Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: qblTjm/RTkabVre3hotNuyMmSptsJ8slAPZ0VvmmoOg=
Subject key identifier: A2:52:87:A4:E5:B9:41:3C:1F:B6:61:CF:6E:DE:78:8A:BA:59:E0:2B
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 01A11304FBDE1FBCAF199515CCA6CF71E6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 1A8F
Signing time: Tue 06 Oct 2026 21:00:56 +0000
Manifest this update: Tue 06 Oct 2026 21:00:56 +0000
Manifest next update: Wed 07 Oct 2026 21:00:56 +0000
Files and hashes: 1: 98fyEBb-PIBiroCj51bzkd-V_i4.roa (hash: 2RN0v3XP/euGb82/ECdLfjWteqkCXDXBbJynvO0cBWE=)
2: y97Q2cCIA4p_jfA1RbOfelZQKOo.roa (hash: oRmoVnYM94QBjpHDaFRFV+BA4jZYdHdlmrs4oEppUqA=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: y6+zTGNtVF3hFwuKgBCjeibFz47/pydFpYH/o5tx3rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:04:fb:de:1f:bc:af:19:95:15:cc:a6:cf:71:e6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Oct 6 21:00:56 2026 GMT
Not After : Oct 7 21:00:56 2026 GMT
Subject: CN=a25287a4e5b9413c1fb661cf6ede788aba59e02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:6f:e0:25:85:b9:de:ee:ee:ef:35:22:66:
4b:4e:e5:d5:2a:9b:f9:89:85:38:ef:c7:9e:5e:b5:
35:f7:40:2e:3c:81:ef:a7:92:76:cf:6a:85:81:30:
1a:2b:df:01:1f:2c:c3:16:ef:d6:4b:fd:a6:ed:cc:
49:c1:d2:2e:a9:d1:0d:81:85:c5:e5:9a:bd:a9:c3:
02:04:4c:a3:c7:a2:2b:19:f0:4b:3d:f7:69:ab:91:
d5:39:6c:f5:db:68:ce:b8:5c:e3:ae:b2:d5:62:50:
0b:32:ca:7f:f2:ab:5e:c2:c4:12:1b:2a:f9:ca:2c:
3e:f0:03:85:4a:21:4f:f1:c7:5c:59:ef:b3:7e:07:
06:fd:f3:99:06:74:46:0f:28:32:0f:ff:f0:a0:4f:
51:1f:28:b6:db:03:be:79:17:df:50:be:24:cc:6c:
57:32:55:cb:54:0f:09:cd:29:2f:69:cb:6a:33:c1:
3d:d7:c5:00:3f:5b:fa:71:71:92:0a:26:39:ac:74:
ba:b7:1c:e8:5b:7a:8b:8d:09:46:2d:41:94:64:5a:
da:19:f4:b8:60:11:ba:ac:71:95:06:1e:26:b4:8a:
14:7e:33:3e:d8:f5:0b:57:49:47:a8:a4:27:00:24:
5d:9b:c4:72:d8:bc:17:db:23:8e:a6:62:46:76:18:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:52:87:A4:E5:B9:41:3C:1F:B6:61:CF:6E:DE:78:8A:BA:59:E0:2B
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:61:6c:6f:91:1f:b6:bf:97:4e:9c:23:36:ec:a0:b4:19:b7:
cd:61:cc:d3:0f:25:a1:b4:9a:93:47:f9:d5:b0:36:b8:19:44:
fe:a2:28:f2:b8:d7:7d:f6:db:ae:e4:a6:c0:dc:1c:6d:34:a6:
34:4f:de:c3:97:83:17:da:ea:c0:f0:3f:52:80:44:25:e4:b6:
d0:00:10:95:85:82:f2:e1:09:64:38:34:0a:d7:bf:44:ec:dc:
1f:2e:dd:62:75:02:01:00:5f:9b:f8:2a:84:8f:d5:f0:cb:31:
7b:9d:f2:55:bd:c5:d0:77:67:25:52:97:f8:ab:48:ea:fd:d6:
aa:16:19:fb:80:79:5a:af:d0:1c:9b:40:33:f4:02:fb:f0:5b:
6e:21:4a:13:6d:e2:f5:d6:66:cf:39:c7:1b:ee:e7:a0:04:e9:
82:65:59:42:d9:15:68:d6:2c:f6:3f:e7:be:bb:d1:1d:b9:7b:
ce:e1:b3:ab:bb:2a:97:1d:b0:af:a4:c0:fa:2f:60:89:3e:3e:
88:8a:b9:43:d4:e7:ac:38:70:7b:d0:6a:2d:5d:21:e8:b1:e2:
b0:2e:d5:74:87:cb:c8:72:4a:0d:c8:bc:83:d4:2b:4e:a1:72:
c5:99:95:f5:2c:37:35:ca:dc:52:04:57:6a:85:34:9c:80:bc:
22:41:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:56:36 2026 by rpki-client