Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: ltUoMw+QmbFVdt2s38UgVXvx4CRAGBmOJkHFRMVsbnc=
Subject key identifier: A2:19:F1:09:28:16:AB:C2:45:8E:B8:48:3B:A0:48:86:6F:9C:25:BD
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 01A1A970F8481C4DF3E589A3451EAE32184E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 1AF3
Signing time: Thu 05 Nov 2026 02:01:55 +0000
Manifest this update: Thu 05 Nov 2026 02:01:55 +0000
Manifest next update: Fri 06 Nov 2026 02:01:55 +0000
Files and hashes: 1: 1wfrKmBygnPMPT_caNDty45amtI.asa (hash: 37JiuqpaT5MmXAfO1ooAsFeUNVw/PiSLuAn5bIL2jMI=)
2: Tk-vw0OPTHc9dipApYdgFtg8Dnc.roa (hash: rOkLE593RKrLBDVcD6kE+cn2O/S1gntv8KcELVYe+nQ=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: S8YI3/9ECFGfTyqeRaZoxCiFMOPCzDQRAn/RByoWrgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:70:f8:48:1c:4d:f3:e5:89:a3:45:1e:ae:32:18:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Nov 5 02:01:55 2026 GMT
Not After : Nov 6 02:01:55 2026 GMT
Subject: CN=a219f1092816abc2458eb8483ba048866f9c25bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:44:e1:fc:c9:db:55:ca:e5:fa:2e:7d:37:3a:
55:d6:25:7d:a2:67:1b:b6:82:47:5c:09:bb:bc:14:
a7:e3:b3:f7:dc:81:b4:28:f3:3e:80:96:ab:e6:87:
ce:2f:e9:4c:40:d3:39:31:e4:8c:b2:dd:0f:e3:6e:
56:95:9e:f3:34:05:db:7b:4f:f5:1d:af:0f:47:5e:
b5:5f:a5:4f:55:b1:01:15:20:7c:c8:55:1e:3f:69:
b5:df:7c:9a:45:9e:64:78:c7:e5:ff:82:24:1a:99:
9f:d2:39:f1:36:82:17:5f:00:93:34:f4:de:87:93:
11:f9:bb:d2:53:1c:9c:f9:b3:bf:83:f0:53:0f:5c:
0a:56:0f:50:a3:3a:a1:e0:06:42:91:a2:e1:2b:81:
39:86:8a:be:af:4f:2b:3c:71:bb:3e:80:46:59:0b:
53:27:0b:02:33:a7:cf:b6:2d:27:de:77:f3:0c:f7:
64:73:bb:55:45:60:09:44:9a:63:1b:29:8a:f9:9c:
03:63:d6:14:e6:be:21:5f:28:c3:64:44:5b:fd:cc:
3e:b9:a8:a4:22:fa:b4:73:ab:4a:14:b1:f3:f5:69:
bc:47:1a:31:72:60:c6:58:03:00:65:0a:c3:80:4a:
31:1f:e5:59:2f:44:96:05:92:da:7f:a8:2a:56:92:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:F1:09:28:16:AB:C2:45:8E:B8:48:3B:A0:48:86:6F:9C:25:BD
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a4:9e:40:99:c1:9e:67:f6:11:6f:25:20:ef:2e:ad:df:ff:
b1:47:94:c0:dd:68:dd:98:b7:df:12:28:58:58:13:48:4d:67:
ac:fe:23:8a:c0:df:f2:77:84:7c:a8:c1:d0:74:1a:d9:a4:ab:
91:77:21:bf:8a:f0:d4:9c:a3:ba:c5:f0:12:81:e1:fe:ff:79:
5c:2b:00:ec:2b:e9:f0:14:38:e6:f4:83:85:b5:55:24:14:00:
95:32:1e:9d:71:40:dc:87:8e:88:5c:31:0f:fb:f7:d3:49:9a:
de:a2:2a:61:e0:d6:cc:fa:96:3e:60:c3:73:e3:86:d0:3f:b2:
e6:4b:de:90:e8:85:c6:3b:f0:40:d5:51:fd:3e:eb:12:c6:75:
21:0f:b7:33:20:ca:9f:3b:e4:e3:ab:8f:7a:d3:df:c5:a1:48:
fd:78:1e:1a:e8:2d:00:c7:5c:f5:08:96:02:0c:d9:ab:69:23:
e9:23:37:46:39:e6:f3:f9:a9:f6:e6:8d:ac:10:07:94:98:8e:
39:55:05:bd:ba:dd:5f:7f:a8:66:de:d3:65:b1:a5:15:ba:15:
94:01:13:d4:86:cd:b7:58:c7:05:41:71:17:cb:a3:e0:be:fb:
91:9e:55:67:c0:d3:33:fe:63:10:40:55:c6:f0:83:3c:d5:72:
09:5e:d0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:22:04 2026 by rpki-client