Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: J1R5nwFCiJjZAkoG6S3g75Z3imnPcgYaPkem04p+kHM=
Subject key identifier: 1D:9D:77:74:8B:96:23:56:C5:F3:DC:06:E6:BB:0A:73:79:EA:F4:4F
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 01A1555365C1B83677848EC69BD6B14D8840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 1AB0
Signing time: Mon 19 Oct 2026 18:01:31 +0000
Manifest this update: Mon 19 Oct 2026 18:01:31 +0000
Manifest next update: Tue 20 Oct 2026 18:01:31 +0000
Files and hashes: 1: nOWsqCuFuUl88d8fe68oh7ATL8Y.roa (hash: 3ZcPCRJToIBazA6ZM2eZ5k1Cl21KURsg9GhtHBDZCsw=)
2: vyrrFLAQmM4kpL-C4kzXL9B0pEk.roa (hash: uDR2ErZozryJ4og8nKltQlCSGLY9GDhP6CrAdfmEEk8=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: nlZH8ouGRpTFrMz2pt8b6KInajZYFqwAjfA5pa3EYLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 18:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:53:65:c1:b8:36:77:84:8e:c6:9b:d6:b1:4d:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Oct 19 18:01:31 2026 GMT
Not After : Oct 20 18:01:31 2026 GMT
Subject: CN=1d9d77748b962356c5f3dc06e6bb0a7379eaf44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:2c:72:fc:12:4e:7b:bc:67:8d:19:2b:3c:
9e:e7:00:76:49:ef:4b:00:18:63:41:52:1c:4d:76:
36:f2:92:80:02:38:95:7e:38:2c:09:db:a3:a0:e6:
10:e3:52:fd:04:73:72:2f:89:ef:16:d9:00:cd:de:
58:0e:42:7b:f4:5b:e1:ad:3d:11:7c:aa:d2:d4:af:
c2:17:39:59:82:46:38:41:ce:c9:3b:35:1d:2e:d7:
33:15:1f:78:05:75:a4:da:fd:a9:46:4c:63:7a:a1:
16:99:f4:bf:dd:3e:f5:c8:2e:ea:42:3f:7b:38:6e:
13:56:94:0d:44:8d:84:b8:a6:b7:e7:6a:c5:94:9e:
28:fb:71:07:c1:19:d4:d1:c7:5e:61:8c:ce:2d:a3:
95:24:ab:40:e8:bb:26:75:dc:78:77:ce:25:ba:12:
1b:90:4e:1d:18:88:0f:e2:16:fd:59:ce:e3:00:06:
39:d9:19:20:91:61:3f:5c:87:1f:dc:88:90:ac:70:
05:c6:36:5d:25:dd:57:78:b2:77:3d:e1:b6:16:eb:
f6:69:91:e7:8c:c4:85:e3:83:03:a7:be:14:71:c5:
f2:c3:df:0d:ab:df:c0:6a:02:3c:36:25:f8:51:11:
78:0c:0e:b3:ec:e2:97:2b:f1:1a:61:01:b0:9e:b5:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9D:77:74:8B:96:23:56:C5:F3:DC:06:E6:BB:0A:73:79:EA:F4:4F
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cf:1f:67:3a:ec:04:51:2d:7f:d8:6c:26:0b:df:cd:ae:d9:
4a:bf:ce:91:00:96:9a:e7:3a:e1:b2:af:e6:71:c9:01:7e:e3:
dd:39:66:ae:7e:44:79:42:66:5d:fb:16:89:00:7a:4b:b1:3c:
b2:60:70:0a:a2:2e:11:10:84:c9:46:90:2c:71:d7:19:0d:bb:
bd:67:be:77:2d:33:d5:4e:7a:98:8e:43:f9:d7:b9:cd:78:d5:
af:11:35:6d:cb:ef:8b:d9:ce:9f:cf:e0:e5:17:5a:e0:76:fd:
93:37:c4:58:ad:d7:65:8a:b2:4a:1b:34:ff:ea:a4:ac:7a:be:
ec:55:15:ae:44:39:6e:17:3d:44:84:06:a7:74:5a:0a:ec:a6:
75:2c:6e:d0:f9:6f:fb:2f:06:88:35:5d:a4:72:2c:11:f0:09:
ed:11:96:64:f5:b1:45:aa:8a:70:f4:9e:f8:7a:f7:6d:04:4a:
cf:78:69:47:34:01:2a:05:34:51:ac:ad:d5:66:c8:47:e8:54:
0b:f8:fb:b6:f3:9b:fe:65:1f:4e:12:7e:eb:b6:0b:a0:4d:7b:
ef:a9:ad:70:20:9e:57:ff:ee:e6:86:7e:43:de:67:9f:f1:68:
59:6b:d3:45:93:1f:7c:0c:ab:25:8c:16:46:27:2e:36:3c:a9:
eb:d0:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:51:34 2026 by rpki-client