Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
File: zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft (raw, json)
Hash identifier: cLxlZZzvAIpgcSaRWsdcdDpgrKiuqa+nNAp2oWzcx8M=
Subject key identifier: 1E:03:78:02:5C:B0:67:51:32:4E:B9:8F:A9:88:48:02:75:B8:E2:EB
Authority key identifier: CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
Certificate issuer: /CN=cddce12ae50e80a4534d80f786a824497b26fadb
Certificate serial: 01A17E85D65AEE4E88820759713B48569704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
Manifest number: 01C6
Signing time: Tue 27 Oct 2026 18:01:02 +0000
Manifest this update: Tue 27 Oct 2026 18:01:02 +0000
Manifest next update: Wed 28 Oct 2026 18:01:02 +0000
Files and hashes: 1: pYYR9UI_sLtKcyNmvvaeAyGho10.roa (hash: Visrk6MwePbwviSVCYu3l4j6eSQ3jEUFOOu9154zYk0=)
2: zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl (hash: 1AfVlv3o6RDkjt0XhCLRKNrZMTH48BvbG3KO8tShdag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:d6:5a:ee:4e:88:82:07:59:71:3b:48:56:97:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddce12ae50e80a4534d80f786a824497b26fadb
Validity
Not Before: Oct 27 18:01:02 2026 GMT
Not After : Oct 28 18:01:02 2026 GMT
Subject: CN=1e0378025cb06751324eb98fa988480275b8e2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:ef:34:eb:9c:6f:ac:dd:1d:db:d0:91:bf:
71:f7:a9:e7:cc:bb:50:90:b1:b9:c4:6a:36:56:84:
16:1a:7e:eb:03:99:cf:46:29:ac:ce:8d:96:b8:1a:
bd:9e:bd:e6:44:91:58:a0:0d:66:7b:41:a1:5e:c4:
81:4b:80:f3:a2:e3:39:55:90:b0:fd:40:ab:e8:df:
20:bc:be:bf:86:c2:bc:e4:71:fc:0b:ff:63:04:9a:
da:b0:1f:88:2a:b3:15:91:fb:cc:c9:f8:11:7c:a9:
90:32:fa:cb:f6:d3:b5:78:9e:29:c8:ac:6f:b6:e1:
df:6e:2d:04:e7:1a:c2:aa:43:9a:15:6b:b5:c2:56:
0f:93:ab:33:8a:98:2d:6a:77:a7:ea:2c:bf:d0:db:
9d:7f:4e:7d:9b:f5:93:57:cb:9a:23:cc:53:11:c6:
fe:9b:b1:31:02:90:68:cc:cb:eb:24:a2:a1:7c:1d:
e2:46:f8:99:2b:74:5e:7f:3f:cd:e5:81:a6:8d:ea:
6d:23:a8:2f:93:31:70:86:ff:ab:31:60:b2:ed:67:
bb:a1:4c:49:7f:15:fe:dc:a1:2e:73:cf:12:40:85:
dc:83:ec:25:c2:a2:d9:2d:96:86:94:cd:d0:e3:79:
07:2e:47:f5:66:ea:52:0e:f1:8b:af:f3:da:aa:7d:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:03:78:02:5C:B0:67:51:32:4E:B9:8F:A9:88:48:02:75:B8:E2:EB
X509v3 Authority Key Identifier:
keyid:CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:11:fe:0f:f9:0b:05:f7:2c:59:b3:fb:ea:74:90:f0:47:79:
8d:2f:90:58:0f:60:fd:65:f5:3a:04:61:41:a1:ee:d5:27:f3:
7f:c3:cb:8c:98:3c:23:f4:4e:73:44:0f:e5:b0:10:19:5b:b0:
91:96:e4:da:14:7b:a6:78:2a:79:42:7f:7e:b4:80:51:4f:7a:
af:ed:34:85:59:f7:21:af:d8:4d:bf:6a:53:72:61:30:3e:15:
1d:3c:5c:51:d5:55:73:38:3d:1a:23:1f:d4:ca:b8:77:c8:68:
5c:17:1a:8b:9a:27:35:39:6b:c5:52:2d:a3:af:63:7e:e3:a7:
1e:a4:98:4f:a4:a3:88:21:db:4d:25:28:31:58:14:8d:21:4e:
e0:79:f0:54:42:0f:7f:dc:61:a5:9b:28:0c:8c:c5:1c:62:7f:
17:a5:f1:fb:58:eb:d3:ec:d5:cb:d8:e0:fa:aa:6e:cb:6e:7e:
8e:b0:20:66:4c:3c:2e:c3:f8:94:91:cf:2b:21:1a:5a:3a:5c:
fb:f0:a4:e2:98:96:f9:ca:02:bd:e5:5f:7f:54:71:00:72:a8:
cd:4c:1d:02:e6:d2:d8:8d:8a:f4:3c:06:80:e7:e6:e1:c3:c5:
fe:a4:17:e1:bc:c8:3c:bc:65:75:96:c2:dc:25:0e:26:f2:80:
3e:45:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:44:12 2026 by rpki-client