Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft
File: zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft (raw, json)
Hash identifier: ikSE31EcVvDVmHS3GnftOGTB+nTqIPXQpH75Vb5/Wy8=
Subject key identifier: E3:DE:C6:8B:49:8E:BE:48:06:44:B3:59:26:BF:A2:34:AC:44:1C:AA
Authority key identifier: CD:97:32:4F:B2:60:67:E1:49:06:EC:F0:6C:AB:73:9F:98:9F:A6:AE
Certificate issuer: /CN=cd97324fb26067e14906ecf06cab739f989fa6ae
Certificate serial: 01A181BDE7D6CD8B966013B45BC58C6E4E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft
Manifest number: 7F
Signing time: Wed 28 Oct 2026 09:01:08 +0000
Manifest this update: Wed 28 Oct 2026 09:01:08 +0000
Manifest next update: Thu 29 Oct 2026 09:01:08 +0000
Files and hashes: 1: HAgD-6lzARBUZEheRfE_VYTGH2E.roa (hash: UTf/mQA4tg3Niv2O7+oPEbWjLqeqIgO8fCv9i/kovK0=)
2: zZcyT7JgZ-FJBuzwbKtzn5ifpq4.crl (hash: 5RmKgTYdWBbmqiFh2rfnSra7wXSSroN5L6iuiJyWfEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:e7:d6:cd:8b:96:60:13:b4:5b:c5:8c:6e:4e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd97324fb26067e14906ecf06cab739f989fa6ae
Validity
Not Before: Oct 28 09:01:08 2026 GMT
Not After : Oct 29 09:01:08 2026 GMT
Subject: CN=e3dec68b498ebe480644b35926bfa234ac441caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:1d:67:19:e9:88:27:1e:1e:f1:97:e9:a3:
fb:ca:63:7e:85:ed:b5:54:f3:b5:09:69:ac:4b:10:
9c:89:5b:ee:ed:f3:e9:4f:f8:f6:37:5d:f3:a0:c1:
3c:a3:e1:50:7d:fb:f6:9d:a3:59:ef:46:79:6a:87:
19:18:27:cb:63:c9:6d:56:5f:14:73:b4:2d:28:e2:
a9:ca:22:d9:c7:27:20:35:d5:21:4f:3e:b9:ed:0e:
8a:59:39:69:d0:60:87:4e:b3:f2:ed:0a:81:fe:13:
e7:4e:03:8e:0a:79:9e:fe:0d:29:fb:cd:e7:94:d6:
bc:63:ef:2b:43:8f:2e:c2:18:3e:cb:9e:c3:36:13:
f4:75:8b:28:e1:eb:b0:69:9a:42:b3:5c:5d:19:9d:
8b:a1:45:cd:09:3c:43:7b:12:e5:25:8c:84:69:92:
71:00:cd:f0:37:cf:c3:77:fc:d3:1b:c1:76:c6:9a:
44:6b:a3:55:62:cb:16:2e:1f:23:70:aa:d7:06:92:
f4:b3:e6:a7:70:68:bc:9d:91:90:aa:8d:6f:4b:5a:
f9:69:8d:4d:a1:68:74:74:57:2b:54:f2:3f:d8:5b:
80:5d:06:6d:e4:fc:0e:65:97:7d:f9:08:83:cc:cd:
83:aa:2e:89:52:83:e8:af:76:85:0a:d1:46:20:00:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DE:C6:8B:49:8E:BE:48:06:44:B3:59:26:BF:A2:34:AC:44:1C:AA
X509v3 Authority Key Identifier:
keyid:CD:97:32:4F:B2:60:67:E1:49:06:EC:F0:6C:AB:73:9F:98:9F:A6:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:00:2a:88:95:b2:6b:e5:0b:15:bf:6d:52:0d:6e:36:58:66:
a2:85:55:a0:61:90:13:04:74:6e:7d:be:00:fd:75:7c:a7:f5:
d1:36:f6:1b:cb:99:71:5a:24:3e:29:1c:4d:b2:d2:e1:f1:56:
ea:d0:c9:e0:72:39:76:1d:48:6e:4d:e5:90:80:df:e9:51:03:
bb:cb:b3:1c:28:c8:49:9f:93:14:92:1d:9a:93:24:d6:38:b0:
9c:aa:ed:85:22:96:0d:ff:5b:cd:f1:22:52:cf:7e:c4:74:86:
2d:67:b0:17:72:31:cf:e1:76:72:31:e0:f9:1d:2e:38:be:1e:
d4:43:d6:83:ea:4c:d4:2b:7b:d6:1c:50:4a:9d:b8:ec:5c:df:
5d:fa:e2:dd:e0:24:cb:82:b5:9e:df:4b:0b:1c:26:e5:f9:3c:
ef:ae:d3:1b:d3:45:4e:8f:ef:36:1d:b3:8b:44:fc:10:19:d7:
d4:07:c3:79:37:23:90:f2:d7:0e:e1:f1:81:98:00:39:87:6b:
b3:c7:42:48:5f:8e:c3:a5:c0:4a:9d:21:b9:fe:e1:8c:d1:7d:
6f:78:a6:19:f0:1f:96:5d:04:13:81:42:19:58:d7:60:b4:54:
2f:65:a4:2e:68:3d:b5:1e:2c:78:05:b8:cf:30:d6:dd:f6:53:
42:8e:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:12:10 2026 by rpki-client