Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File: zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier: 702PX/TOCqSrAPWJUruIb20tbmL58SDQCTwoWrHIwgk=
Subject key identifier: E9:88:83:01:2E:83:D9:76:5E:AB:A7:8B:89:06:9E:96:EE:BE:E6:61
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 01A13D49EEE76046C0DFB30958262D1EB923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number: 1AB7
Signing time: Thu 15 Oct 2026 02:00:17 +0000
Manifest this update: Thu 15 Oct 2026 02:00:17 +0000
Manifest next update: Fri 16 Oct 2026 02:00:17 +0000
Files and hashes: 1: 8OPf-TYppgb-lWxDdXUmvn4lAOc.roa (hash: hCC9pcZlwckfG4uw3UFpwoter9oKt9FivUAlBWxQl7Y=)
2: L66cmmlC06Wcdn7XL6i2OjeyJz8.roa (hash: 98r7JlYeRTjaXUzjuxu020n7woB7ZmKJCIQsHxK3ViA=)
3: LT0Iyo1R8YEuaI1JHoSd3uYiu4U.roa (hash: doboAOIfjYNyHdw1r6xfrE7hmv8gQ0YwGnxIdc/ApGY=)
4: OxKWVKSu8q5MpbR4mXLRZseiBak.roa (hash: WzjynFG/qnlCwj8eYyliY8fN3o7QhJH4fPJus7/EOTQ=)
5: Wx7zSJ4BFdUre-x5J2lYzvpF4jE.roa (hash: 5usbDenLcJwn1HnlbKVb9xkpHXYP/L2fciKVWt4yeXw=)
6: XNfpJ_jMRsEIETRyReqCXiOLGU0.asa (hash: RC0524eXrry18ALIN/KuXMpYFLI/ZkcUf5LSNtqd4ss=)
7: cOUUKUyq3fFSSy6l5-mjbaxhQhs.roa (hash: KLqb5U6DgNfIS88yDz/06LUw3OWjpinY/pIyqKDYmR4=)
8: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: 9+2as8tGdAeJQ+xkAOIQBi66XuTCpHdmAy9ic40kzxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:49:ee:e7:60:46:c0:df:b3:09:58:26:2d:1e:b9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Oct 15 02:00:17 2026 GMT
Not After : Oct 16 02:00:17 2026 GMT
Subject: CN=e98883012e83d9765eaba78b89069e96eebee661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:94:68:7f:5c:df:89:0a:26:bc:cd:e3:db:
4f:9f:cf:b1:44:5a:1f:c5:c0:3a:92:56:28:34:55:
a7:47:4a:14:ef:29:54:73:1a:ef:d1:56:9b:d1:ee:
3b:bc:c5:0d:0d:5b:c5:29:12:13:de:9a:95:1c:3d:
29:e0:e0:c1:52:53:4d:ef:a8:16:40:14:c7:48:2a:
70:dd:89:5b:dc:79:94:af:e7:7e:5e:b9:66:ec:82:
78:62:61:1e:ab:18:d1:fc:dd:10:d4:72:3e:3e:26:
fa:36:fd:8e:15:df:1a:fa:db:a7:1b:86:04:fa:ab:
3f:30:ec:4e:67:99:1f:9b:02:d4:a4:89:9a:fb:44:
f1:a3:69:6a:eb:9c:37:26:4d:32:de:91:92:e0:db:
d6:29:d7:3d:70:66:ca:8e:d9:c0:5b:48:2e:83:41:
61:2f:42:3c:23:dc:fb:23:9f:d5:24:1a:bb:9e:79:
70:4e:98:45:d2:85:3e:59:bb:9b:87:b0:9c:e4:d4:
a1:1c:bd:7a:a6:13:37:d3:df:32:f6:3f:18:8f:90:
c8:45:fc:92:25:94:33:9f:47:01:d9:bb:68:50:54:
bb:aa:96:f9:62:c7:37:1d:47:07:37:1f:87:a8:53:
8a:63:2f:82:d7:80:4a:8c:86:49:b6:74:5f:33:8e:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:88:83:01:2E:83:D9:76:5E:AB:A7:8B:89:06:9E:96:EE:BE:E6:61
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ef:23:c7:be:3f:b9:6d:c2:67:c1:57:20:e7:0f:9b:53:15:
83:a3:5a:52:f5:8d:d0:59:0a:73:5f:fc:2c:fe:83:b4:74:8c:
0c:b9:25:ff:1e:71:3c:bc:b9:fb:35:74:af:3b:f9:4d:49:85:
59:f2:69:7b:4a:86:b8:50:d0:d5:9c:ac:d8:90:90:e4:4e:17:
33:14:a6:ab:87:03:76:6e:a1:1b:07:47:39:0d:7a:18:60:48:
a6:cf:3d:87:a9:78:42:0e:e9:a1:84:38:6e:fe:c1:eb:21:f3:
e5:6f:6b:3a:af:af:e5:ed:bf:8c:f1:9a:ab:d3:e9:1b:7f:8a:
22:79:24:5a:ad:18:2b:6f:87:70:34:7f:5d:d1:a5:57:fb:4f:
0e:38:3a:e7:8f:e3:e8:b4:9e:0b:07:9c:e2:50:47:97:17:f7:
e7:99:b2:13:24:12:5d:59:ee:b0:79:29:0c:80:cb:54:77:49:
b8:4d:4d:35:03:66:77:15:ff:3c:a0:79:a9:b3:25:37:49:a0:
53:e0:c0:ab:a4:8f:c6:66:1b:b3:45:e4:a4:01:8c:79:ac:65:
bc:fd:07:7e:f4:b4:af:a8:b5:25:c8:8c:05:59:f0:67:a0:73:
35:37:f5:68:b4:3b:61:54:0b:94:d9:3c:ce:96:95:62:50:0a:
05:61:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:19:58 2026 by rpki-client