Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File: zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier: +W3yDOUW6+Wa+xT2jF2mMRrx1yM235/V0k2+SqCqtW8=
Subject key identifier: 04:9C:F4:3B:E0:50:52:C5:CD:91:4E:8F:33:9A:0D:9C:2F:70:C7:1F
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 01A110E0591CB6867C40FB36A951059EF901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number: 1AA0
Signing time: Tue 06 Oct 2026 11:01:40 +0000
Manifest this update: Tue 06 Oct 2026 11:01:40 +0000
Manifest next update: Wed 07 Oct 2026 11:01:40 +0000
Files and hashes: 1: 8OPf-TYppgb-lWxDdXUmvn4lAOc.roa (hash: hCC9pcZlwckfG4uw3UFpwoter9oKt9FivUAlBWxQl7Y=)
2: L66cmmlC06Wcdn7XL6i2OjeyJz8.roa (hash: 98r7JlYeRTjaXUzjuxu020n7woB7ZmKJCIQsHxK3ViA=)
3: LT0Iyo1R8YEuaI1JHoSd3uYiu4U.roa (hash: doboAOIfjYNyHdw1r6xfrE7hmv8gQ0YwGnxIdc/ApGY=)
4: OxKWVKSu8q5MpbR4mXLRZseiBak.roa (hash: WzjynFG/qnlCwj8eYyliY8fN3o7QhJH4fPJus7/EOTQ=)
5: Wx7zSJ4BFdUre-x5J2lYzvpF4jE.roa (hash: 5usbDenLcJwn1HnlbKVb9xkpHXYP/L2fciKVWt4yeXw=)
6: XNfpJ_jMRsEIETRyReqCXiOLGU0.asa (hash: RC0524eXrry18ALIN/KuXMpYFLI/ZkcUf5LSNtqd4ss=)
7: cOUUKUyq3fFSSy6l5-mjbaxhQhs.roa (hash: KLqb5U6DgNfIS88yDz/06LUw3OWjpinY/pIyqKDYmR4=)
8: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: BJo9l6Owc3yU/G4ifCDxppugVwwz6RVFAKPcq6H7+1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:e0:59:1c:b6:86:7c:40:fb:36:a9:51:05:9e:f9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Oct 6 11:01:40 2026 GMT
Not After : Oct 7 11:01:40 2026 GMT
Subject: CN=049cf43be05052c5cd914e8f339a0d9c2f70c71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e4:9b:a4:f0:12:5c:f9:2f:21:7c:a9:94:d7:
53:25:02:31:2b:ae:2b:0b:14:fe:14:73:fa:26:5d:
98:e3:60:ef:33:ea:70:a5:a6:84:d2:23:8a:bb:81:
80:a2:16:de:e5:c4:fd:8b:86:22:9a:06:8e:f1:8a:
99:91:2d:ea:6e:21:86:ba:47:22:e1:ae:bd:a5:12:
f8:dc:95:d1:a2:5c:c6:e8:f8:46:e5:8d:cc:e6:3f:
34:46:a5:fe:05:9d:c9:96:ee:ce:cc:d3:b2:b7:f7:
03:0c:66:a8:96:8f:7b:b1:ad:50:d0:33:8a:e2:d3:
13:b2:e8:3c:05:45:72:95:0f:81:29:fb:c0:0d:21:
a1:fa:3d:36:7c:41:b0:c2:5e:0c:d6:19:b0:f8:d2:
eb:02:c4:92:fd:1c:ca:6e:00:0b:92:44:43:c8:99:
7e:17:79:6a:f3:ab:3c:a4:48:45:1c:4c:ae:e5:5a:
b7:66:9c:72:6f:fc:f0:3e:a8:1a:a4:b8:42:09:75:
11:de:c1:d3:de:14:de:4f:fa:c6:2f:61:67:fc:75:
f9:b3:cb:78:45:5b:30:f4:aa:99:88:e2:d0:5a:4d:
ef:68:65:46:29:08:dd:24:bd:f6:75:a3:42:af:cc:
13:b3:8d:48:fe:76:60:57:3a:1e:71:d3:11:d3:fc:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9C:F4:3B:E0:50:52:C5:CD:91:4E:8F:33:9A:0D:9C:2F:70:C7:1F
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d5:33:b6:87:75:31:31:63:ac:bc:b7:b4:2f:0b:d8:c1:40:
e5:b5:bc:9a:95:ee:40:c7:9e:a6:93:50:53:cf:8b:b8:f4:f1:
21:24:bd:14:3c:25:ea:3d:77:db:87:91:18:07:69:0c:65:b1:
99:18:b1:91:f8:bf:31:8a:5a:ab:7d:fd:9f:f0:3a:0e:dd:72:
62:80:d3:ed:00:ff:0d:f7:41:3d:2d:9d:d2:2f:06:75:6f:fd:
2c:3a:7b:33:72:56:f4:14:30:d1:9f:50:b5:a4:41:59:b6:91:
cc:a9:60:1d:f4:82:34:4f:1c:91:94:a8:4a:ff:f9:3d:5e:43:
21:7f:57:c9:c9:97:09:2d:9e:ee:23:80:38:3c:cd:b5:38:31:
b9:dd:fd:0e:7f:43:eb:e8:9d:86:07:22:47:7b:42:81:9b:31:
14:93:78:0e:34:e0:09:83:4f:c5:25:ac:bc:0a:8d:01:f9:6f:
ed:fd:aa:35:58:3f:d0:f8:11:60:27:4c:4f:fa:fb:f6:aa:28:
4d:3a:3c:c6:b8:b4:68:d3:22:f5:87:ef:af:73:50:c4:56:0c:
75:cf:ba:62:37:38:7a:ae:67:e5:17:a1:90:6e:7b:7a:29:04:
d9:00:e8:cd:fa:b5:08:ae:ef:bd:21:5e:fb:e4:29:28:99:ec:
d6:86:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:24:06 2026 by rpki-client