Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: cR22OkVKYTz9bLxjks7hsHnINP3eKRJMoFVNzYz1M/s=
Subject key identifier: CC:4F:05:AF:8D:93:1E:75:13:9A:F1:52:20:F8:7B:0B:0F:20:FD:C6
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 01A17B16A15D3C3946FC0C88D59FC4633C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 1ADB
Signing time: Tue 27 Oct 2026 02:00:42 +0000
Manifest this update: Tue 27 Oct 2026 02:00:42 +0000
Manifest next update: Wed 28 Oct 2026 02:00:42 +0000
Files and hashes: 1: 1wfrKmBygnPMPT_caNDty45amtI.asa (hash: 37JiuqpaT5MmXAfO1ooAsFeUNVw/PiSLuAn5bIL2jMI=)
2: Tk-vw0OPTHc9dipApYdgFtg8Dnc.roa (hash: rOkLE593RKrLBDVcD6kE+cn2O/S1gntv8KcELVYe+nQ=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: /t9SciyUhl9EUCSUJxtLeyxO5/smjuQTgrOIIAHZl+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:a1:5d:3c:39:46:fc:0c:88:d5:9f:c4:63:3c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Oct 27 02:00:42 2026 GMT
Not After : Oct 28 02:00:42 2026 GMT
Subject: CN=cc4f05af8d931e75139af15220f87b0b0f20fdc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:00:9c:47:30:26:19:70:24:a9:d4:04:52:
15:79:fb:7d:3b:6d:56:9e:a4:27:58:cc:e1:de:f7:
ea:c3:ef:53:6a:cd:d2:b8:5c:c6:9f:1a:e9:19:cf:
8b:46:19:8b:af:ed:b5:06:67:d9:93:81:ed:25:44:
eb:f4:cb:a8:c7:a5:cc:dc:35:00:e3:0a:69:c5:ba:
90:1b:43:bb:c2:ab:c0:02:71:3a:e0:3a:76:7d:78:
2e:fc:d0:99:c2:cc:ed:1e:ab:98:90:d1:40:7f:33:
a2:d0:c1:4a:68:d6:1b:9f:a5:da:46:f0:9f:8f:cd:
d3:d0:a7:fc:c1:c2:64:b1:4b:c4:f8:24:77:dc:39:
2d:56:67:06:19:9a:76:90:74:7e:59:4b:3c:af:2f:
3d:94:1c:85:16:58:86:d8:15:f2:95:4f:23:83:05:
8d:3d:98:95:b5:e4:b5:67:1f:b0:57:d1:5e:0b:0d:
50:08:0d:2e:26:14:c3:83:71:31:ea:40:cc:31:24:
b6:08:e4:be:a2:23:2b:e0:f5:6f:27:a1:74:b0:06:
2f:24:bc:47:fb:9e:f8:21:15:92:cd:0a:ea:7c:2f:
ae:b5:69:f4:65:3c:d2:6f:34:34:17:a5:6a:e2:ef:
eb:b7:0e:6b:98:7f:dc:f7:c4:d9:8c:6e:57:ef:91:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4F:05:AF:8D:93:1E:75:13:9A:F1:52:20:F8:7B:0B:0F:20:FD:C6
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:51:4c:ec:15:9e:7e:06:51:16:3a:44:2a:ee:66:e5:51:80:
20:fe:71:6e:d7:4a:60:b6:71:c2:ab:3e:cc:93:86:b9:f5:d5:
9f:63:48:43:36:52:2f:8e:0b:46:cc:12:8c:8c:3f:76:16:5e:
08:fb:21:27:c3:c8:a4:59:62:3a:7a:89:27:6e:b3:f2:39:93:
cf:9a:11:55:78:07:33:85:21:c8:b2:15:a3:b1:30:42:5f:8b:
be:39:31:37:45:5f:82:7c:c6:e9:98:be:d0:fa:5f:b7:0d:9c:
d0:6e:89:1f:2d:6e:63:0a:99:d8:7c:06:89:10:94:7a:e1:32:
94:1b:47:a0:30:5a:6e:0f:00:17:04:e8:cb:30:15:73:b5:f8:
a0:f0:0d:fe:00:a4:bd:a0:c8:f8:a4:a1:37:2d:36:4b:2e:71:
22:e7:3e:45:4b:ad:a4:23:5c:ad:9b:e9:24:b1:c8:81:12:77:
ba:0e:2f:a5:09:57:cc:f6:f3:93:e6:dc:df:3a:e9:b6:49:21:
92:14:a0:bd:d3:ec:82:dc:73:8d:a5:ac:14:bd:50:b6:86:e9:
c5:d6:3f:63:5d:2a:c3:f8:1a:ee:57:bc:b9:ea:50:89:53:71:
0d:b5:d3:54:bf:1f:b9:08:73:d1:75:16:62:db:53:a7:36:29:
ab:77:3a:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7FqFdPDlG/AyI1Z/EYzwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNDBmZGQ4MmEwZmRmM2I3MGJlMTgyMjFlZWJhNjBkODAx
ZWQ3YmYwHhcNMjYxMDI3MDIwMDQyWhcNMjYxMDI4MDIwMDQyWjAzMTEwLwYDVQQD
EyhjYzRmMDVhZjhkOTMxZTc1MTM5YWYxNTIyMGY4N2IwYjBmMjBmZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw94AnEcwJhlwJKnUBFIVeft9O21W
nqQnWMzh3vfqw+9Tas3SuFzGnxrpGc+LRhmLr+21BmfZk4HtJUTr9Muox6XM3DUA
4wppxbqQG0O7wqvAAnE64Dp2fXgu/NCZwsztHquYkNFAfzOi0MFKaNYbn6XaRvCf
j83T0Kf8wcJksUvE+CR33DktVmcGGZp2kHR+WUs8ry89lByFFliG2BXylU8jgwWN
PZiVteS1Zx+wV9FeCw1QCA0uJhTDg3Ex6kDMMSS2COS+oiMr4PVvJ6F0sAYvJLxH
+574IRWSzQrqfC+utWn0ZTzSbzQ0F6Vq4u/rtw5rmH/c98TZjG5X75GzPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxPBa+Nkx51E5rxUiD4ewsPIP3GMB8GA1UdIwQY
MBaAFM9A/dgqD987cL4YIh7rpg2AHte/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTI3MzctNmEwMi00MjRiLTgyY2It
YTI5Y2U3ZGExMGZkLzEvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OTI3MzctNmEwMi00MjRiLTgyY2ItYTI5Y2U3ZGExMGZk
LzEvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1FM7BWe
fgZRFjpEKu5m5VGAIP5xbtdKYLZxwqs+zJOGufXVn2NIQzZSL44LRswSjIw/dhZe
CPshJ8PIpFliOnqJJ26z8jmTz5oRVXgHM4UhyLIVo7EwQl+LvjkxN0VfgnzG6Zi+
0Ppftw2c0G6JHy1uYwqZ2HwGiRCUeuEylBtHoDBabg8AFwToyzAVc7X4oPAN/gCk
vaDI+KShNy02Sy5xIuc+RUutpCNcrZvpJLHIgRJ3ug4vpQlXzPbzk+bc3zrptkkh
khSgvdPsgtxzjaWsFL1QtobpxdY/Y10qw/ga7le8uepQiVNxDbXTVL8fuQhz0XUW
YttTpzYpq3c6gA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:49:45 2026 by rpki-client