Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: fpWUKnwPkT6wPoh6oBJ+H4SYiP0FzRvXiesBc258I48=
Subject key identifier: 36:08:AF:EB:7F:75:06:36:15:32:7F:CD:8B:D2:5F:9F:E8:3C:94:DD
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 01A113E15009F8319A9CF15A0CBD6BD2255A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 1506
Signing time: Wed 07 Oct 2026 01:01:35 +0000
Manifest this update: Wed 07 Oct 2026 01:01:35 +0000
Manifest next update: Thu 08 Oct 2026 01:01:35 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: VV/ZFT6seAIy7xmvi3pEN7D9Vt93biOAEQW/xbIqDSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:e1:50:09:f8:31:9a:9c:f1:5a:0c:bd:6b:d2:25:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Oct 7 01:01:35 2026 GMT
Not After : Oct 8 01:01:35 2026 GMT
Subject: CN=3608afeb7f75063615327fcd8bd25f9fe83c94dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:7f:dd:57:31:70:10:0b:12:37:0c:cd:c2:
71:2c:68:b9:09:5a:0c:59:bb:b6:fe:6f:b0:ba:ea:
5b:22:dc:3f:a4:ee:49:14:47:01:f0:63:75:1f:88:
34:e0:6a:d6:71:de:aa:d9:de:68:d4:46:df:d6:54:
d9:b2:39:3b:40:f9:25:36:e6:8e:47:e2:37:91:58:
3a:3c:ed:85:16:c8:49:97:a4:92:6d:5b:22:42:7f:
31:ee:05:29:f8:3b:e7:03:e5:7a:fa:1f:da:23:3c:
bc:bb:a6:d7:8a:54:cf:71:a3:bb:e1:3c:ae:a1:e0:
f3:82:5a:90:b3:21:36:e4:d4:13:85:02:01:34:08:
11:12:3b:88:65:ca:6e:d7:ff:35:51:17:00:63:32:
49:26:b8:e6:15:de:01:d8:8a:54:80:45:2b:36:48:
45:9a:45:cb:7b:19:9b:da:9c:1d:e1:3e:27:45:47:
00:db:f3:63:41:c2:07:bd:62:f3:0a:e1:c0:5a:76:
ad:ee:28:05:bb:8c:e4:8d:36:7d:9d:84:b0:bf:e0:
46:c1:1d:3f:50:f1:ba:9c:db:f3:87:1c:6e:f0:81:
56:25:82:35:22:80:e9:49:d9:08:a4:76:37:0a:60:
23:f0:61:bd:2f:9e:36:e9:95:b6:7e:c1:f0:ea:07:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:08:AF:EB:7F:75:06:36:15:32:7F:CD:8B:D2:5F:9F:E8:3C:94:DD
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:54:08:27:d8:c9:6e:46:89:33:73:75:a4:28:7a:ac:49:35:
da:15:a5:80:69:ce:ef:e2:41:d1:1d:66:8b:11:0e:1c:f9:db:
7a:ef:38:17:3b:a7:0c:81:91:e2:3d:fe:3a:b8:63:ee:e3:c8:
a8:9e:08:c4:dd:ed:8f:95:a2:eb:dc:ac:26:ee:55:bb:f4:19:
a6:73:94:7d:cc:9e:5c:87:3f:05:d4:6a:8c:b3:7b:0e:c0:e2:
54:42:e0:e0:77:fe:eb:25:0c:39:13:b5:3d:c3:da:6e:89:d9:
d1:2e:dd:88:c7:47:af:14:97:d3:d5:5a:09:45:cd:14:50:88:
0f:0f:c8:b3:f4:8d:59:a5:18:cc:40:92:c1:a4:cc:8c:fa:c1:
b7:8b:2a:0f:b2:7d:1e:bb:2c:33:f8:d5:e0:c9:33:a3:c4:6a:
a4:97:54:10:c0:e6:31:e4:24:4b:51:4a:bc:0b:79:ef:3f:ee:
67:23:4c:db:12:1c:3c:1e:36:9d:a8:58:be:50:f8:d9:51:fd:
4c:61:f9:d7:29:5d:1e:4f:c1:27:10:b4:5a:61:50:25:ec:98:
cc:66:59:9d:0b:16:32:62:88:9d:b8:5f:be:66:98:7c:32:70:
05:1f:f3:27:54:b8:e5:4b:9e:b1:67:ee:1c:b4:74:c3:d5:c6:
f8:ec:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:54:05 2026 by rpki-client