Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
File: zNHiiTDXen65iRtvq7spFe44hao.mft (raw, json)
Hash identifier: ijgR6fokUQL1NFhOwwqTK8VmpboTSCQWqEaX24I+NMs=
Subject key identifier: C7:EA:88:B2:FF:2B:04:F2:34:B9:6D:3F:51:1B:1E:79:E0:7F:AB:50
Authority key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
Certificate issuer: /CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Certificate serial: 01A08ED6D1EFDB67DFB6F50F15821DE251E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
Manifest number: 1A4B
Signing time: Fri 11 Sep 2026 05:00:38 +0000
Manifest this update: Fri 11 Sep 2026 05:00:38 +0000
Manifest next update: Sat 12 Sep 2026 05:00:38 +0000
Files and hashes: 1: _NSxXKWLAT32ACYjnb_Q_v0bth4.roa (hash: jFEG3V9iSls0XRVWy4kyBvsz0M23pnXIeMtJ7lA5i08=)
2: zNHiiTDXen65iRtvq7spFe44hao.crl (hash: PMv/waRZivEwSzYU8+sLsVZC2lJFTj7aLyEbzlaRkm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:d6:d1:ef:db:67:df:b6:f5:0f:15:82:1d:e2:51:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Validity
Not Before: Sep 11 05:00:38 2026 GMT
Not After : Sep 12 05:00:38 2026 GMT
Subject: CN=c7ea88b2ff2b04f234b96d3f511b1e79e07fab50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1d:80:b4:24:0c:5f:a3:a1:71:03:f5:7f:1e:
42:d8:0c:c0:86:b2:9c:4e:73:59:8c:ec:bd:af:cb:
4f:94:f6:46:7f:a5:1f:6d:08:30:5e:98:d4:05:52:
9c:43:4d:44:87:c7:3d:dd:1f:c6:35:cc:b7:f2:ce:
92:42:e2:85:9e:14:00:fe:42:6b:41:96:2f:3e:cc:
64:d1:e4:fc:bc:88:c1:00:ed:79:90:b8:6b:3c:e6:
2c:bf:f6:5c:9c:df:e4:8e:38:ed:2a:dd:fb:79:2e:
3d:52:7d:3a:a6:77:95:fd:7d:8c:ca:60:dc:ef:08:
9c:b2:fb:8b:29:6c:7b:52:7b:60:8b:02:91:c8:8d:
b9:7b:19:8f:23:76:b4:65:92:09:f6:a2:49:db:0c:
c3:c3:8e:86:5e:0b:ea:ca:c1:85:31:08:6d:ec:10:
71:2f:08:14:2f:92:7e:db:d3:a6:12:94:86:70:24:
95:9d:97:37:a5:2e:71:ea:f1:53:06:88:77:c8:d4:
f1:e3:63:3a:b4:17:67:d8:78:8d:46:63:a3:7e:cf:
9c:12:9a:30:f2:a6:4c:47:72:56:30:bc:ef:5b:ea:
96:38:7b:eb:87:12:06:83:29:95:91:cc:0a:a2:61:
a4:00:25:82:12:12:61:be:65:78:36:9b:41:14:60:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EA:88:B2:FF:2B:04:F2:34:B9:6D:3F:51:1B:1E:79:E0:7F:AB:50
X509v3 Authority Key Identifier:
keyid:CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:87:0b:2f:e7:00:84:ce:97:c9:4b:dd:ab:b5:5d:ce:bd:3a:
0a:f5:d5:1d:e6:78:e9:2c:fa:77:fb:19:8e:06:7e:34:b0:fb:
65:b4:55:75:d4:90:65:f4:56:04:77:10:33:11:0b:5f:b4:4f:
25:1b:ac:7b:7f:8e:d4:bb:09:b6:45:24:b7:71:88:30:91:9c:
d1:ad:03:72:62:34:0d:63:0e:87:3d:ed:0d:d9:3b:ad:4c:ca:
92:47:d9:f1:18:85:94:8a:06:98:82:f8:4e:50:97:f8:95:12:
a1:35:24:84:11:40:15:fd:52:fb:03:76:24:1d:7d:cf:b6:15:
7d:51:c1:77:58:70:4a:6b:19:34:0f:ec:16:bc:f8:2e:00:22:
d5:a6:2c:de:a6:ff:4c:a5:4d:4d:b6:36:aa:6c:29:30:d8:0c:
dc:f0:9a:36:28:61:1e:68:ba:80:0d:4d:2a:a1:85:49:b0:1c:
e1:a2:eb:14:e4:b8:dd:a3:ef:88:6f:23:8f:39:02:16:ce:84:
5c:df:71:f7:5a:3d:ae:66:62:02:d7:8a:a0:81:89:97:42:db:
0c:2b:a6:69:b6:69:18:11:b6:2d:59:dc:0a:c5:bf:c6:ed:b1:
71:fd:8f:36:be:e6:dd:8b:23:ec:9d:0b:d5:33:ed:21:5a:81:
dc:ed:15:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:22 2026 by rpki-client