Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
File: zIiKpmyEAKHmQJxdzFDr17jkMF0.mft (raw, json)
Hash identifier: zd8Hi+eiGJsz8gF1quTJN86AObbopafCOtWSDXq6EbM=
Subject key identifier: 35:90:BE:58:29:F1:91:D7:2E:75:42:C4:42:4C:61:51:84:7B:E9:12
Authority key identifier: CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
Certificate issuer: /CN=cc888aa66c8400a1e6409c5dcc50ebd7b8e4305d
Certificate serial: 01A01FE7AD6CB5624039570A4754C58DB6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
Manifest number: 015B
Signing time: Thu 20 Aug 2026 16:01:11 +0000
Manifest this update: Thu 20 Aug 2026 16:01:11 +0000
Manifest next update: Fri 21 Aug 2026 16:01:11 +0000
Files and hashes: 1: Cj6_o8sOiBgjNnzgImvX4eLilBo.roa (hash: GWj4PVam61KpU/B7S3H1nczjNuFdlEmDrmCiC34iMTA=)
2: IQgUFXohTVi2Y4XfWtFJarOT0q4.roa (hash: J2MJLqrQ5YjNoDasd1MZixNZt0/WlW4h/Wdqx4ZC4tw=)
3: wQGsS70JXw7EzI_ohYX-ZhN3HWk.roa (hash: V9wby/6/IQHqv6ZSSWsMOjiXOYqBXSyK8u1dRZnHf0A=)
4: zIiKpmyEAKHmQJxdzFDr17jkMF0.crl (hash: IbPmIovsZ1n5Guw153HYWCFSIwLHfkzeEt7uhI/NQm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:e7:ad:6c:b5:62:40:39:57:0a:47:54:c5:8d:b6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc888aa66c8400a1e6409c5dcc50ebd7b8e4305d
Validity
Not Before: Aug 20 16:01:11 2026 GMT
Not After : Aug 21 16:01:11 2026 GMT
Subject: CN=3590be5829f191d72e7542c4424c6151847be912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:aa:d1:bf:47:54:b8:5b:5f:b0:62:87:bc:
85:1f:2c:81:6f:35:b2:f6:8c:9b:a6:5f:64:00:7b:
3a:6f:b5:43:dd:47:3b:80:a0:2b:ff:fe:68:cf:ae:
a5:d2:7e:ba:cd:a1:a7:46:70:e5:a7:e0:68:b6:a6:
51:0b:11:83:6a:67:bc:d0:d2:64:5f:12:3d:cf:20:
0f:b4:e4:57:96:36:4b:a0:02:b1:e6:97:ce:4a:35:
48:e6:ef:88:2d:23:fd:3a:91:e6:ff:51:10:49:15:
6c:01:5f:91:77:2b:41:b7:a3:a6:bd:03:0e:49:f6:
f3:bf:74:b6:41:3f:42:0f:0a:2e:5a:99:8e:61:d1:
ec:15:ea:e7:5e:ea:a1:ea:f1:3d:5d:7c:f6:a6:2d:
fe:3d:0d:7d:0b:c4:8d:58:43:a5:f9:40:25:8d:cc:
76:56:7c:45:3d:1f:7d:02:a3:c7:47:f9:8d:03:6b:
37:86:74:50:16:73:3d:b9:35:71:97:28:93:e7:99:
e2:c0:a9:bb:5b:fb:3d:db:55:38:a8:09:67:4d:09:
95:1b:e5:26:8c:db:28:5d:69:0d:d9:7c:74:8d:18:
db:98:bf:a9:57:dd:3c:af:f9:c2:49:65:04:b7:e5:
59:f0:27:1c:2c:46:d2:8b:7a:a4:3d:4b:a3:74:ae:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:90:BE:58:29:F1:91:D7:2E:75:42:C4:42:4C:61:51:84:7B:E9:12
X509v3 Authority Key Identifier:
keyid:CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:94:11:b7:ca:f2:2d:83:b2:3d:86:34:8c:d4:7d:9e:00:90:
84:45:65:f6:39:76:26:69:7e:d4:92:bb:f7:1e:ca:ce:d4:eb:
34:0a:4d:49:b4:19:22:83:42:03:53:5e:74:41:20:13:c0:1e:
0c:c0:67:38:53:25:50:7c:ef:ed:2d:a9:86:7d:0e:96:c0:be:
3a:e3:92:38:15:eb:cf:47:7d:bb:f7:07:39:5e:d2:80:21:68:
17:19:bc:9f:99:61:f2:41:ff:19:07:c6:fe:9e:53:bb:f0:85:
50:91:10:2e:9f:e1:51:0c:5c:ee:bb:ed:e5:f4:94:38:f3:4f:
92:b7:88:26:82:c0:e5:0a:50:44:4c:b2:2e:fa:a6:df:4c:2e:
b0:d7:32:54:77:c5:0d:4f:11:96:12:30:1f:47:a2:4d:4c:e2:
11:d1:8e:1b:b7:56:65:05:36:df:85:09:d5:9e:8e:7c:de:cb:
af:b6:ba:0c:b5:a7:20:70:e0:2b:c4:6f:be:5c:fa:ce:87:6f:
eb:9a:9c:44:47:f9:a8:c6:d2:b7:4f:5c:3c:60:10:24:6e:b6:
cf:e5:11:64:61:87:f3:4a:9c:9c:43:35:a7:47:79:46:f1:82:
a4:cc:81:a1:09:7d:cd:c9:20:e7:96:90:aa:4d:cd:94:55:ca:
48:68:42:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:55 2026 by rpki-client