Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: GybCA4PM0hSg/C69R24FfFkNJwXMANQrjKXZm+r3L5Q=
Subject key identifier: 05:68:AA:39:CC:0C:D1:C5:C3:9A:E5:D8:D1:2C:77:46:89:6B:99:17
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 01A002EFD4A976FF9217314C4AF434E05F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 1993
Signing time: Sat 15 Aug 2026 01:01:07 +0000
Manifest this update: Sat 15 Aug 2026 01:01:07 +0000
Manifest next update: Sun 16 Aug 2026 01:01:07 +0000
Files and hashes: 1: TnpKsIrCpfum69mVWYffLpmGkW4.roa (hash: GTcF25unpZajDdgtvW9ktN1du2kJWKPqouAAWsJtWlU=)
2: iUEHX1o0_l8jTQlhzAvjptzhPL0.roa (hash: DpWo5iq7cHsCZy0a6PUHW0Vs0n1oWSh3Ty0O4gm3/dU=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: wRT/3vVvBlHiMWA9vTNB4ADik5SjCxxya1gdKJNWHzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:d4:a9:76:ff:92:17:31:4c:4a:f4:34:e0:5f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Aug 15 01:01:07 2026 GMT
Not After : Aug 16 01:01:07 2026 GMT
Subject: CN=0568aa39cc0cd1c5c39ae5d8d12c7746896b9917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:72:a0:c7:f6:3f:9a:6d:5a:de:13:e7:a9:
4b:60:6e:b1:e0:47:c1:23:01:65:77:50:2c:cc:94:
68:b6:0a:11:bb:83:14:6c:ac:60:9e:52:5a:2c:dc:
6d:70:11:e9:60:12:46:42:f8:59:47:74:d7:1f:8a:
35:d0:c5:b6:36:3d:42:e5:94:61:70:a3:4d:e8:78:
41:d3:ea:80:9e:c6:4a:f7:44:97:07:5e:fb:6d:88:
45:ab:ad:c8:3d:49:bd:60:6b:eb:bf:ce:04:ad:e4:
36:0c:7c:69:ef:62:72:49:63:14:27:5b:f8:83:58:
8c:50:59:92:17:03:e9:4b:1a:20:7a:2b:26:cd:9f:
58:4d:47:54:bd:1a:84:fd:02:34:e9:dc:c8:9d:4e:
b0:5b:4a:ce:68:48:6f:9e:5b:53:0c:d3:26:26:05:
68:24:e7:33:5d:d6:e8:f8:26:f7:53:a3:2b:4b:e8:
e9:2b:f6:ed:d5:7c:4c:b1:d5:3b:4f:6d:83:4c:6b:
38:d2:83:a4:3f:81:e4:8d:af:e6:04:a0:86:83:b7:
86:7a:52:d7:60:8a:22:06:96:74:a6:60:04:5a:df:
24:d3:ea:2a:49:d0:a6:07:5c:47:d3:4b:5d:a2:8b:
31:5f:a0:4f:ef:4f:41:f3:15:97:c2:ec:d6:ec:5e:
ac:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:68:AA:39:CC:0C:D1:C5:C3:9A:E5:D8:D1:2C:77:46:89:6B:99:17
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:16:e8:54:b3:5e:00:16:46:aa:ff:14:82:4f:66:bb:d4:d0:
0d:48:62:d8:66:5b:d2:ff:67:30:7e:f0:f9:88:2c:5d:f2:d8:
1b:82:d7:5c:55:f7:e6:86:63:b0:79:2e:a2:44:d4:39:8f:c7:
4a:56:a9:83:87:03:da:c4:e8:fa:34:be:bb:1a:71:4a:d4:f4:
b5:a4:5a:1c:ae:ff:ad:e2:3a:c7:73:d6:8c:fc:22:8e:0f:a5:
e1:f2:6d:dc:fb:e0:19:8c:94:8e:8c:a7:06:e9:f3:db:91:99:
cb:f2:5c:83:a7:bc:96:47:22:33:57:27:d0:d9:11:f9:64:67:
7f:5b:ce:0d:e9:17:ae:d2:30:21:dd:02:11:93:29:72:39:d7:
5b:c2:e9:43:23:6c:60:b9:39:52:cf:de:5e:97:d5:27:d5:0c:
7f:f2:6c:8d:36:5c:0e:05:11:e1:72:c0:84:7c:15:14:c7:51:
ca:94:16:5e:f4:aa:58:d1:c4:0f:ee:6d:18:9b:b7:17:46:f8:
db:86:e8:01:db:03:06:45:07:2d:35:7a:05:65:1c:21:3e:4b:
72:d2:54:34:aa:28:38:b3:1d:95:0c:5b:0a:26:84:3a:28:2d:
38:64:c8:e9:04:80:8e:88:13:50:a1:e0:3a:7d:bd:eb:31:02:
90:a4:d0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:28:15 2026 by rpki-client