Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier: 6THWFi+q+1A1X/i/5Fjw8HlV0Xt6nPgLZINsDoFUc6s=
Subject key identifier: B2:B1:04:8F:6B:D6:AC:AE:2F:0B:DD:A2:53:AD:09:64:7E:C2:3D:F7
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 01A17B8491BA76D3508441171BB2EA4B5197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 04:00:47 +0000
Manifest this update: Tue 27 Oct 2026 04:00:47 +0000
Manifest next update: Wed 28 Oct 2026 04:00:47 +0000
Files and hashes: 1: gfZXiEYLotV6boFPbDoaI_T0W7U.roa (hash: avmgc9nbF9VaMx5CScU3OE2cuuouIoqjlhBOWJN7x9s=)
2: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: Hb55BGAYKqPDgzBGhD6phrnERckFvLJWOsgr5riuwyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:91:ba:76:d3:50:84:41:17:1b:b2:ea:4b:51:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Oct 27 04:00:47 2026 GMT
Not After : Oct 28 04:00:47 2026 GMT
Subject: CN=b2b1048f6bd6acae2f0bdda253ad09647ec23df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:68:99:43:de:e0:dc:9a:63:18:83:99:99:
92:53:cb:9b:c0:97:35:14:ee:25:8b:89:e2:a2:97:
c1:db:b9:d8:51:54:d6:d9:ae:31:f6:7a:a3:c8:e4:
44:8f:7b:ac:8b:0a:9a:f0:0f:2d:83:a1:d8:9e:a3:
d3:f1:85:e8:f2:3b:72:aa:03:78:0a:bb:ef:a9:e8:
8d:71:3f:a0:6c:45:34:0f:86:05:d0:ac:2c:e3:4e:
1b:4a:1d:1d:12:83:3d:d6:71:17:03:9b:90:d7:42:
af:24:80:f3:fe:1d:b0:2f:4c:d3:21:bc:bf:30:8a:
76:76:32:39:0b:38:b4:f9:8f:89:4f:3d:86:5e:29:
6c:75:69:42:e3:f2:ad:af:82:19:ab:2d:a6:90:b7:
7e:b2:8e:87:34:ea:68:08:f0:22:55:10:3f:7b:a9:
69:86:ce:e8:76:37:f6:9e:ec:84:39:dd:55:53:8f:
80:4b:e5:62:d3:53:a8:2c:e5:01:6e:2e:f8:06:a4:
97:f3:00:f2:29:5b:f2:f6:58:3b:5a:64:47:7e:9d:
9f:8b:b4:e2:62:6a:69:a9:9b:8e:f9:eb:5a:35:c2:
eb:e1:b6:22:cb:c6:d0:07:c5:89:a5:7b:97:8c:c7:
9e:1d:30:48:9b:c3:57:b5:87:0e:aa:71:42:a0:e3:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B1:04:8F:6B:D6:AC:AE:2F:0B:DD:A2:53:AD:09:64:7E:C2:3D:F7
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b1:f6:c8:36:14:a6:e2:d6:c4:87:35:8c:fd:d9:00:1a:fe:
e3:fa:10:d4:41:72:82:78:c3:08:3b:49:cb:40:57:82:fb:7b:
b8:f9:d0:d0:a3:6c:ac:0f:d3:28:37:d4:c7:71:f8:c5:eb:2e:
e8:be:79:66:f4:69:c5:65:0f:28:66:9b:25:44:5d:7c:c0:11:
61:00:74:fa:ff:b7:c8:d2:65:9d:e2:64:32:82:21:79:f9:e5:
8f:a8:92:72:0f:77:ef:fe:0e:28:26:bd:6d:dc:95:a9:c7:de:
08:b5:ae:1d:dd:22:a8:67:da:6a:7b:ee:f6:3a:67:bf:8a:b6:
d3:51:d1:8f:a3:97:80:e2:25:65:b1:73:92:dc:f7:40:62:11:
92:d3:b8:fa:7a:d4:b6:fd:21:47:19:00:f2:d3:d0:3b:61:61:
fe:81:ec:f4:a1:ef:0b:e6:d6:13:a8:1b:a2:22:be:55:f8:86:
41:4e:cd:99:6e:73:fd:31:7e:bb:63:6c:04:df:e1:0c:ca:41:
f9:2c:bc:e4:4d:ed:2e:ed:19:aa:f4:06:86:9d:84:bc:ed:79:
8d:92:85:c4:13:5f:ec:d1:26:87:a6:e3:97:fb:17:04:a1:9f:
63:2f:df:40:6c:a0:28:9b:98:59:ca:66:3a:ca:5d:58:aa:eb:
9a:fc:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:19:07 2026 by rpki-client