Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: kBh7SV1+r84z5KqRoNrka8Ht2XWnCYJ+VzXYAM+G/tM=
Subject key identifier: C4:34:E4:42:E4:1E:6D:FC:23:5F:A1:EB:C1:49:55:7B:40:26:9E:7E
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 01A16B6C87F6C31B0C3ADD010D006D9CA289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 0C2E
Signing time: Sat 24 Oct 2026 01:00:37 +0000
Manifest this update: Sat 24 Oct 2026 01:00:37 +0000
Manifest next update: Sun 25 Oct 2026 01:00:37 +0000
Files and hashes: 1: GvdosnM4oTQr42AAbs5kaRK7G5k.asa (hash: +q7C0091/BCLWI1y72MQuuHCj669pr/poTHiNIbXYFE=)
2: wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa (hash: ddJPky6VMI6qp8TK3QriFAzhCSzbyfK/JMSPvgj4FCE=)
3: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: qU54H1MPqMlPf1+PIqtElL30GEER8lX5F+Vm4PMJlHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:6c:87:f6:c3:1b:0c:3a:dd:01:0d:00:6d:9c:a2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Oct 24 01:00:37 2026 GMT
Not After : Oct 25 01:00:37 2026 GMT
Subject: CN=c434e442e41e6dfc235fa1ebc149557b40269e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:99:37:ab:ca:75:ce:de:32:67:a0:62:aa:
df:76:c5:48:04:b9:56:6b:dc:31:87:ef:9d:76:89:
26:67:49:e0:7e:2d:c3:60:59:cd:a3:7e:36:89:ee:
92:94:07:94:f0:51:6b:67:e5:7e:67:b5:41:a1:cd:
33:5f:14:47:29:20:41:c1:05:ac:31:1b:aa:79:c1:
c1:84:4b:80:b1:de:08:22:e9:f0:23:5c:80:71:f3:
72:97:a9:fe:b9:0e:1e:7a:30:49:ae:f9:ca:5a:c9:
27:f4:6a:76:65:06:78:3d:e6:81:c3:79:9c:77:03:
35:78:d2:b5:d6:11:4a:d8:41:f6:fb:23:36:9e:60:
41:bf:d5:b5:76:f9:4c:c4:61:82:94:0e:81:12:57:
ca:6d:24:d6:89:28:82:dc:7c:37:1a:4a:a9:08:ae:
6f:0d:1e:c0:3f:cb:6f:62:c3:cb:79:9c:86:8d:91:
00:81:57:78:13:d8:7f:6d:d0:c4:f8:67:4a:7a:83:
9b:f5:ef:a7:0d:f4:dd:c8:a1:b3:80:7e:e6:e8:28:
52:6e:ea:14:99:b5:ef:63:80:e7:c8:0a:3a:cb:d1:
0b:aa:1e:b2:e3:f7:b1:c5:99:1f:ce:8d:2b:8f:d0:
48:db:a1:30:ed:1f:75:6e:5e:15:ee:c8:79:85:2e:
2a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:34:E4:42:E4:1E:6D:FC:23:5F:A1:EB:C1:49:55:7B:40:26:9E:7E
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9f:6e:6a:45:9a:f0:c8:f6:18:d1:2b:cc:5e:42:bc:78:2e:
fb:e4:cd:12:54:18:00:58:bb:fd:ac:3e:73:64:d2:ed:ba:63:
b8:fa:f6:2f:c0:fa:be:fc:f4:a2:9e:94:f4:3d:0f:1b:4e:a3:
78:2d:07:b6:0d:94:66:df:0d:47:b1:af:fc:18:6c:19:5b:e1:
c0:8b:dc:e9:70:7a:cf:71:0a:3e:b4:86:ed:58:7e:f6:5f:01:
7e:bb:94:d0:89:ba:91:4c:c5:f1:94:cc:e2:b9:2a:82:5e:78:
88:8b:2a:42:da:b3:06:db:21:b2:ae:ff:80:52:01:ee:05:ab:
fe:6b:4f:0a:02:17:ba:44:b9:a8:b7:65:46:fc:5e:0e:ae:35:
1a:8c:8b:cd:f6:ad:f3:96:95:17:2c:09:25:68:cc:42:ac:47:
4d:27:23:43:a8:6c:74:86:78:cd:a9:16:6c:ac:55:d8:fa:6d:
1c:28:2d:64:1a:cf:a6:29:47:24:1d:52:25:75:08:5d:dc:3d:
01:7d:46:7f:4f:b9:67:45:95:5f:28:c1:9b:00:97:ca:23:3e:
00:a7:6a:88:41:09:20:d5:08:fd:dc:01:1f:4e:bc:a8:89:de:
0d:d5:bb:ab:b0:88:33:ab:46:33:44:7e:ec:90:c2:fe:3a:c5:
78:98:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:20:31 2026 by rpki-client