Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier: Vz2GvA4F8iEfaqCPzdRP+bWblHNjKAqIcHjF/gVPkJs=
Subject key identifier: 2C:45:4F:6A:50:51:6D:CB:61:CC:15:B1:B8:D1:5A:50:02:5C:00:21
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 01A0BDD47B9AEE0BB713FC4231827F4C7B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number: 0617
Signing time: Sun 20 Sep 2026 08:00:14 +0000
Manifest this update: Sun 20 Sep 2026 08:00:14 +0000
Manifest next update: Mon 21 Sep 2026 08:00:14 +0000
Files and hashes: 1: 8hUTE1rNYy5U_ZEAjeKyMjN64k0.asa (hash: WUMeLZ4dr9HFfgEPPRc+l/n2HJv4KBfKC27gniFGLbQ=)
2: e9f3B44EK2wKomC2T7X1vPJt_tY.roa (hash: w9sFrHQXnGx9nnQqHsGkGtrOe5lM1/FzKdCvsaW8Vb0=)
3: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: OQKU1961ENBIS0Z+BE4AuvfOSRDnVS3Nor/F3s6GzSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:7b:9a:ee:0b:b7:13:fc:42:31:82:7f:4c:7b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Sep 20 08:00:14 2026 GMT
Not After : Sep 21 08:00:14 2026 GMT
Subject: CN=2c454f6a50516dcb61cc15b1b8d15a50025c0021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:35:67:07:e5:d6:f9:c2:15:64:22:99:d7:
a8:9f:ad:00:fa:74:1a:9e:ec:82:04:12:3f:b6:ed:
96:8e:76:54:c1:77:d5:14:b6:d2:11:9c:59:89:7c:
34:44:bd:18:69:fc:d0:e2:ab:c7:63:20:9f:53:eb:
3a:7e:28:52:44:3c:f2:92:ff:91:f1:0a:92:d7:f2:
ad:7f:42:ff:04:86:f8:6d:c7:37:33:13:75:a1:0c:
a5:7c:36:5a:10:be:0e:e5:74:bf:b5:9b:f6:f0:f5:
15:01:d2:2b:c3:7f:8c:5c:83:2d:95:c9:fd:d4:96:
6f:00:7d:a4:e0:de:d1:80:9a:19:1a:db:19:ab:ce:
04:a9:a8:20:50:fe:53:6f:fe:7f:0a:9d:77:70:11:
b8:b4:b7:e2:34:a4:51:0a:c2:8a:6f:48:a0:9e:60:
a1:25:fb:6f:78:24:45:4d:f1:1e:b7:51:fb:6f:6c:
f3:d1:bb:25:86:3d:dd:9d:ff:7f:b0:eb:77:2d:91:
c6:65:58:be:13:c6:2c:1b:2c:c9:00:23:3a:da:f4:
06:f8:98:1b:a7:cc:94:2d:bd:d1:03:c3:a9:72:77:
24:fe:c4:ce:3b:58:b4:96:cf:f9:33:c2:c4:82:a0:
cc:87:ab:9f:de:da:ed:9b:fe:59:85:20:e0:7b:3f:
01:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:45:4F:6A:50:51:6D:CB:61:CC:15:B1:B8:D1:5A:50:02:5C:00:21
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ca:01:f5:f8:df:dd:e9:12:48:c3:23:0a:96:cc:d2:ed:df:
64:70:05:b1:e6:99:00:aa:72:ec:2d:8f:bc:ba:14:db:c0:22:
fd:58:d6:87:d2:ef:29:67:48:ad:ec:c0:8c:5c:9f:f6:ff:90:
c2:25:2e:60:9d:cb:ac:96:b3:ec:64:f4:1f:34:32:d1:e6:ec:
58:a1:97:c4:83:9c:bb:63:1c:7a:be:22:3b:da:d1:9e:4e:c2:
0e:03:bc:aa:5a:23:67:bd:a5:04:35:d1:d3:a1:56:83:aa:aa:
92:12:ad:74:2a:4b:03:7f:e7:96:4b:62:31:58:40:4d:b1:b7:
63:dd:68:41:54:51:e1:71:9e:9f:d5:e2:95:67:ad:72:1c:07:
c6:3f:c4:99:b6:2f:3b:bb:dd:ac:a6:4e:2a:0a:f9:63:17:98:
e2:bb:9b:50:2a:2c:70:34:fa:a3:83:b1:45:7f:53:d4:ad:51:
6a:33:17:53:92:2e:02:f8:86:53:79:dd:97:e2:79:af:3b:34:
8b:3c:32:89:d2:2e:72:de:58:7e:39:8a:cf:87:ee:20:c7:83:
14:53:9d:f7:a0:43:5c:85:16:2c:5e:10:65:ff:ef:c0:c9:2a:
7b:0d:97:95:60:f7:d4:71:6b:99:ff:d4:4d:6c:a2:5a:f8:ae:
67:23:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:01:23 2026 by rpki-client