Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: eBtWHwZdHg6oXKbfrZ/IOi0/8QNmvR9R3los8jmAJY8=
Subject key identifier: 7C:26:02:FB:82:41:8E:E6:FC:CC:B9:88:07:DE:2E:06:E4:D3:3A:B5
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 01A1DDCC10014B7D79C37A710E04C80EB9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 06:01:40 +0000
Manifest this update: Sun 15 Nov 2026 06:01:40 +0000
Manifest next update: Mon 16 Nov 2026 06:01:40 +0000
Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=)
2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: mXTvScsWQf4nHFlhh5A2ebMZUBHAia0mDYDeXmuLA+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:10:01:4b:7d:79:c3:7a:71:0e:04:c8:0e:b9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Nov 15 06:01:40 2026 GMT
Not After : Nov 16 06:01:40 2026 GMT
Subject: CN=7c2602fb82418ee6fcccb98807de2e06e4d33ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:fd:f0:9b:cd:b1:47:ba:a8:fd:86:c0:73:
fd:72:57:b5:3e:aa:07:ae:3a:cc:d3:68:5e:16:99:
c8:4b:39:ed:b0:7e:8e:1d:e8:78:ef:1b:25:c3:28:
88:8d:b8:fe:3a:1c:fb:15:48:18:93:0d:8a:09:82:
87:3d:26:76:91:d8:69:68:aa:c1:8a:9e:bc:6c:a7:
f5:15:25:90:de:cc:16:c0:82:7d:d3:a1:85:54:3c:
48:1d:20:ce:da:3e:5b:05:48:50:10:80:e2:48:be:
91:de:db:35:83:d9:76:04:54:60:e5:0d:19:8a:c0:
8e:e9:b9:81:eb:3b:48:b1:a4:2c:8a:46:9d:6c:0b:
c4:42:5b:69:ef:7a:93:5f:ff:80:75:78:50:6f:56:
1f:00:da:d8:59:dc:00:fa:1b:4f:d0:30:f4:21:bc:
28:13:00:df:85:80:02:46:bb:e2:1a:ee:8e:5a:1b:
9d:2b:3e:24:f5:d6:87:ba:b6:cc:47:36:8e:0e:e9:
42:e4:79:df:aa:1b:f0:ff:06:54:33:5b:7c:88:61:
cb:b4:40:89:92:15:8f:5f:92:74:c5:1d:fd:dc:6e:
7f:52:30:9a:9f:e6:96:01:c0:f2:75:47:f4:d8:f2:
92:f3:e9:c5:6c:84:08:f8:34:fe:35:1d:86:1b:de:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:26:02:FB:82:41:8E:E6:FC:CC:B9:88:07:DE:2E:06:E4:D3:3A:B5
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:48:5a:97:e6:0d:8c:b8:e7:95:48:84:4a:67:48:6c:95:b0:
a9:dc:40:77:d6:d4:22:c4:44:2a:68:f6:c2:90:66:0c:8f:52:
21:89:5f:76:5a:a9:4b:84:14:e7:ef:c6:33:ec:94:e6:72:a7:
77:98:83:a8:f6:2c:78:02:0c:dd:1e:fe:7e:08:5c:a5:73:6e:
65:d3:d0:15:74:ec:e6:09:66:47:f5:4d:c7:da:0e:25:f8:1a:
bd:d3:c8:c5:29:54:b6:b0:d3:44:02:ec:f8:29:63:c9:c9:9d:
b2:b3:48:b5:6e:94:52:b2:f9:ca:34:3d:86:85:fa:1b:0a:2a:
6b:8c:7a:5d:0e:dd:2e:41:73:e1:5a:47:01:33:92:37:42:de:
f6:1f:0b:99:d6:50:7c:3b:bb:f6:80:a1:4d:0d:25:f6:68:65:
14:44:f5:cb:a2:46:d5:de:22:04:1e:f3:b4:28:3c:bf:03:cf:
26:69:78:e2:36:c8:92:2e:89:b5:58:eb:48:7b:db:ac:2d:bb:
69:1e:19:ae:ab:0e:f8:3d:f4:10:3b:47:84:09:5c:bc:f1:25:
fc:09:b6:29:c6:cf:ae:65:3d:9e:6a:f2:dd:a2:d1:9e:50:e3:
8c:46:01:c6:3a:48:01:62:5c:ab:2f:59:d7:c7:41:3c:f8:7c:
b8:7b:cc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:53:00 2026 by rpki-client