Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
File: zNHiiTDXen65iRtvq7spFe44hao.mft (raw, json)
Hash identifier: wLYn+MCSBLXUiSKSJQeTeOZSQQEwMi5ZrRcODoGP8fI=
Subject key identifier: 0A:7F:63:77:35:34:8F:E7:F7:F5:FE:2D:3F:1F:5D:2D:99:4E:9F:A5
Authority key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
Certificate issuer: /CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Certificate serial: 01A17C60736748BE50699D4E0A0B0779B053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 08:00:58 +0000
Manifest this update: Tue 27 Oct 2026 08:00:58 +0000
Manifest next update: Wed 28 Oct 2026 08:00:58 +0000
Files and hashes: 1: _NSxXKWLAT32ACYjnb_Q_v0bth4.roa (hash: jFEG3V9iSls0XRVWy4kyBvsz0M23pnXIeMtJ7lA5i08=)
2: zNHiiTDXen65iRtvq7spFe44hao.crl (hash: LUJNc71JkYnFLC47p+WSCO6Zl4jxzsy0dOc7ccv5wx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:73:67:48:be:50:69:9d:4e:0a:0b:07:79:b0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Validity
Not Before: Oct 27 08:00:58 2026 GMT
Not After : Oct 28 08:00:58 2026 GMT
Subject: CN=0a7f637735348fe7f7f5fe2d3f1f5d2d994e9fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:a5:0e:8b:7e:bb:19:d4:b9:e3:cc:0e:62:
33:64:e1:a7:43:89:56:de:c2:25:98:da:d8:32:25:
d7:32:51:26:40:8c:9f:f4:5f:69:20:c3:48:2e:94:
63:ad:1a:35:72:7f:f2:79:76:b2:5b:62:ea:10:db:
5f:80:a3:9c:a7:06:57:ad:44:c1:f2:74:b0:31:f6:
85:11:42:d4:8f:50:6e:86:ce:fb:0e:f4:17:78:87:
ec:21:37:25:c6:89:aa:93:fe:76:52:a6:66:07:ac:
8f:8f:46:69:3a:db:d0:00:99:9e:8a:e8:f3:bc:4f:
04:e6:15:c2:7d:a1:ee:d2:d3:e0:21:70:fb:8c:7c:
a5:57:34:42:d0:d7:af:d0:4d:ee:2b:ab:08:4f:45:
10:e4:e0:95:4a:ff:35:87:6b:5f:56:95:a1:c3:56:
fd:d3:6e:ed:fe:64:7b:b3:8d:74:1d:63:4f:5b:05:
cc:13:15:b4:61:95:cd:45:92:16:f4:2e:85:0c:28:
3b:3e:4b:a9:9b:01:fd:24:46:06:18:f7:32:62:ee:
a3:c7:43:86:cb:d3:8f:12:3b:52:6a:f0:30:c5:11:
8d:b7:19:23:91:66:6a:43:0d:92:fb:78:0c:27:b6:
7b:fc:f8:d6:8d:1b:a4:96:bb:68:c1:a8:ef:96:6f:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7F:63:77:35:34:8F:E7:F7:F5:FE:2D:3F:1F:5D:2D:99:4E:9F:A5
X509v3 Authority Key Identifier:
keyid:CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:67:98:03:41:14:23:72:da:73:68:9b:c2:c2:f4:35:c4:48:
a8:e3:8e:fe:92:2d:96:3b:2b:d5:e0:f9:65:40:75:03:6a:22:
78:c6:a0:5a:0d:89:3a:08:33:b1:aa:f7:fd:17:ca:02:47:4b:
70:dc:0d:cc:80:ec:f1:b0:96:88:2e:7d:a2:be:7b:6e:d2:e6:
c6:d2:16:f3:e8:d7:cc:47:c6:5e:7e:51:45:af:bf:5e:37:ca:
c8:ae:80:4b:fd:ff:d0:92:be:77:f5:f0:b8:92:87:fc:1e:6e:
f9:bb:28:2b:29:c2:df:51:86:74:3d:b4:0c:06:3d:75:53:b2:
67:c1:44:4d:8b:fe:5d:8a:3a:a5:c2:c7:c2:6c:7a:c8:42:8d:
ae:46:d6:c6:1b:9a:c7:bd:9b:9e:09:b5:92:cb:bb:0e:db:13:
a4:8e:ad:53:67:0f:c4:c2:51:34:e6:60:58:17:b1:d5:84:e7:
49:7d:40:48:4d:ef:4c:9b:fd:73:9b:d6:98:be:b3:97:67:b3:
6c:6f:33:0d:d6:f3:3c:5a:19:99:b1:aa:46:bf:39:8f:d1:63:
db:ab:34:49:6a:c0:23:d7:9a:7e:59:e9:4a:90:31:35:e3:6e:
8e:7c:58:f6:c6:5f:de:46:6e:8f:6c:53:28:fa:1e:4e:20:f1:
87:d1:49:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:43:23 2026 by rpki-client