Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier: QjjkDBDw5vAh2ltrq0QUg+CLc1/WfWeYwrKeeOM5el0=
Subject key identifier: FF:84:99:39:C5:20:AD:BE:84:E9:A8:16:39:D3:73:72:DC:D9:34:58
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 01A0C6D7ACA81DE9C1833E05552C250816A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number: 1A77
Signing time: Tue 22 Sep 2026 02:00:18 +0000
Manifest this update: Tue 22 Sep 2026 02:00:18 +0000
Manifest next update: Wed 23 Sep 2026 02:00:18 +0000
Files and hashes: 1: efPNeN_0KirVowyqOO81ber6Zg8.roa (hash: 0sZnmeXPSX5yamGjUWVvInbw7JdGyiWW9gzFR1D9bNU=)
2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: w7op0xaUnwDzR1Sv10V4WGY0v9TSf75UzvngLfRlOYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:ac:a8:1d:e9:c1:83:3e:05:55:2c:25:08:16:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Sep 22 02:00:18 2026 GMT
Not After : Sep 23 02:00:18 2026 GMT
Subject: CN=ff849939c520adbe84e9a81639d37372dcd93458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:b4:3b:fb:80:57:f1:d5:95:e7:c1:a8:9b:
47:e7:16:6d:59:56:00:90:fc:cf:60:f2:39:96:37:
c5:05:f6:f4:0a:18:34:98:5b:30:aa:c5:8e:cb:66:
8c:66:b4:a8:5f:21:06:24:18:dc:3b:64:6e:f1:d7:
b3:78:53:91:04:5c:85:54:b7:89:76:da:c5:92:02:
36:c3:a6:79:81:9e:89:92:57:0e:cf:9d:4f:fb:ac:
25:81:de:4e:0a:04:a1:c5:8c:fa:bb:20:62:bf:37:
1b:1e:83:09:33:e8:eb:f8:cc:53:ed:84:d6:7b:44:
38:ff:fd:4a:26:e7:16:42:bd:e3:95:16:9c:51:36:
15:db:d8:23:33:ad:93:ef:b5:b1:c8:35:af:f3:36:
97:24:1e:36:eb:95:9d:b6:71:8f:93:6f:da:08:3b:
3e:8d:a4:b6:43:5d:6e:5c:dd:0d:e4:ca:07:22:93:
8f:22:aa:2b:81:71:24:3c:ac:d4:01:e0:8f:e3:f8:
80:87:f0:6b:bf:42:72:57:26:31:04:25:c8:95:e2:
b6:87:20:e4:1e:4a:1d:88:c7:df:98:ad:cd:14:2f:
8c:7a:a7:1c:1d:cf:84:c3:c3:03:bc:ca:b0:78:79:
53:5e:1b:79:58:63:08:e2:d8:21:db:43:bf:98:10:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:84:99:39:C5:20:AD:BE:84:E9:A8:16:39:D3:73:72:DC:D9:34:58
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c3:71:65:c7:39:ef:9a:f5:e8:ae:43:8f:79:e0:48:40:97:
29:60:bb:65:3a:b1:ca:b6:27:3a:c8:ce:fb:27:25:c3:fe:68:
27:e6:2a:c9:49:42:ce:24:6a:78:63:49:8f:d9:7e:06:a2:e3:
21:3a:eb:fd:ce:cd:f3:56:f0:8f:00:16:35:96:9b:99:e3:84:
fd:f8:54:fa:37:3d:42:01:44:ef:e2:ed:43:63:1f:5d:40:ba:
59:10:b9:b2:10:8a:f7:de:f9:8f:4b:10:1d:16:db:86:06:61:
ab:46:d7:7e:c3:11:40:e4:6b:3b:15:5e:1f:a5:7a:d8:20:7b:
74:b1:28:f5:20:e3:cb:50:c4:3e:8c:af:b4:a8:ed:93:c3:f3:
f6:63:a0:9d:71:bc:e7:2d:bf:fd:26:03:02:9a:50:3a:ea:80:
bb:6a:2b:3b:e7:97:3e:82:14:28:bf:53:ab:b2:a5:9d:03:ed:
58:bf:19:dc:21:07:fe:84:ef:de:f0:bb:dc:03:b1:00:e8:4c:
0f:a4:80:e9:05:67:37:ca:a1:a5:96:3a:4c:44:86:20:32:44:
07:c7:11:d2:55:fb:d5:7e:fc:30:68:ed:a5:69:7d:50:65:02:
54:68:3e:6f:7e:d3:1e:90:f7:cf:6c:ae:ee:00:85:13:08:18:
07:3a:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:40:38 2026 by rpki-client