Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier: 5Gqg7TedHUAKmD2qRK4t130VuQKI+by0mfZ8lfLiyJM=
Subject key identifier: 0C:CA:D4:76:D2:F2:AA:5F:A6:B1:B8:D8:69:9E:8A:09:C6:61:BC:B3
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 01A1A939B0D8382B70BA2EBF6C5B86D46FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number: 1ADD
Signing time: Thu 05 Nov 2026 01:01:32 +0000
Manifest this update: Thu 05 Nov 2026 01:01:32 +0000
Manifest next update: Fri 06 Nov 2026 01:01:32 +0000
Files and hashes: 1: 502RJFuHYsVVdsk5nlBdFZUnjzA.roa (hash: J6t8qFuhu7mWQDizillanFkdE0VQubG3/+wxJ1PTiNE=)
2: H5WGDRV0Cja1HIG_Gz5Hy5IDN2I.roa (hash: xT+WKT5cnc3Ep9zj5B/hCN7Fut8wkjVPD70bqm1rWyw=)
3: N3w2YmGANLSdSH-pmW22BuKUUBA.roa (hash: uB29W9OdRAZ7PHwh9T8cMIQuzRXrkCYKeRnBEx1cojA=)
4: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: JCo7cQ+5KmJpvmkk5Oe1219Bn67LwSnLj96k8wgZxMg=)
5: ehC04eDurG--NxqYOKej5J5_Mkc.roa (hash: awoH3KlHVYA/xFgpcE34EbkUxOAICljJqKoGjg1R2VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:39:b0:d8:38:2b:70:ba:2e:bf:6c:5b:86:d4:6f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Nov 5 01:01:32 2026 GMT
Not After : Nov 6 01:01:32 2026 GMT
Subject: CN=0ccad476d2f2aa5fa6b1b8d8699e8a09c661bcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:9c:86:ec:55:17:eb:c3:e3:4d:ec:b4:f3:
d6:64:88:1c:a9:69:0f:53:be:64:7e:0a:fc:a3:35:
0a:11:0f:55:cc:16:40:4a:f9:52:1f:38:00:9b:37:
ea:e9:2d:8c:7a:73:e9:d6:af:dc:c9:b6:04:d6:5d:
87:c7:bc:2e:7e:3b:da:7a:40:d2:77:c9:cf:9e:e3:
b7:d5:25:9b:d1:a1:03:b1:1a:18:5b:59:12:bd:7c:
05:6d:e4:44:8d:83:71:e2:4d:45:0c:9e:23:d7:8d:
db:6a:f6:ff:9c:72:e7:93:75:b6:a9:f3:32:06:53:
7c:97:71:94:27:18:85:81:a0:c6:af:61:ff:85:a2:
25:9d:4a:08:f9:2d:96:a1:9e:66:4c:1f:a7:fa:b1:
e3:c7:07:e5:85:03:b7:8f:1e:df:a3:9b:41:65:b3:
c4:5b:ae:7b:ba:4b:c8:17:ad:67:a3:30:89:3e:91:
5e:29:60:45:66:de:74:b3:05:dc:80:09:38:49:38:
e8:b5:1c:90:a9:d2:55:7e:48:48:26:ba:89:d8:7d:
ea:de:dd:7f:32:c9:7a:e6:58:92:f4:6d:85:1b:63:
c1:84:02:5f:1a:de:48:82:91:ab:47:16:dd:6c:0a:
57:44:47:b2:f6:d6:19:1e:08:4e:50:cc:67:fd:63:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CA:D4:76:D2:F2:AA:5F:A6:B1:B8:D8:69:9E:8A:09:C6:61:BC:B3
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f8:55:8c:41:37:76:53:fb:a6:4e:bc:90:ec:29:84:c4:a7:
27:e5:79:fb:91:d5:5c:89:55:3b:b7:dc:60:48:b5:4a:02:ba:
11:91:a0:b4:d4:99:7b:75:c3:e9:80:ef:72:aa:fd:69:f3:2b:
04:b6:6e:ef:9b:b4:41:ab:7a:4b:61:e7:1f:91:0b:5c:40:ea:
3e:9a:72:86:30:f1:be:d4:c2:6e:1e:03:a4:6a:ec:9b:26:c2:
26:4d:b4:31:46:48:a5:f0:f1:50:bb:f0:07:25:16:0e:28:96:
80:83:28:5a:8a:2a:3f:72:34:14:82:09:39:da:53:0d:57:de:
4c:fe:1b:fc:ab:83:4e:b4:a1:6e:72:8e:6a:42:6c:15:6c:e9:
fc:66:cd:cb:96:7e:69:d3:11:ed:aa:f8:2c:27:45:ea:21:1b:
9c:db:05:4a:a3:38:ca:45:9a:4c:df:e5:81:1e:e1:8d:61:45:
a3:66:98:7a:fb:e0:65:cd:ab:1b:0e:36:80:a7:85:84:f3:c0:
79:d7:aa:98:34:5b:6e:b3:c3:9d:e9:eb:b9:44:c4:65:46:7a:
65:0e:b1:b0:2f:80:06:55:3c:47:28:34:3e:e8:6f:e2:3d:a8:
4d:0e:22:5e:bd:1b:f7:9a:ca:17:10:83:2e:6e:ca:d5:ef:37:
a5:24:84:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:18:31 2026 by rpki-client