Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: +fA4fPvzGAKu9jM10Sgc4yjhlMiOMXKJ8NNpSlCUbLI=
Subject key identifier: 7C:76:01:04:D1:68:84:F2:19:4D:80:3F:38:DB:07:C1:6C:C4:2C:4D
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 01A16A59D6C2D8508033DFD5D50CF1A15224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 1ABD
Signing time: Fri 23 Oct 2026 20:00:34 +0000
Manifest this update: Fri 23 Oct 2026 20:00:34 +0000
Manifest next update: Sat 24 Oct 2026 20:00:34 +0000
Files and hashes: 1: AENYJALANSjKlBoltdKemnCFKjs.roa (hash: s2OVjDuX6iIGr8lYPRWiO+GCWriVBdcRjsgW+JAkKFY=)
2: WT3Gx2IH-UOQxMFe0DcDIk0_2gs.roa (hash: 8xLda/bRGDPhlqY86QUEIR+DAlGhY+eQ/Yy7FCK+A6E=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: yBD2MPXyl50mLM/FYD3+2kVUX0FRuMhIYbW2XPyRn+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:59:d6:c2:d8:50:80:33:df:d5:d5:0c:f1:a1:52:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Oct 23 20:00:34 2026 GMT
Not After : Oct 24 20:00:34 2026 GMT
Subject: CN=7c760104d16884f2194d803f38db07c16cc42c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:cb:d1:f9:60:90:0b:41:3a:40:24:5f:45:
ee:53:97:9e:dc:24:7f:37:c4:93:35:36:0c:24:2b:
2c:4a:d5:cc:b4:ec:77:c0:85:f4:cf:53:c3:af:0d:
84:5c:20:a5:11:56:0f:7f:3f:80:95:35:ed:05:9b:
52:cc:14:d9:51:3a:ba:31:3a:4a:b8:78:d6:8c:ec:
40:4d:82:4c:e3:17:1f:d7:92:88:79:67:94:23:6b:
2e:61:f8:40:41:60:0b:5d:87:08:7a:84:b9:4e:d6:
ea:3f:0d:19:9d:3e:de:f1:b6:0a:43:80:8c:ed:34:
20:e2:d4:71:b6:7f:6b:18:55:0e:c9:42:9a:4e:d2:
0e:fd:73:30:76:d5:a1:ca:cd:f5:91:6d:bf:d7:3d:
be:7c:3a:04:c3:e8:20:85:64:37:35:b4:e4:85:a1:
b6:8f:c8:6c:7e:bb:0e:9a:24:4a:da:16:ab:17:0e:
c7:a1:a6:fd:ef:41:b6:41:19:4e:59:4b:58:d6:01:
7b:d9:c1:f9:5d:66:b8:e6:22:7e:49:e0:c4:2b:3a:
fa:bb:07:56:b9:65:dd:33:7b:1e:ad:a9:63:24:94:
0b:7c:21:57:58:58:82:30:2b:15:30:a6:14:52:28:
bf:1b:4e:90:91:9c:bb:e1:09:7f:c7:61:4d:43:2f:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:01:04:D1:68:84:F2:19:4D:80:3F:38:DB:07:C1:6C:C4:2C:4D
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:17:69:58:0e:bc:d8:f0:dd:bf:ed:42:e0:63:f1:f7:28:d4:
a0:c0:43:f1:d9:46:38:35:81:2a:db:20:f4:f7:65:f6:65:26:
1f:71:de:71:9f:a8:30:ee:5b:d7:b6:e8:3a:51:ba:60:a2:21:
da:df:f5:a4:64:fb:00:c3:a5:e7:3a:eb:ea:40:b6:4e:cc:90:
2d:db:eb:22:9d:11:5f:01:2d:44:55:4e:ff:de:d4:25:30:ca:
2c:d9:9f:46:97:90:13:c5:ce:63:cb:92:70:77:c3:97:de:29:
45:00:85:f3:93:d3:39:96:0b:3f:40:d8:4d:55:bd:d1:1e:51:
66:1d:c6:9d:0f:9b:f5:e7:50:b2:f0:d9:d5:73:1b:07:21:72:
ef:31:e8:ad:a7:00:75:52:c2:ee:67:b6:aa:10:aa:21:65:46:
bc:97:73:e6:91:2c:f3:36:65:ad:01:0a:2c:c5:df:f1:46:2a:
fe:c2:3a:ad:24:a2:a2:03:9c:93:6e:4f:f6:45:d3:ce:48:24:
43:bb:77:f9:99:64:c4:33:29:9a:76:e5:bf:00:45:83:e0:ad:
b8:9e:ec:30:b2:fa:60:f6:f8:9a:12:b7:ce:d8:38:24:eb:86:
fd:0e:cd:83:71:33:67:eb:2b:57:cc:c8:fc:3d:ec:3a:84:d2:
62:14:14:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:56:49 2026 by rpki-client