Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: 7+Mhs/xKvtHrBAnfxPmF3B6BHl7dU3hhRaYq2Hdg6Ug=
Subject key identifier: A3:8D:CA:F5:D5:6F:BA:01:8F:1D:1B:9A:88:D1:72:36:AE:77:DB:0D
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 01A0208C67DD0F48732134585B17D2C182EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 1488
Signing time: Thu 20 Aug 2026 19:01:07 +0000
Manifest this update: Thu 20 Aug 2026 19:01:07 +0000
Manifest next update: Fri 21 Aug 2026 19:01:07 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: eVWYmahlrB9v1YPagqncvBphfsOGk1z7PVl6kTcRI2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:8c:67:dd:0f:48:73:21:34:58:5b:17:d2:c1:82:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Aug 20 19:01:07 2026 GMT
Not After : Aug 21 19:01:07 2026 GMT
Subject: CN=a38dcaf5d56fba018f1d1b9a88d17236ae77db0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:9c:b3:1b:bd:f6:8f:2e:b1:57:82:e7:3d:
8d:80:1c:b8:97:eb:75:da:e2:29:5a:4b:24:5d:07:
01:79:75:49:d4:65:5a:61:75:e0:19:a9:f5:bb:50:
ff:8a:24:7d:1b:69:7c:00:f9:43:18:85:00:5b:93:
b7:24:a6:68:8e:97:78:cf:5f:66:a8:d0:5e:2f:e9:
4c:54:b2:79:2e:9e:14:a6:91:09:f0:de:b6:d6:39:
64:16:1b:70:e5:ad:dc:00:3d:00:7c:21:ac:be:5b:
c9:d0:f3:f0:ad:d9:b0:2b:6f:fb:0c:ff:ed:29:4e:
ef:a4:b4:e4:20:8b:8e:a4:4a:e4:a7:80:08:f8:9e:
c1:49:f2:a2:8e:87:e0:f1:3d:1b:e0:cd:56:34:fd:
b6:89:2f:6f:c2:26:0c:81:bd:78:da:d0:f9:8a:ba:
7c:d1:a0:65:e3:2d:0a:84:57:36:65:83:1e:bd:40:
c5:63:c6:7c:20:84:67:98:1d:b0:51:16:8e:e6:55:
87:bd:ef:ff:8d:a2:79:30:ba:d6:d0:a7:56:f0:09:
fc:95:7f:13:9d:4a:72:b4:f7:17:c6:87:af:b4:d0:
e2:f1:09:b4:b6:55:f0:6f:74:b4:7c:30:f5:4b:6b:
15:33:71:74:5e:ed:20:1e:46:4c:9b:4d:0f:db:2d:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8D:CA:F5:D5:6F:BA:01:8F:1D:1B:9A:88:D1:72:36:AE:77:DB:0D
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:2f:32:66:d1:af:79:d3:83:b0:41:e7:0e:18:c6:4e:fc:b1:
84:02:a5:49:d7:f8:b1:df:2b:23:b1:c9:67:16:e8:81:a4:da:
7c:4d:3f:01:da:1c:32:03:ef:84:6e:9f:1d:0a:fd:a1:ec:4c:
40:f2:22:91:f8:23:f7:ee:f2:1c:02:db:92:28:68:85:49:81:
3e:f3:f0:d2:d6:70:b9:e2:1e:ab:93:d3:6d:49:2b:14:46:be:
cf:cd:2a:af:6e:c4:fa:d3:a4:e4:e5:f8:a7:08:e4:3d:ab:e5:
92:53:0b:a4:e4:19:ab:76:e9:29:14:27:82:c4:77:41:3d:2f:
60:3c:c8:31:95:f2:3d:9b:08:cc:0c:be:28:b6:35:55:59:6c:
26:c1:11:11:8b:3e:30:6a:3e:f7:be:ee:a0:cb:90:f0:97:a0:
37:f4:5e:45:86:18:62:53:c0:47:af:fa:ff:2c:9e:2c:86:89:
68:ee:30:ad:db:c8:c8:81:74:cd:fa:9b:2a:a1:bc:62:d8:e0:
91:d8:2e:aa:ff:94:aa:02:22:14:8e:fc:75:bd:cd:04:2e:84:
fb:41:9b:e3:e8:5c:4d:6b:1a:5e:1d:03:c8:85:f7:e3:8b:43:
30:fa:97:7c:88:34:96:be:95:ed:e7:7a:b3:fc:67:2b:f2:75:
ce:2d:e2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:08:25 2026 by rpki-client