Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier: cX46XfM1JtGwsicd31bC4/51YyWCExvmRCcBTPdcTMs=
Subject key identifier: 65:27:1C:70:DD:1C:DA:9A:56:7B:78:AD:F8:5F:4A:01:87:10:6C:16
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial: 01A1035B500FF0271AA4441A7FD50AA51866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number: 1220
Signing time: Sat 03 Oct 2026 20:01:18 +0000
Manifest this update: Sat 03 Oct 2026 20:01:18 +0000
Manifest next update: Sun 04 Oct 2026 20:01:18 +0000
Files and hashes: 1: xybwCV1hWwBn4MLDW9HYu0-_w6w.asa (hash: t3PVU0MZBtOUV0rI7OL9UqMXFGu/+sqRp88+GVOPUEU=)
2: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: Hdt7sOrp3i4KH/apjEqWa1fGlAO8DvqqDBJyaqD7kBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:50:0f:f0:27:1a:a4:44:1a:7f:d5:0a:a5:18:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Validity
Not Before: Oct 3 20:01:18 2026 GMT
Not After : Oct 4 20:01:18 2026 GMT
Subject: CN=65271c70dd1cda9a567b78adf85f4a0187106c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:78:68:59:5a:2c:70:ec:86:75:f3:ed:f1:
ce:b1:3d:56:d0:73:93:37:d3:02:49:81:d3:30:69:
de:64:e0:7d:58:72:99:10:34:55:d1:c0:88:80:9e:
45:f2:ff:0a:6b:50:1a:28:9e:87:19:09:e0:2d:79:
0f:63:cd:10:89:fc:76:63:7c:42:c7:7f:54:ab:c1:
21:c8:46:5b:ea:ac:c3:19:e5:a4:29:16:3a:18:d1:
93:4b:ca:89:05:20:cc:95:5e:14:89:b8:5d:02:5e:
b2:ff:8c:93:89:6d:bb:2c:59:cb:9d:54:b6:86:24:
50:d8:26:dd:e1:6e:90:4c:e5:2e:48:5d:42:19:7b:
8f:86:0f:e5:8f:fb:30:6e:31:da:9f:e6:6e:3c:2a:
5b:a3:76:0d:72:93:80:3e:70:46:8b:29:fb:5c:c6:
f8:9d:82:6b:d1:55:1e:02:96:41:da:74:6f:c7:f4:
8d:04:46:b7:1b:e5:3b:1b:eb:84:9b:19:2d:58:19:
14:73:ce:02:ea:33:e3:43:a9:b3:86:ad:aa:52:b2:
e7:dc:99:b1:1a:ac:86:a8:49:e5:73:03:0a:ff:33:
be:9d:ff:73:31:f9:e9:46:17:ea:e0:f5:63:ef:3f:
42:d6:11:7a:ed:bc:1c:b4:34:e4:58:cf:49:f7:ad:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:27:1C:70:DD:1C:DA:9A:56:7B:78:AD:F8:5F:4A:01:87:10:6C:16
X509v3 Authority Key Identifier:
keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:0e:5c:04:c9:00:3a:03:a9:6d:8d:e5:14:93:e7:71:83:80:
6b:3e:f2:58:6c:70:5d:02:d8:d8:f2:96:a5:ac:78:0f:4b:e0:
d4:9e:57:e3:fe:43:53:30:80:55:87:31:87:9a:7b:e1:86:1f:
79:e3:2d:20:b3:4a:f6:f2:90:1d:15:9b:a9:b4:d1:80:53:6e:
4e:7c:77:22:4f:c9:31:34:c9:b6:de:ee:0f:ab:c2:f9:14:63:
4a:f7:a2:cc:5a:9e:1e:ed:06:c4:08:a6:dd:90:ae:31:60:ee:
22:9d:5b:85:49:2b:c7:16:60:6b:d6:60:24:e5:ef:94:e3:c8:
11:5c:6d:4a:4a:b8:34:7d:49:d1:8c:14:6e:b8:6d:c8:1b:7a:
da:4b:33:e8:a9:dd:85:43:25:1f:77:75:c8:13:0c:71:ea:2b:
f1:b4:29:33:66:e1:98:d4:00:5c:4f:f5:d7:1d:c2:9a:8e:03:
01:33:bd:f4:9e:08:22:7b:47:e3:28:bf:9f:7c:53:28:6a:1c:
1d:46:a2:52:6f:27:24:b1:8b:9e:21:a3:8e:7f:7c:10:9c:d5:
2d:20:30:41:dc:27:f7:ff:e5:f2:f9:ed:ae:9f:47:ed:9d:96:
01:17:35:9c:d7:15:07:7c:f6:3d:bc:c1:b9:cf:ea:8f:20:00:
ed:e4:f5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:45:04 2026 by rpki-client