Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
File: zNHiiTDXen65iRtvq7spFe44hao.mft (raw, json)
Hash identifier: FIdYIyCNzlACb664B7yTZrP9ZoDvjxOkMgzOjV1vRTc=
Subject key identifier: B7:04:AB:FD:78:E8:A4:F2:3B:42:9B:57:07:6D:A7:FE:D0:F6:7F:E0
Authority key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
Certificate issuer: /CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Certificate serial: 01A17A71C8A2AFB5E1A9EF50DA79D02A76D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 23:00:39 +0000
Manifest this update: Mon 26 Oct 2026 23:00:39 +0000
Manifest next update: Tue 27 Oct 2026 23:00:39 +0000
Files and hashes: 1: _NSxXKWLAT32ACYjnb_Q_v0bth4.roa (hash: jFEG3V9iSls0XRVWy4kyBvsz0M23pnXIeMtJ7lA5i08=)
2: zNHiiTDXen65iRtvq7spFe44hao.crl (hash: NhjxH3JIPN0OZCfCb4pQCAyxf3Ia2JyUmtXkV/1vYng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:c8:a2:af:b5:e1:a9:ef:50:da:79:d0:2a:76:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Validity
Not Before: Oct 26 23:00:39 2026 GMT
Not After : Oct 27 23:00:39 2026 GMT
Subject: CN=b704abfd78e8a4f23b429b57076da7fed0f67fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:b3:cf:04:d0:be:be:4c:1e:d8:1e:e6:47:
ec:f7:f9:d5:9f:ac:f5:0a:d7:b2:fc:b1:5e:04:a7:
f1:c9:a7:1a:8e:18:f3:22:d8:07:38:ec:3d:25:ba:
58:9a:31:05:78:eb:06:64:e3:92:b3:7f:89:a6:b2:
0d:8b:59:0a:2a:60:44:d7:32:76:50:e0:5d:24:14:
06:7a:6b:39:9b:42:ad:80:9e:a1:0e:b1:0f:97:9e:
59:22:79:29:82:98:55:5c:91:da:d2:e8:6a:bb:33:
17:80:27:84:a3:51:0f:18:56:24:24:be:8d:1c:e6:
9b:83:6f:56:64:54:e9:51:b5:a7:30:29:8e:0a:28:
f8:dd:9f:49:8b:21:88:eb:f3:cd:79:33:0b:74:2b:
3e:95:3c:35:a0:a0:a2:f0:7c:73:71:a0:17:2d:11:
fe:ba:c1:ac:33:15:d8:6a:ab:0b:b5:b5:b0:50:1d:
33:4b:df:93:e6:f8:2b:6b:cf:a2:d8:30:75:24:02:
89:9f:02:1c:c3:60:72:60:c8:eb:ba:4b:d5:b3:0b:
86:bb:c2:fa:f1:b6:9c:0d:eb:fb:2e:37:84:5c:24:
bd:d8:67:e7:c8:ac:5d:13:3e:73:96:b0:19:c1:4d:
ba:43:8b:59:c4:65:1e:5c:dd:cb:72:48:a7:1e:ad:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:04:AB:FD:78:E8:A4:F2:3B:42:9B:57:07:6D:A7:FE:D0:F6:7F:E0
X509v3 Authority Key Identifier:
keyid:CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7d:ec:7c:1e:ab:68:ce:1f:d3:88:58:fd:17:77:d5:73:02:
81:04:1d:7b:9e:aa:4b:2f:f5:e0:ba:89:d4:f8:e6:34:5b:22:
43:6a:e7:f4:5b:45:a5:bd:53:e8:f3:94:5d:ea:8d:1b:b8:51:
87:34:08:06:03:9b:e6:fd:9f:9c:84:a0:78:5a:03:a3:54:b7:
fe:d3:63:eb:32:77:0a:d0:8f:4c:e3:8b:bc:be:7f:1e:01:36:
f3:8b:f1:0b:58:b1:b6:bf:d9:d8:f2:c4:25:f2:21:1f:65:1c:
7e:48:53:a6:1c:c2:ad:62:af:7e:47:9b:5a:97:c6:1d:df:ca:
b5:5b:1a:ba:f9:1c:7e:2d:8a:5f:af:46:be:43:f4:2a:87:f5:
f3:90:79:3c:ca:a5:3c:2e:59:68:69:fc:8f:b8:76:65:9f:a9:
82:86:49:a7:97:31:44:3e:5c:29:ec:90:c4:a4:4f:63:5e:2d:
fc:d7:1a:e1:2c:9f:bf:3b:c7:e6:c6:cf:94:89:f7:84:28:d7:
f7:0b:46:aa:67:c6:db:35:30:7e:46:b3:fc:02:27:9c:03:2b:
d1:a4:ef:29:a0:74:e4:6b:c0:3e:b1:33:de:0c:8b:37:bc:1a:
a9:b2:e9:70:77:2d:c3:cb:c2:35:4d:46:14:cc:1b:f1:03:c0:
f3:bd:8e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:49:46 2026 by rpki-client