Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: Xy5SYGXot2aH3USxiEt79tHnDvsmdu6aLAsWaVPqHBM=
Subject key identifier: B8:CF:F8:7E:C2:21:02:41:4F:57:20:0F:C6:FE:FC:31:11:50:B3:2B
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 01A113AACB227F951AD824D14879420D923F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 03AB
Signing time: Wed 07 Oct 2026 00:02:02 +0000
Manifest this update: Wed 07 Oct 2026 00:02:02 +0000
Manifest next update: Thu 08 Oct 2026 00:02:02 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: Ke3F7PzbcAtrlq4DMgVlJkemefvKKnr0Yzm8EdZ69fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:cb:22:7f:95:1a:d8:24:d1:48:79:42:0d:92:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Oct 7 00:02:02 2026 GMT
Not After : Oct 8 00:02:02 2026 GMT
Subject: CN=b8cff87ec22102414f57200fc6fefc311150b32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ff:83:bc:b9:35:2e:79:bb:b1:7f:66:3b:94:
d2:ef:78:ab:6f:4d:41:14:33:9f:2d:61:c1:11:2f:
39:48:6f:01:52:7f:5f:cd:6f:2d:17:5e:27:26:57:
60:65:5a:bd:f8:18:03:f4:dc:de:00:cc:62:bf:ea:
5c:d1:12:c2:4e:02:55:59:6e:68:d6:f4:e4:54:f8:
83:c8:c0:e8:43:07:01:28:75:93:aa:49:84:cf:8a:
ee:f0:3f:da:a0:c2:bf:f5:22:d5:1e:4a:3d:5d:7c:
aa:63:52:92:8a:40:43:b2:b3:4a:55:10:1b:bd:21:
ff:27:52:e6:fd:ec:38:ce:11:ec:30:ee:95:b8:58:
ef:c7:09:84:7f:37:6c:ea:e4:5f:d1:d6:bb:ee:6d:
bc:0d:9c:1a:c1:84:63:f4:74:e8:4e:a8:4f:ee:9f:
d3:c2:60:5c:3e:74:ed:16:99:64:7f:45:e1:33:1d:
ed:e4:3a:76:c2:91:94:5f:a9:e4:80:85:af:aa:5f:
27:a9:77:4f:77:3a:3c:ed:48:a0:87:9d:b1:6b:e9:
48:29:75:9f:15:84:23:e3:8e:eb:11:67:7b:4a:22:
dd:e0:e9:53:2b:3b:24:8f:1d:b5:91:6b:8c:9c:37:
97:ff:64:9a:35:a5:1a:2b:01:f1:31:01:c0:44:bc:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:F8:7E:C2:21:02:41:4F:57:20:0F:C6:FE:FC:31:11:50:B3:2B
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:44:8e:3c:02:91:d0:70:e2:88:4f:82:c3:4d:3f:cf:95:d5:
eb:6b:cd:dd:26:86:08:32:dc:07:07:08:ed:24:31:a2:6d:a8:
bb:ff:60:8d:39:5a:90:4d:48:64:51:16:88:7f:47:90:99:8b:
eb:a9:55:98:2e:88:4a:1a:f6:ef:92:12:41:37:19:55:2a:19:
1e:ee:cb:db:f6:e7:6a:4c:c6:f4:6e:3a:07:e2:98:33:ad:35:
f6:53:f2:83:94:1b:83:34:d4:0d:10:fc:b2:ad:ac:64:0d:07:
89:ee:7a:af:fa:a5:c3:9c:25:d6:11:6a:fd:df:5b:92:6e:17:
04:71:4f:ef:3a:8f:f0:e7:d2:90:79:27:4d:9d:26:3d:e9:d0:
9f:e9:dd:f3:b9:cc:30:71:96:50:d2:27:df:c6:a0:ff:72:5d:
f5:db:ba:e1:ca:46:93:17:28:42:e4:50:12:7a:71:5e:92:99:
97:88:f3:eb:81:52:8d:d7:ac:8b:9a:8e:77:a3:6b:64:9b:08:
47:a7:c3:87:c2:f9:45:b0:4e:c1:ce:ab:da:15:83:24:46:a8:
bc:33:06:e7:f5:e6:7b:e0:d5:89:bb:e3:73:09:76:d1:82:4e:
ea:73:6a:07:da:a1:c7:cf:a2:c6:90:5f:86:25:34:f0:be:d3:
a8:b4:94:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:58:26 2026 by rpki-client