Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: +caPz5WkROVKrf7xAfaTD/+VLX5JCW2aum1XEs3f1ks=
Subject key identifier: BA:C9:6C:C0:A5:04:51:AA:81:CF:B8:A8:87:A1:E3:E9:30:09:7B:C7
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 01A1A74ADA3DDDCF99ADEB35E2CE42EC9F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 0832
Signing time: Wed 04 Nov 2026 16:01:02 +0000
Manifest this update: Wed 04 Nov 2026 16:01:02 +0000
Manifest next update: Thu 05 Nov 2026 16:01:02 +0000
Files and hashes: 1: 7Lr6p7DxKnwsqNm2CLB6OM0-G9k.roa (hash: MVl7TrZfOYT29YZfSTEksTVjTVaYtldybqMvFAfAqSw=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: A52Kya9y94SXtyMvMAddXoFCAv1/LIDVmMogbDB7S90=)
3: nLzx58TFso7KcSU-xZqQFwqs76E.roa (hash: X8XgfJ4xsaevH8Jt00V++9TqwIkHOO/EM9BBJ5XdWxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:4a:da:3d:dd:cf:99:ad:eb:35:e2:ce:42:ec:9f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Nov 4 16:01:02 2026 GMT
Not After : Nov 5 16:01:02 2026 GMT
Subject: CN=bac96cc0a50451aa81cfb8a887a1e3e930097bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:76:14:7b:bd:03:dd:bc:3f:91:8e:78:e5:f9:
b4:fb:be:f9:f9:43:ec:f6:44:90:70:83:02:83:ba:
0c:cf:d5:53:ee:aa:d9:b9:1d:4b:95:45:0f:f7:af:
6d:f9:ea:0e:4c:f3:47:5a:48:79:03:b8:9d:15:76:
98:a6:7e:f1:42:7d:fc:09:b5:c4:58:03:4e:ba:b1:
5d:8d:fd:4e:43:cb:63:26:43:5f:51:bc:70:a4:51:
37:6c:4b:f8:07:20:4f:9d:37:20:56:0b:9f:51:e4:
92:99:50:9d:5e:1a:06:25:8a:e9:a7:e9:e7:9d:08:
ca:ad:b9:0c:f2:6c:71:60:86:c0:95:b1:ce:5c:50:
c3:6e:09:51:2d:28:08:16:38:d4:69:e2:00:05:7e:
a7:67:33:eb:94:5d:46:86:44:6a:96:4d:18:8c:42:
f1:00:b4:c7:66:81:40:94:d5:18:d4:cf:c9:1d:f7:
32:ee:99:25:89:dc:99:f8:f9:f3:8d:a8:18:31:bd:
5c:43:51:a8:33:38:d2:f5:ae:d4:9a:b0:4a:8b:8b:
c4:a0:ef:47:59:75:0e:62:76:1b:85:42:e7:55:98:
c7:26:94:50:54:96:1d:ad:02:c4:38:be:7c:05:52:
7f:3e:58:bb:cc:27:b5:e0:ea:b1:13:c7:23:c6:8a:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C9:6C:C0:A5:04:51:AA:81:CF:B8:A8:87:A1:E3:E9:30:09:7B:C7
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f5:07:4f:8e:4e:65:b6:d1:de:1f:92:d2:74:39:01:4c:82:
20:e7:81:eb:bb:35:8a:12:ef:b2:f3:74:03:f8:77:ee:31:21:
41:cf:a7:fa:59:dc:c7:9d:ff:44:d4:7c:b1:75:eb:64:a8:b1:
1c:13:be:3b:fc:48:d9:6d:92:26:6e:ec:09:b2:62:35:72:f3:
5d:0d:a9:bf:30:50:13:66:01:00:a2:58:2f:3e:4e:66:ae:5d:
47:4e:76:63:b6:30:f3:49:2b:71:d2:85:6d:92:48:47:0c:3a:
4b:6d:75:96:a5:e7:5f:1a:ed:20:27:0f:42:4f:d6:d5:c4:8b:
1b:a0:0f:2d:a0:e9:8c:56:01:11:e5:38:40:21:7a:5f:e8:40:
b3:3c:c3:84:e1:c3:0f:b2:56:bb:6b:2b:9e:84:df:69:0b:30:
3f:c8:cb:dd:13:5e:8a:8c:bb:b3:a8:a7:63:a4:35:af:c5:46:
16:b8:59:04:a0:f5:84:bf:5b:c4:6c:81:13:33:f2:77:09:c0:
9a:73:59:0d:10:da:55:38:91:09:ca:b4:c1:38:88:f0:9f:e7:
56:47:c9:bf:24:34:c0:53:fe:90:ab:71:42:c5:3e:de:d0:7a:
41:a5:72:46:ed:da:d7:7c:c0:c9:44:a8:4d:8d:c9:69:aa:f8:
17:ab:2a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:53:41 2026 by rpki-client