Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: x8J1cAee+bqSrPWjnYBnmyaNCd1ogIimHJSEyRkfq1c=
Subject key identifier: 6B:A5:2F:F6:A3:68:00:DC:4E:EA:7D:73:87:2F:64:7E:1A:5B:EF:45
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 01A17C29748728CF15B14872F3FE0DED99C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 1407
Signing time: Tue 27 Oct 2026 07:00:53 +0000
Manifest this update: Tue 27 Oct 2026 07:00:53 +0000
Manifest next update: Wed 28 Oct 2026 07:00:53 +0000
Files and hashes: 1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: PVRXNbzOk8xUi7fHLDxSBAW9N4kYtZ56/e37QmnG5HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:74:87:28:cf:15:b1:48:72:f3:fe:0d:ed:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Oct 27 07:00:53 2026 GMT
Not After : Oct 28 07:00:53 2026 GMT
Subject: CN=6ba52ff6a36800dc4eea7d73872f647e1a5bef45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:7d:67:26:16:a5:7f:a7:42:11:ac:61:f5:
ef:6b:11:ff:88:2c:75:78:1c:9b:5e:96:82:ae:74:
34:1d:70:b7:9e:56:af:4e:33:80:40:d0:55:b5:79:
c3:e1:18:c5:47:81:7f:68:16:8d:70:99:ff:97:6f:
66:46:da:51:52:a5:b0:12:b5:bf:1a:bd:08:23:d2:
72:e9:5d:30:76:cb:b9:66:2e:7c:e1:38:b4:52:af:
3d:4c:df:6a:7e:f4:ab:49:9a:30:ca:f5:85:96:30:
48:3c:07:4c:0d:97:0d:b2:96:20:f9:a1:e6:c9:c2:
a0:a4:77:22:41:a2:e0:75:b8:9e:3e:01:1b:3f:1e:
02:27:61:b6:38:7f:5d:3a:26:8d:42:dc:be:a9:f3:
56:f2:1d:cc:e9:fa:2e:92:21:92:d1:bd:3b:e7:fe:
d3:02:d3:f3:c1:16:bf:80:8b:15:bc:74:32:3f:a3:
88:80:8d:db:81:b9:f5:de:81:cd:56:2c:d4:4f:b6:
a6:38:00:6e:19:95:21:52:c5:01:45:0a:54:cd:69:
ef:b6:ac:1f:7b:f2:b2:40:a0:01:77:5f:ff:0c:e5:
2d:37:ef:db:68:5f:d9:f8:d4:5f:66:bc:a1:36:69:
06:10:02:08:16:17:83:e7:1e:78:0f:71:8e:88:b0:
84:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A5:2F:F6:A3:68:00:DC:4E:EA:7D:73:87:2F:64:7E:1A:5B:EF:45
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:25:11:97:d3:22:04:5a:ae:d9:1b:b1:67:85:6a:0f:4a:7a:
83:76:08:37:c9:8f:d3:79:d9:ce:be:d9:28:04:6a:70:3e:82:
78:e7:b6:30:ba:3f:2c:fb:58:d6:06:f7:d2:d6:83:85:41:fd:
e2:1a:b9:7a:5a:fc:d7:9a:0b:86:5e:a7:16:c8:b1:9f:22:da:
fb:6f:d6:47:8d:0c:aa:d5:38:e2:5c:20:f8:b1:1d:8e:4c:56:
97:96:96:d1:ff:36:1b:ec:46:5f:3a:ad:f7:88:05:d2:0c:b0:
c3:25:aa:26:42:8c:8a:8b:63:d4:0b:ec:55:54:39:b9:e2:78:
a5:e4:ee:05:c6:7d:10:d9:0e:f5:e6:db:d5:b8:6b:14:58:7e:
57:68:3c:16:e1:1e:a0:74:4e:14:b5:3a:ce:17:e0:f6:83:39:
68:3b:90:a4:2a:7e:4d:80:ec:18:56:0c:20:1e:6d:5b:9a:30:
62:ba:4c:ff:c2:29:2e:7a:1c:35:89:69:5c:49:ef:3e:34:88:
d8:e5:dc:65:d5:4b:29:09:ec:62:8e:4d:66:85:70:89:60:b6:
96:35:36:28:0e:28:4b:a3:e4:89:14:69:4e:3c:6d:fb:a8:1e:
0f:70:ec:72:9a:da:0e:6d:a0:d7:1f:a5:d9:b6:c6:b7:b8:0d:
1d:2f:d9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:35:10 2026 by rpki-client