:de:75:34:b7:b0:ce:5b:76:
6e:da:98:3a:17:21:e0:3e:5e:8e:af:fa:69:84:83:3a:e4:84:
66:6c:0c:bf:d3:50:98:fb:de:45:3f:27:f2:21:f6:4a:8a:a9:
8b:9c:fd:f6:56:86:5d:e0:bf:51:19:81:34:f4:08:15:e2:9e:
99:50:f1:7e:a9:a3:69:a3:24:c1:ef:53:43:9f:50:ca:2a:ec:
43:78:d1:af:a5:78:e7:56:82:03:23:16:01:66:c4:2c:30:8b:
31:b2:50:8d:e4:cb:c4:11:b6:8f:d4:0a:56:77:0d:bb:3b:22:
81:f8:28:81:6d:07:94:b8:10:7f:61:eb:b9:27:2b:93:67:c1:
bf:22:7f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:03:36 2026 by rpki-client