Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: GWM+VH8o48EANE74EfxYyGFrIiBM2LXosYG0V4g2mQw=
Subject key identifier: D7:0A:88:8D:3C:18:D5:74:35:F1:CF:E9:F5:6A:B5:E3:30:12:51:D7
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 01A03A82CB553B0FAFC25E5B73EB238877BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 1A6A
Signing time: Tue 25 Aug 2026 20:00:45 +0000
Manifest this update: Tue 25 Aug 2026 20:00:45 +0000
Manifest next update: Wed 26 Aug 2026 20:00:45 +0000
Files and hashes: 1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=)
2: ZRWcaFP2lNAESYX_mW0VBxZBTAc.asa (hash: 3/7iwA3UKTDGkjOa2IbhOlBaTEtOKBbyoubltpbAgRk=)
3: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=)
4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: 7dcRpVgcCrG1e4sBFv+92ZDxv8/iZKVIv6Q6xPPRPbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:82:cb:55:3b:0f:af:c2:5e:5b:73:eb:23:88:77:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Aug 25 20:00:45 2026 GMT
Not After : Aug 26 20:00:45 2026 GMT
Subject: CN=d70a888d3c18d57435f1cfe9f56ab5e3301251d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:b0:5c:b2:5f:76:07:72:4e:cd:77:13:99:
33:d0:fc:35:7f:ba:6b:03:58:df:05:2a:51:8f:1b:
8a:b6:b2:f4:14:0e:28:6d:0c:20:86:ed:3e:73:e5:
24:ab:7e:83:18:a7:22:0c:35:36:9f:28:b4:04:50:
15:76:d8:b0:b6:08:3d:fb:6d:96:a6:f9:41:94:f3:
6c:60:e8:95:ca:d5:a2:fc:c8:ac:ab:14:90:e5:96:
45:ed:5c:b3:15:4b:00:5d:b8:e0:ed:57:70:6e:c7:
a7:05:74:30:af:af:02:12:cb:61:50:a1:10:a6:74:
3e:c3:bc:34:de:c2:ef:fa:6a:33:9b:da:ee:cb:0a:
ce:c8:86:fd:e6:e7:14:64:58:2a:09:2d:29:bc:f9:
7e:2e:6d:a3:e7:eb:12:71:1a:54:ee:ce:c7:46:ae:
64:1d:65:7a:68:68:76:d0:0a:e0:c7:bb:3b:e6:d8:
4b:ee:e6:88:05:3c:5d:71:15:85:7d:52:de:aa:68:
f1:fc:37:70:35:c3:54:de:65:11:28:cc:b9:fe:c8:
fb:7f:42:f1:38:8c:4c:9d:d8:26:74:da:d2:e6:51:
07:51:5e:0d:86:a7:c8:89:00:38:05:4d:87:3c:fd:
b8:85:6d:51:c6:6f:59:76:e0:11:bc:79:8c:05:f6:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0A:88:8D:3C:18:D5:74:35:F1:CF:E9:F5:6A:B5:E3:30:12:51:D7
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:dd:c1:63:29:e6:ac:08:f0:86:7a:e5:2c:10:ae:08:4d:16:
d1:8b:5d:68:c7:4a:d7:10:2b:74:87:cf:79:57:19:17:af:96:
7b:e6:d5:5a:a9:98:dc:8b:bd:f9:0e:27:b1:15:00:af:2f:38:
95:05:06:21:85:04:aa:36:18:1f:30:13:cf:f2:53:88:93:d1:
d7:08:4c:c5:5b:42:cd:d6:69:73:84:fb:f3:79:a7:b8:14:67:
07:6b:56:d2:0a:73:06:ce:57:ca:2d:a9:5e:54:de:af:fe:d2:
ff:60:81:2f:bf:0c:77:bc:a5:75:73:5b:a5:d9:10:d8:2d:10:
2e:cd:25:40:b3:d0:0f:6a:e9:50:67:e8:ff:8d:a5:74:ef:71:
21:d3:20:1a:44:0c:5c:e6:79:99:16:56:e8:6a:94:c9:77:07:
b4:1e:bd:9a:7c:44:35:61:0e:b3:96:be:5e:7c:3f:2d:05:05:
af:1c:af:a1:6c:39:fc:25:dc:cd:fa:e9:90:fe:c5:8d:44:6e:
ff:eb:62:4d:e0:41:f8:0f:c2:7f:22:13:cc:8b:5d:51:cf:b6:
f7:d7:f2:f4:a6:44:9f:39:af:37:f5:fd:92:ca:64:21:60:5a:
49:29:b6:01:b8:c5:b9:0e:9e:79:1f:8c:f9:9f:b5:18:9e:b2:
79:da:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:41:47 2026 by rpki-client