Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier: tXAikRhQjbNdeBZfqeCXeQja6aL5vm2nA5EjR63aERc=
Subject key identifier: DE:07:92:62:50:79:50:1F:36:97:CE:C9:DE:BE:2E:C2:8D:EB:A8:DC
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial: 01A0D34ACD9CA5073E00C9B930F7F871340E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number: 172C
Signing time: Thu 24 Sep 2026 12:01:29 +0000
Manifest this update: Thu 24 Sep 2026 12:01:29 +0000
Manifest next update: Fri 25 Sep 2026 12:01:29 +0000
Files and hashes: 1: GZsPzmbA--FYrc4SNgLcVzZUS58.roa (hash: gCmBdutjh3s8CjQ+XZ5HjES4JuiIxCATlIX/+TCZL7A=)
2: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: 4SB3gt2tpMUiAX+xKPl/mJr+Mz1LN2e94sfd6ayspR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:cd:9c:a5:07:3e:00:c9:b9:30:f7:f8:71:34:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Validity
Not Before: Sep 24 12:01:29 2026 GMT
Not After : Sep 25 12:01:29 2026 GMT
Subject: CN=de0792625079501f3697cec9debe2ec28deba8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:f0:f8:83:2a:92:26:59:0b:49:34:42:85:
ba:aa:80:da:08:1a:26:cb:25:f2:14:4d:db:03:d1:
7a:d0:d9:8d:c3:fc:e0:e1:fb:ec:5e:82:df:d4:d4:
a9:d6:07:35:12:d4:be:00:43:cd:e8:70:1a:af:59:
09:0a:91:5c:2c:72:b0:ca:6f:3d:c3:94:a3:6b:23:
30:dc:d2:12:e7:d1:11:af:dd:d9:6b:82:eb:ae:14:
dc:d8:08:a1:9c:1b:16:34:16:0f:07:08:e9:00:0b:
3e:86:33:9e:99:23:79:c8:f1:5d:7c:ac:ed:77:39:
22:2a:3b:78:f9:c3:5a:a2:5c:29:ed:0c:5c:9e:f7:
20:4a:38:61:3c:c8:e5:a5:57:05:67:c2:6e:02:c5:
2d:44:4d:bb:dc:e7:db:7f:aa:b3:39:99:a8:ac:5f:
04:f9:6c:b8:ba:ec:bd:63:4f:98:c2:89:5f:fb:52:
93:9d:30:c3:ef:f8:82:c7:ea:ff:c3:91:f2:30:30:
1e:8b:e6:84:1f:c4:89:f8:90:a5:2d:25:29:95:41:
14:34:5c:e1:95:a4:a4:d7:30:9f:fd:df:e8:27:1a:
5a:0d:cf:0c:eb:97:ce:43:65:a1:2b:d0:7b:e4:53:
2a:03:21:a6:41:a0:11:37:79:d8:63:e0:50:a9:9c:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:07:92:62:50:79:50:1F:36:97:CE:C9:DE:BE:2E:C2:8D:EB:A8:DC
X509v3 Authority Key Identifier:
keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:02:23:e1:f9:38:b5:ca:44:dc:97:84:62:c8:56:66:3d:e7:
90:33:b7:3e:2d:eb:07:66:01:2e:60:21:1d:46:53:d8:0c:07:
0c:b5:e0:0e:c4:7f:18:8f:7a:d0:3d:3b:55:d5:e5:39:b8:ec:
aa:74:b2:8c:68:5d:4d:49:eb:3c:a1:80:e2:6c:a0:9f:2d:ea:
60:1d:55:77:b3:76:e0:e2:37:42:ac:ad:d4:5a:24:c0:72:11:
a8:8c:14:d3:ea:be:34:54:b7:68:cb:39:45:e8:4d:19:c8:1b:
a3:e9:e3:14:fd:c8:f4:94:2c:fc:49:b1:44:65:e8:c7:d3:bd:
c6:fb:f4:7b:d9:b6:51:21:c9:74:a7:77:39:80:67:4c:8f:9b:
6b:04:ce:b9:de:3d:b0:b5:a4:f5:99:b5:32:e1:fa:cf:a0:39:
17:35:cf:e5:9a:89:9b:d6:0c:26:18:4f:06:02:62:84:63:9d:
4b:bf:af:96:dc:3d:09:1e:1e:e3:e0:a5:74:40:a7:71:11:b7:
f7:cb:00:a7:6c:f6:17:ec:3a:94:0c:03:f8:f5:eb:f2:61:81:
e2:f0:05:32:39:03:ef:92:73:95:5b:d0:38:54:cf:8c:0a:e2:
1c:2a:f9:68:60:b6:82:f5:bb:90:b1:98:0d:0e:e4:b1:10:5c:
97:68:9d:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSs2cpQc+AMm5MPf4cTQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDY2MzI5NTc2YzljMDFiM2NkODI4NWY0YjU0YjAxNzBk
OGMzOWEwHhcNMjYwOTI0MTIwMTI5WhcNMjYwOTI1MTIwMTI5WjAzMTEwLwYDVQQD
EyhkZTA3OTI2MjUwNzk1MDFmMzY5N2NlYzlkZWJlMmVjMjhkZWJhOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKjw+IMqkiZZC0k0QoW6qoDaCBom
yyXyFE3bA9F60NmNw/zg4fvsXoLf1NSp1gc1EtS+AEPN6HAar1kJCpFcLHKwym89
w5SjayMw3NIS59ERr93Za4LrrhTc2AihnBsWNBYPBwjpAAs+hjOemSN5yPFdfKzt
dzkiKjt4+cNaolwp7QxcnvcgSjhhPMjlpVcFZ8JuAsUtRE273Ofbf6qzOZmorF8E
+Wy4uuy9Y0+Ywolf+1KTnTDD7/iCx+r/w5HyMDAei+aEH8SJ+JClLSUplUEUNFzh
laSk1zCf/d/oJxpaDc8M65fOQ2WhK9B75FMqAyGmQaARN3nYY+BQqZy/KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4HkmJQeVAfNpfOyd6+LsKN66jcMB8GA1UdIwQY
MBaAFGXWYylXbJwBs82ChfS1SwFw2MOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgt
MWU2NjUwNTEzMWNhLzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgtMWU2NjUwNTEzMWNh
LzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAIj4fk4
tcpE3JeEYshWZj3nkDO3Pi3rB2YBLmAhHUZT2AwHDLXgDsR/GI960D07VdXlObjs
qnSyjGhdTUnrPKGA4mygny3qYB1Vd7N24OI3Qqyt1FokwHIRqIwU0+q+NFS3aMs5
RehNGcgbo+njFP3I9JQs/EmxRGXox9O9xvv0e9m2USHJdKd3OYBnTI+bawTOud49
sLWk9Zm1MuH6z6A5FzXP5ZqJm9YMJhhPBgJihGOdS7+vltw9CR4e4+CldECncRG3
98sAp2z2F+w6lAwD+PXr8mGB4vAFMjkD75JzlVvQOFTPjAriHCr5aGC2gvW7kLGY
DQ7ksRBcl2idAA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:11:41 2026 by rpki-client