Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File: fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier: cNiVYRNq+mRsAExaWFSFYmQLKdcfrk84Dmuo6bf4Ii8=
Subject key identifier: 2C:F8:B4:8C:9B:46:76:89:81:BF:B9:A4:5B:98:00:FA:8F:21:CA:57
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 01A17DE4721CC1B4C80C9CCFE95D006A82F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number: 11EF
Signing time: Tue 27 Oct 2026 15:04:45 +0000
Manifest this update: Tue 27 Oct 2026 15:04:45 +0000
Manifest next update: Wed 28 Oct 2026 15:04:45 +0000
Files and hashes: 1: 0-zqWRDfovt3b4p9y8JgIjv0YBU.roa (hash: YD1IWCqMeXO/wXuliv1MIN2Qt6x10gvHhFw3D+WLG3Y=)
2: Q69BGamqP9_WoNnMCdnt1bm0Zuk.asa (hash: vaww5N01JjWWsrnL1Alu05fhe0e30iMVsw9GtNm8F+s=)
3: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: Qxy/VLDzK/3LNIn9zHXZuMgRXT/6gfwxiA3vPYo/sGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e4:72:1c:c1:b4:c8:0c:9c:cf:e9:5d:00:6a:82:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Oct 27 15:04:45 2026 GMT
Not After : Oct 28 15:04:45 2026 GMT
Subject: CN=2cf8b48c9b46768981bfb9a45b9800fa8f21ca57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:48:72:7a:90:11:d0:91:6d:87:d1:9b:1f:83:
76:9c:fe:08:b2:8c:49:93:fe:15:5b:86:ec:9d:36:
fa:7e:6f:71:85:b0:21:83:3b:9e:16:c5:4c:81:fd:
73:b3:87:83:21:ce:94:61:7f:da:5e:9e:4e:6f:f9:
c0:c3:77:32:83:a4:0b:50:3d:99:03:30:32:2e:a5:
51:89:30:bc:8a:e2:27:a8:b8:1f:35:f4:6e:7d:03:
e1:6f:c1:b1:f5:dc:a8:e5:31:10:cb:93:3c:be:bd:
47:8d:70:c8:d0:b8:70:2f:8a:da:5c:a7:93:ca:ca:
d2:2b:5c:6e:bb:b9:91:2a:6a:97:66:66:ff:4f:91:
5c:21:47:d2:4d:0a:f8:27:8b:19:62:cc:04:9d:e2:
42:34:b0:ed:75:51:f0:8e:6b:59:04:51:b3:9f:d0:
77:64:c8:ca:0b:4f:40:70:33:46:3f:5d:87:9e:e2:
22:3c:49:93:57:a8:f2:43:d9:7f:d4:7c:b8:d6:35:
25:f4:f8:3d:40:7d:dd:89:b9:29:21:a6:f6:ff:98:
03:a3:ac:bd:83:5a:c0:34:ea:bc:82:76:38:21:2e:
29:6e:9f:19:5f:88:8a:d3:14:d9:7a:e2:0b:6a:f7:
38:35:13:31:cc:41:4e:7a:5e:a9:87:55:ba:c5:ba:
f9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F8:B4:8C:9B:46:76:89:81:BF:B9:A4:5B:98:00:FA:8F:21:CA:57
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:30:71:c0:59:37:6a:55:0b:95:15:f4:2c:64:5c:c5:5d:56:
1d:ba:cb:8f:7f:5f:eb:c5:0e:44:bf:7b:a6:58:18:59:53:1b:
8e:7f:50:a9:7c:6c:ac:9b:33:d2:7a:e2:ca:4b:29:d7:13:c2:
07:41:ec:b3:90:a3:3a:62:8f:5d:5b:b5:d1:39:e2:7d:b1:68:
44:0d:16:a3:e4:d5:22:36:82:f7:dd:f8:9d:50:32:ce:df:e4:
98:98:cf:1b:e3:40:58:79:21:ee:89:44:99:d1:85:b2:1f:b4:
27:cb:e1:3a:7d:16:96:d3:f9:ac:43:ff:34:71:34:81:19:cf:
9f:2b:9f:d2:1f:76:44:69:6e:9b:a8:23:9c:82:29:cb:5b:4e:
78:3f:f1:fc:c2:d3:e6:15:7b:b1:7d:8b:9b:46:49:bb:d1:df:
c2:5c:78:06:e8:b7:1e:78:97:82:1e:8c:a3:fd:29:f2:29:b0:
ee:7d:16:dd:20:32:95:9d:de:b8:6b:4c:db:22:20:96:59:6d:
d7:42:38:97:be:e6:48:da:f3:68:08:ee:36:c8:1e:fe:c2:e9:
0e:f8:ed:29:bf:bb:0f:ee:5a:ea:12:94:44:8f:d3:55:6c:ac:
a7:63:5c:dd:22:6e:bd:6d:bb:37:32:a2:d9:50:51:a8:f3:ef:
09:0e:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:51:03 2026 by rpki-client