Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: 1jdRXfHFJvRlq/h8Sn/7QuLxe2RLU6W+qm+spmGUHcg=
Subject key identifier: 17:1F:11:49:B9:42:6D:AC:BF:08:8B:45:34:EE:F1:FE:6B:E0:5E:20
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 01A0C3D752200596DEB46DAB88470C918335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 12:01:03 +0000
Manifest this update: Mon 21 Sep 2026 12:01:03 +0000
Manifest next update: Tue 22 Sep 2026 12:01:03 +0000
Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=)
2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: NQ8eJ6UwMnfCtNBwQ1EXXbMo4fX5wWaMrs7fFwn0GHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:52:20:05:96:de:b4:6d:ab:88:47:0c:91:83:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Sep 21 12:01:03 2026 GMT
Not After : Sep 22 12:01:03 2026 GMT
Subject: CN=171f1149b9426dacbf088b4534eef1fe6be05e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3a:20:de:6a:4b:0c:e6:d7:62:c3:cc:a7:9f:
13:40:4d:2b:3f:51:09:cd:f6:d2:39:78:96:31:db:
57:f0:33:bc:1c:ec:a7:12:00:e3:f4:ae:71:e2:19:
c1:17:8d:cc:0b:7d:a5:6e:aa:50:cd:65:ec:5e:1f:
bb:1c:16:ae:3e:0a:ea:46:6e:1b:f1:47:2e:65:a6:
70:35:df:f3:09:bc:02:18:50:c7:e4:84:77:3b:01:
c6:96:59:a3:a1:7e:20:3f:8b:a1:10:55:22:92:25:
9b:17:7a:03:cb:58:71:10:2e:cd:b5:49:10:59:81:
31:a7:78:0c:77:59:d8:1a:8f:96:f1:49:f1:c6:f4:
3b:f1:2e:2a:0c:7c:4c:e8:e8:a5:13:c4:f7:09:4b:
1e:81:ce:28:3b:bb:ad:26:a4:1b:ff:a0:23:6e:d2:
78:d4:67:f8:61:e7:08:39:b9:e3:5c:a2:9f:e2:ed:
44:9c:8a:05:d5:dd:60:5a:e9:9e:dc:d1:c1:86:26:
c0:f7:94:16:bf:31:f8:71:52:6d:3e:82:da:fe:ed:
9f:c1:9a:fe:6a:2a:19:06:e7:94:fc:f2:b0:3d:14:
91:f1:f8:fd:15:63:15:43:8e:19:8d:35:7a:ac:7b:
f0:7e:3b:ed:67:7c:60:98:7a:db:a2:de:33:ac:5f:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1F:11:49:B9:42:6D:AC:BF:08:8B:45:34:EE:F1:FE:6B:E0:5E:20
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:02:00:0e:06:74:07:c3:e6:8b:14:a8:d1:d3:be:ed:c7:f0:
79:df:ca:47:ab:2a:2e:34:c5:a1:37:69:30:89:b5:26:86:d1:
e5:8d:25:83:8d:15:aa:24:e1:34:93:dc:e7:1f:55:d8:68:6c:
30:38:15:f1:e0:16:fd:a7:95:c0:46:d9:b5:c4:b8:1b:29:94:
8e:a9:36:12:ce:76:79:1b:b9:92:c2:48:28:c5:49:fe:fd:0e:
a1:d9:c3:fd:27:08:db:6c:16:41:cc:6e:d5:4c:14:6e:4a:e8:
39:82:dd:5f:b1:c9:ee:27:a4:16:84:b7:10:8d:49:3b:48:20:
28:c5:3f:b5:93:15:8b:eb:99:f9:ea:ab:29:1c:e9:f4:69:0f:
35:d2:e6:4b:35:4d:eb:85:d1:2c:32:e0:8a:8c:b1:51:4e:b4:
23:a5:a0:7f:af:b0:29:b3:9d:c8:f7:87:34:40:e7:ea:98:00:
21:32:81:9d:4a:a5:28:e0:b2:3c:61:dd:7d:f6:dc:cb:7d:c2:
66:e3:0e:a3:02:ab:88:59:45:68:c6:2f:0c:4e:9d:4d:08:4f:
90:36:00:d3:69:a0:bc:79:a5:07:b1:d5:82:3a:6d:ef:5a:56:
99:a0:27:42:b3:09:12:bc:98:f5:fb:63:f0:cb:a0:7c:d1:87:
69:1c:da:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:44:26 2026 by rpki-client