Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: CK+K91AraauWR5R4hS211gD8QY7+hX7pVquBNQo2740=
Subject key identifier: 96:F3:6A:5B:20:FB:5D:8F:82:ED:0E:82:54:39:60:09:6F:E6:E1:4D
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 01A128E88C7C6B39D88A3F299D29577BA431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 03:01:31 +0000
Manifest this update: Sun 11 Oct 2026 03:01:31 +0000
Manifest next update: Mon 12 Oct 2026 03:01:31 +0000
Files and hashes: 1: nOWsqCuFuUl88d8fe68oh7ATL8Y.roa (hash: 3ZcPCRJToIBazA6ZM2eZ5k1Cl21KURsg9GhtHBDZCsw=)
2: vyrrFLAQmM4kpL-C4kzXL9B0pEk.roa (hash: uDR2ErZozryJ4og8nKltQlCSGLY9GDhP6CrAdfmEEk8=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: 14Bdef/q5IWm5SWJf1P2WTrqDQRymio0clCNjVPpzws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:8c:7c:6b:39:d8:8a:3f:29:9d:29:57:7b:a4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Oct 11 03:01:31 2026 GMT
Not After : Oct 12 03:01:31 2026 GMT
Subject: CN=96f36a5b20fb5d8f82ed0e82543960096fe6e14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:2d:95:1c:0b:f1:43:06:51:3c:3f:d9:21:
22:05:99:85:37:5c:69:db:d2:69:dc:e1:fa:9f:e5:
68:46:cc:4b:36:e3:e0:77:e7:e4:74:03:5c:71:65:
15:c6:a1:2e:16:d3:47:bc:2e:fa:e7:00:b5:36:b3:
48:ee:cb:6b:1e:7b:b3:e2:7f:a1:8a:dc:9e:89:2f:
b7:7b:cd:50:c1:60:de:cc:8f:3a:71:ff:b2:a2:aa:
03:17:9c:8f:97:b5:05:c7:39:6a:83:a7:6f:a0:dc:
fa:68:13:8b:03:fd:d0:d7:b8:e7:17:25:da:d4:d2:
3b:8f:cf:32:7a:2c:5a:37:a8:60:a3:4b:d4:6e:db:
02:a7:21:41:b2:dc:af:5f:ef:5d:27:98:98:97:98:
ec:eb:5f:53:c8:11:4a:ef:15:bc:e8:e4:90:ce:e6:
a7:8b:fa:71:f1:f2:e4:ba:5e:70:e8:c1:df:d0:93:
d5:b0:d8:d0:29:ac:75:e3:68:3a:21:1d:6a:88:5d:
37:ea:d0:df:52:8a:14:7c:29:38:f5:f2:1b:ce:fb:
e1:43:b8:08:97:85:ea:c9:09:57:89:d0:d1:66:9e:
5c:62:77:d7:af:02:c1:a5:a1:8a:c5:80:b2:e1:f8:
6d:a8:76:0a:3d:0e:c0:5c:29:d5:ed:b4:12:41:66:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F3:6A:5B:20:FB:5D:8F:82:ED:0E:82:54:39:60:09:6F:E6:E1:4D
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9f:ab:79:55:e6:e4:e2:d5:78:fb:95:6d:e0:4d:63:ff:c2:
6a:e0:a1:4e:d1:e1:27:b8:00:e5:26:ce:68:50:a1:5d:82:6e:
53:74:fe:1e:fa:b0:eb:79:cf:cb:54:44:90:bf:bb:d4:07:1d:
1f:28:8e:2c:cb:0f:79:16:e4:a7:9d:9c:ce:8f:c1:8a:53:17:
e3:7d:14:7c:a2:e7:fd:cb:af:2f:c8:30:69:c3:ca:71:90:04:
bc:d1:a5:d5:6f:7d:ea:eb:55:63:2c:99:1c:6b:d1:03:4e:d8:
66:ce:85:3b:83:36:f3:11:4d:18:70:e2:b5:5a:bc:d2:a2:a7:
8d:b2:5e:ba:1a:82:47:03:fe:4e:82:8c:05:91:67:a4:ae:77:
8f:bd:1d:7f:02:1e:af:cf:c1:52:48:a7:db:36:f0:f3:55:41:
96:93:bf:5d:21:ec:68:95:dd:30:b0:3f:90:c5:09:d0:e4:2e:
32:13:40:5f:c8:73:81:e1:3d:c1:b6:03:49:21:6e:bf:0c:fd:
c8:06:22:b1:86:da:ac:01:b3:be:1b:7a:f6:a5:58:1a:1b:f3:
b0:ce:e3:86:a5:78:23:34:d9:c3:86:54:cd:9f:b7:42:51:15:
9b:30:03:22:15:aa:56:13:ba:fb:b7:01:3e:9a:21:79:8c:57:
b2:f1:fd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:00:19 2026 by rpki-client