Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
File: zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft (raw, json)
Hash identifier: kE84f5vvW0KshJj5NZdw5U2vdU6jjmbqgHriJm1vURE=
Subject key identifier: 1E:C9:D2:CC:E1:62:8F:E6:7E:FB:54:2F:CC:E6:2C:6E:BE:CC:1A:DF
Authority key identifier: CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
Certificate issuer: /CN=ce10101388b7ce378707993a0576aa3ddd95a979
Certificate serial: 01A0E58825E6B8AE269EDA296674ABB1B834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
Manifest number: 0216
Signing time: Mon 28 Sep 2026 01:01:40 +0000
Manifest this update: Mon 28 Sep 2026 01:01:40 +0000
Manifest next update: Tue 29 Sep 2026 01:01:40 +0000
Files and hashes: 1: i9y06XpGQ7gr-mdfp0S7uUFwlS4.roa (hash: /g2Zo7QZ+s2u4dfNouu8ACPFZIuHW58Outw73PTsBo0=)
2: zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl (hash: NeFz+RgNA/spB9J5lDQnSvPusLr9Ht+sp0MD/k26/60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:88:25:e6:b8:ae:26:9e:da:29:66:74:ab:b1:b8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10101388b7ce378707993a0576aa3ddd95a979
Validity
Not Before: Sep 28 01:01:40 2026 GMT
Not After : Sep 29 01:01:40 2026 GMT
Subject: CN=1ec9d2cce1628fe67efb542fcce62c6ebecc1adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:85:fb:b7:0d:93:19:93:65:a6:81:00:47:
86:37:62:f8:d9:fc:2c:66:34:68:d3:4b:c9:68:62:
56:e4:ce:96:26:11:29:d3:16:1b:9f:dc:9b:37:c7:
40:2a:b9:e4:e5:ef:fe:70:40:bb:95:71:2b:71:e7:
32:3b:12:22:10:63:a5:13:2f:c6:f9:5e:30:8a:3f:
68:81:b6:e7:59:81:48:4a:6f:0b:bd:55:00:8a:bc:
61:f8:d8:44:eb:cb:90:eb:8b:13:f5:f2:17:db:a0:
3a:b8:fe:9e:97:7d:ae:f9:27:df:6d:3c:0a:02:45:
25:65:f2:0d:a2:bc:00:e2:fe:cc:78:65:ff:12:83:
2a:a6:8e:88:0d:66:12:61:d2:1a:a1:8a:15:54:70:
75:03:5f:b5:ed:5c:77:77:a6:42:d1:1d:08:c1:c2:
26:c5:fe:93:fa:e9:3b:64:4a:7b:89:2c:41:73:6b:
ae:54:6e:5e:f7:d2:91:bd:75:1f:da:e0:43:e9:60:
92:19:4f:25:70:11:6c:83:34:0f:c9:2e:78:b2:7b:
c5:0c:8a:12:89:78:30:0b:db:2b:14:4f:e9:6a:c1:
9e:d8:ba:ed:c2:68:e4:83:ff:5b:b5:91:3d:8b:3f:
9c:fa:fe:e2:12:2e:4d:74:f3:6c:39:fa:2c:74:aa:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C9:D2:CC:E1:62:8F:E6:7E:FB:54:2F:CC:E6:2C:6E:BE:CC:1A:DF
X509v3 Authority Key Identifier:
keyid:CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e6:aa:ea:13:7a:bc:dc:13:05:4b:6c:a3:fb:bf:06:d6:d3:
52:de:5c:87:13:ce:45:45:c7:43:48:ee:d9:af:4f:4d:d5:03:
d7:89:3a:37:ef:8c:3d:f6:3e:5b:48:ea:d5:16:64:ef:57:0f:
9a:a7:61:86:4c:5b:82:1f:03:08:ef:0f:06:77:67:89:4e:46:
df:37:62:9e:2c:7f:e6:a2:fb:72:de:48:7e:61:0b:4c:f7:98:
78:0a:9f:b8:01:77:67:c6:c0:4a:65:0f:88:f3:5d:0d:3c:5a:
ad:79:cf:12:37:7d:8f:13:b7:c8:e7:66:4f:c4:b0:1f:dd:fc:
6f:f3:be:4e:37:98:92:bc:d7:15:5e:47:56:22:2a:7d:52:6a:
84:32:29:87:61:5e:46:44:ca:85:e0:3f:f4:80:95:a6:12:c2:
f4:b3:80:de:e3:2e:5a:4a:04:97:cf:5d:bd:79:00:34:b4:d9:
47:5b:98:ee:19:94:61:fc:a4:3f:7e:ba:41:09:9b:4c:a1:aa:
8f:53:2a:ca:68:bd:03:4a:29:7b:a7:a4:64:74:c6:2e:dd:3f:
0a:51:6f:ff:9e:5b:f3:27:f1:fa:d8:fd:17:b1:94:8e:22:55:
d5:93:1d:12:c8:78:89:0b:8a:09:35:47:f6:82:ff:f4:af:90:
24:8e:f9:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDliCXmuK4mntopZnSrsbg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMTAxMDEzODhiN2NlMzc4NzA3OTkzYTA1NzZhYTNkZGQ5
NWE5NzkwHhcNMjYwOTI4MDEwMTQwWhcNMjYwOTI5MDEwMTQwWjAzMTEwLwYDVQQD
EygxZWM5ZDJjY2UxNjI4ZmU2N2VmYjU0MmZjY2U2MmM2ZWJlY2MxYWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPCF+7cNkxmTZaaBAEeGN2L42fws
ZjRo00vJaGJW5M6WJhEp0xYbn9ybN8dAKrnk5e/+cEC7lXErcecyOxIiEGOlEy/G
+V4wij9ogbbnWYFISm8LvVUAirxh+NhE68uQ64sT9fIX26A6uP6el32u+SffbTwK
AkUlZfINorwA4v7MeGX/EoMqpo6IDWYSYdIaoYoVVHB1A1+17Vx3d6ZC0R0IwcIm
xf6T+uk7ZEp7iSxBc2uuVG5e99KRvXUf2uBD6WCSGU8lcBFsgzQPyS54snvFDIoS
iXgwC9srFE/pasGe2Lrtwmjkg/9btZE9iz+c+v7iEi5NdPNsOfosdKr6nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7J0szhYo/mfvtUL8zmLG6+zBrfMB8GA1UdIwQY
MBaAFM4QEBOIt843hweZOgV2qj3dlal5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemhBUUU0aTN6amVIQjVrNkJYYXFQZDJWcVhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMGM1NmItNjdlZi00MDA3LTkwNWYt
ZGEzYzI2N2EyNTI4LzEvemhBUUU0aTN6amVIQjVrNkJYYXFQZDJWcVhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kMGM1NmItNjdlZi00MDA3LTkwNWYtZGEzYzI2N2EyNTI4
LzEvemhBUUU0aTN6amVIQjVrNkJYYXFQZDJWcVhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOaq6hN6
vNwTBUtso/u/BtbTUt5chxPORUXHQ0ju2a9PTdUD14k6N++MPfY+W0jq1RZk71cP
mqdhhkxbgh8DCO8PBndniU5G3zdinix/5qL7ct5IfmELTPeYeAqfuAF3Z8bASmUP
iPNdDTxarXnPEjd9jxO3yOdmT8SwH938b/O+TjeYkrzXFV5HViIqfVJqhDIph2Fe
RkTKheA/9ICVphLC9LOA3uMuWkoEl89dvXkANLTZR1uY7hmUYfykP366QQmbTKGq
j1Mqymi9A0ope6ekZHTGLt0/ClFv/55b8yfx+tj9F7GUjiJV1ZMdEsh4iQuKCTVH
9oL/9K+QJI75vw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 11:26:56 2026 by rpki-client