Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: UPr7WK0g/CA1YNa8SfDxB4kSKlcU+QUlRWTHr30kkrc=
Subject key identifier: 66:7E:81:BA:40:84:1B:5E:50:7E:15:48:5B:DB:32:42:44:E7:6F:94
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 01A156D3C464C0E611A9D71294F5FFDC00B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 1AB8
Signing time: Tue 20 Oct 2026 01:01:21 +0000
Manifest this update: Tue 20 Oct 2026 01:01:21 +0000
Manifest next update: Wed 21 Oct 2026 01:01:21 +0000
Files and hashes: 1: 2Zg_-dpcqfmzuDStyGzldA-iv1s.roa (hash: rO88dw5SEIUE2fPQKc2On6kad3jKSdwxG+JqeHFebNY=)
2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: f9R0ldXauDJ6VXASOtPGdqIK2UbWuW1KutCNXTdemuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:d3:c4:64:c0:e6:11:a9:d7:12:94:f5:ff:dc:00:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Oct 20 01:01:21 2026 GMT
Not After : Oct 21 01:01:21 2026 GMT
Subject: CN=667e81ba40841b5e507e15485bdb324244e76f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:cc:aa:0e:0b:4e:56:13:22:47:b4:8d:7e:
78:f7:4b:70:55:66:d6:90:7b:98:bf:9b:b1:95:ba:
90:18:78:a5:3d:f3:f0:44:86:4f:81:22:49:97:40:
2c:5a:f4:35:68:2b:b3:2d:4e:b5:00:3c:da:6a:3f:
82:98:94:8e:ce:c7:8f:0b:2d:a8:4a:fd:bd:06:1f:
ef:eb:29:c6:64:74:1e:af:5a:a1:89:43:44:d0:60:
f6:65:a2:a0:a1:63:66:d2:cb:87:71:b9:21:b0:c5:
e0:27:ca:d9:9e:91:58:c8:bb:e4:94:e2:50:9c:f5:
1e:b9:e5:1c:7e:d0:e2:1c:af:69:7b:a4:f2:7a:f8:
15:47:00:ed:0e:77:df:99:5b:63:49:e4:b9:1f:48:
b3:24:9d:16:eb:21:31:68:97:98:ef:d8:de:72:d6:
97:95:30:a2:e1:4a:fc:6e:e9:88:cb:16:98:1a:0c:
50:d0:71:95:d2:e8:3b:84:ba:99:b1:f9:e7:dc:66:
b2:7a:ce:76:b9:d9:e0:ec:af:91:21:26:d0:11:bb:
a7:de:77:03:48:87:71:f8:e1:9f:fc:bd:74:68:2f:
7a:19:0d:64:78:d2:2b:1f:66:8c:4a:2a:66:d1:8f:
a1:4d:f3:2f:e8:6e:e9:47:96:55:cd:30:66:e1:de:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7E:81:BA:40:84:1B:5E:50:7E:15:48:5B:DB:32:42:44:E7:6F:94
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cd:9c:ed:2f:71:a0:1f:4a:9c:80:cf:d8:da:69:10:33:e5:
85:d4:82:2c:f2:8a:74:6e:bd:13:70:c3:4b:37:66:8e:5e:92:
26:97:14:34:54:ef:cf:b8:78:9f:3d:ed:bc:e8:69:2d:ee:5e:
83:a3:e7:23:a9:f0:ff:23:4d:24:24:c5:79:eb:82:48:08:e5:
ad:b6:c2:b8:1d:f9:18:7a:90:7e:44:35:25:47:a4:b6:99:fc:
3f:ef:b2:1a:a2:30:67:3d:df:4f:60:b8:af:35:c3:47:a9:15:
19:0c:46:50:00:02:f8:d0:68:8d:7a:70:9d:ce:fa:1f:47:36:
65:e0:ef:3b:ea:83:af:51:62:74:aa:81:90:7f:8a:d1:5b:d5:
b7:ff:a4:5d:2f:39:42:29:56:de:d6:54:f3:ed:1f:de:11:c1:
41:bd:a9:49:7d:f6:b9:17:57:d2:85:de:f7:61:f3:e1:b4:f6:
d5:a8:66:35:c2:7c:1e:6d:a5:d0:33:5b:0e:4a:4f:fd:1c:0f:
e3:32:a8:a5:84:52:1a:e9:fe:4e:2d:3a:3c:e5:3c:fb:a6:fb:
23:90:f5:67:6a:44:63:65:3a:35:be:18:51:10:1b:3f:92:a2:
d4:7d:3c:fb:92:3c:7b:e8:dc:f9:9f:fe:e2:e3:92:74:69:fb:
c8:db:ac:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:55:42 2026 by rpki-client