Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: G2GTX4IHLRmrzNFsuq8N5jhiLr5+Io04wiHPEczpTjE=
Subject key identifier: F6:75:B0:C7:7A:EE:8F:61:AD:70:B0:33:99:58:84:A7:4B:45:FE:83
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 01A03C3A7A2872079319E725D42193FE357D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 0B91
Signing time: Wed 26 Aug 2026 04:01:00 +0000
Manifest this update: Wed 26 Aug 2026 04:01:00 +0000
Manifest next update: Thu 27 Aug 2026 04:01:00 +0000
Files and hashes: 1: GvdosnM4oTQr42AAbs5kaRK7G5k.asa (hash: +q7C0091/BCLWI1y72MQuuHCj669pr/poTHiNIbXYFE=)
2: wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa (hash: ddJPky6VMI6qp8TK3QriFAzhCSzbyfK/JMSPvgj4FCE=)
3: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: z0iIMKIVmTMALfeUqVEFe6z02zbgbyvWecTU/3BpS8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:3a:7a:28:72:07:93:19:e7:25:d4:21:93:fe:35:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Aug 26 04:01:00 2026 GMT
Not After : Aug 27 04:01:00 2026 GMT
Subject: CN=f675b0c77aee8f61ad70b033995884a74b45fe83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:91:1d:8d:c7:80:09:30:54:20:78:60:7b:
35:d0:aa:e1:1a:54:17:54:e7:83:42:85:c6:9e:90:
86:c5:13:a3:bc:22:d9:a5:6d:27:c5:84:57:a1:62:
a0:73:4e:3a:4f:48:f6:2d:38:5c:9a:75:2a:ad:a4:
83:20:44:44:59:76:4e:e9:8c:d5:28:90:4d:24:24:
7c:a9:22:a0:1f:d7:fd:0c:e2:2a:41:21:77:85:de:
26:61:da:4a:a0:d6:f7:97:c3:bd:e8:4c:5e:0b:20:
71:ea:4f:3b:36:27:7e:b9:55:66:1f:c9:c2:35:2b:
6d:4b:05:a9:38:d4:0d:2b:11:64:6a:a4:85:20:fc:
3b:1a:ad:c6:92:c2:9d:de:35:39:bd:87:c9:10:66:
33:df:fb:73:5d:1e:e8:68:4a:fe:b3:48:bc:e3:60:
fd:8a:51:d8:72:f9:dc:c5:10:ee:89:57:7b:90:15:
15:54:d1:9f:9b:00:80:8e:3a:93:62:48:08:95:84:
6a:29:80:23:b7:42:7f:8d:12:07:fd:1c:da:75:47:
90:cd:13:89:dc:e9:41:ad:d9:c3:1f:66:e3:1f:c9:
fb:fa:da:1d:7e:94:9a:0f:64:e4:e7:74:d7:e5:52:
16:0f:a6:3f:7a:96:3d:3e:3d:da:3a:b7:13:da:b0:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:75:B0:C7:7A:EE:8F:61:AD:70:B0:33:99:58:84:A7:4B:45:FE:83
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1a:13:6f:7a:bf:90:38:34:f2:87:44:b3:ec:53:3d:83:4b:
61:f1:ef:52:58:e5:be:8f:1c:a8:88:08:2d:3b:55:4e:2d:1e:
62:f3:4e:0d:5e:b2:09:28:5c:34:26:c2:38:3e:6f:9a:5c:4c:
b7:6b:28:08:7c:2a:49:dd:60:e1:66:ac:e9:00:98:37:ea:74:
6d:df:f6:f5:f1:94:97:71:09:14:6e:67:53:9b:be:e5:9e:53:
e4:64:6e:5c:a8:37:b9:d9:76:95:44:d6:c5:ba:e6:16:16:40:
a7:d0:e8:9c:3e:73:8f:72:8d:99:92:d9:08:08:fa:b1:cf:03:
fd:bf:68:bd:e6:a1:2c:a6:b0:0d:bd:ba:75:a0:5f:1f:8e:a8:
6e:6a:b8:83:32:99:6f:5f:69:f2:dd:5f:94:4d:02:fb:42:2a:
71:ab:ee:5e:f8:49:fe:15:dd:73:50:b4:35:ed:70:8f:52:cf:
4c:87:5f:7a:c6:09:e0:68:35:2e:67:ca:1f:35:f6:c1:0a:0e:
ba:34:4c:93:c6:eb:68:1c:3d:3f:b4:ee:4f:18:d7:28:d8:ae:
02:54:e4:db:bc:58:30:81:a0:6e:79:f4:ef:65:60:25:29:5d:
ff:2f:d8:df:66:ab:9d:86:88:e0:50:3d:ea:94:e1:cc:08:98:
58:22:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:09:10 2026 by rpki-client