Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
File: zHjaWyZetWpkanhB0edipoGdGY4.mft (raw, json)
Hash identifier: QXfE0TgOc4pXDjZwBA0h9ZfBouiRFp220G5D0GIwoUg=
Subject key identifier: 8E:E4:23:47:B3:D7:0C:A3:95:FB:15:A4:45:95:94:B8:21:A5:2E:A8
Authority key identifier: CC:78:DA:5B:26:5E:B5:6A:64:6A:78:41:D1:E7:62:A6:81:9D:19:8E
Certificate issuer: /CN=cc78da5b265eb56a646a7841d1e762a6819d198e
Certificate serial: 01A11E9AF7286ADCE5A9714C94994F6B37E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
Manifest number: 023B
Signing time: Fri 09 Oct 2026 03:00:34 +0000
Manifest this update: Fri 09 Oct 2026 03:00:34 +0000
Manifest next update: Sat 10 Oct 2026 03:00:34 +0000
Files and hashes: 1: G8cAZv7tHHribPfmvn4SJFJ-UoQ.asa (hash: DZYgSOVWEWTSSh7Vu2ORd4WJTX15OedkU36FRtvd8io=)
2: tP4qHEtDUQvjf36iOnLV45cOf2o.roa (hash: 5UJ1b7p3+0n6ZdGAJbovENFOUwGoBnRF0QiPojOFI5o=)
3: zHjaWyZetWpkanhB0edipoGdGY4.crl (hash: F8KdAEwPbzcSasOeRHOmA99DLIYkKYY0ukQ8dCguygs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:9a:f7:28:6a:dc:e5:a9:71:4c:94:99:4f:6b:37:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78da5b265eb56a646a7841d1e762a6819d198e
Validity
Not Before: Oct 9 03:00:34 2026 GMT
Not After : Oct 10 03:00:34 2026 GMT
Subject: CN=8ee42347b3d70ca395fb15a4459594b821a52ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:26:7e:e0:c9:50:db:b8:7c:f7:ec:75:d3:
45:9f:96:75:64:45:8a:91:10:4f:09:09:63:24:e0:
4e:f2:af:82:63:4e:c3:53:55:c9:3d:ee:c7:01:6b:
34:21:50:0f:56:2a:4a:36:1b:da:b9:35:76:fd:67:
07:11:80:22:5a:55:4b:af:ca:6e:ab:7f:b2:81:63:
72:d9:13:57:05:95:7e:81:06:f6:74:32:21:a2:7d:
fe:ed:68:84:f4:33:eb:24:14:ee:49:ea:86:d1:d3:
9f:6f:ff:7f:5a:5e:54:f3:6f:01:6d:6b:8d:ca:9e:
d3:46:02:6a:b3:ae:b1:db:a7:d2:f2:69:13:bb:e2:
5b:13:3f:bb:a5:db:67:bf:bd:3e:1b:24:55:56:ab:
88:48:a4:7a:a7:fa:bd:68:d6:6a:86:9a:99:55:08:
a7:c4:36:16:af:06:5e:53:15:33:0c:33:d7:80:b1:
fc:6d:fe:3e:60:dc:2a:a2:81:58:5b:6d:60:02:d7:
ad:5d:e2:b4:c6:92:20:f1:b3:0a:d1:b5:f4:44:d3:
fc:1e:81:4c:54:b0:cd:11:74:2b:8f:a4:fd:bf:d6:
f6:d9:0b:a2:f0:2e:fa:e0:9b:25:6e:87:ef:3a:66:
7d:d4:6d:cf:cd:85:ac:99:70:ac:da:fd:1a:a0:71:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E4:23:47:B3:D7:0C:A3:95:FB:15:A4:45:95:94:B8:21:A5:2E:A8
X509v3 Authority Key Identifier:
keyid:CC:78:DA:5B:26:5E:B5:6A:64:6A:78:41:D1:E7:62:A6:81:9D:19:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:40:10:c0:51:8f:57:89:c6:b8:a0:a9:82:d4:09:21:61:8e:
94:06:e2:7c:76:0c:a5:1e:01:7f:91:88:93:7f:88:91:2e:58:
66:c9:bc:db:9d:49:58:14:99:06:5b:4b:67:98:ab:96:f7:4e:
63:f8:20:23:15:ff:24:87:28:a6:d8:a8:ba:63:ad:48:a4:ac:
39:c8:b7:ee:0d:3e:a0:f9:b4:04:ba:97:e8:80:4b:29:24:04:
e1:fe:1d:96:64:7e:80:d8:81:d7:94:89:3e:87:f9:0b:cd:85:
b5:fc:85:c3:50:99:8b:f0:87:59:e2:8b:14:db:8e:f7:ff:35:
16:b6:97:e7:82:2e:0c:d7:9d:5f:81:cf:ca:2b:fa:f1:9b:06:
3e:22:b0:2f:47:ba:55:b8:d4:10:40:69:cc:52:93:52:fd:7b:
03:ce:fe:50:9d:ad:5c:c6:30:6d:5f:a6:90:cd:de:29:52:fc:
21:36:e6:78:15:44:44:fe:31:c1:32:0a:98:d5:8f:b3:fa:7c:
16:d0:31:b9:7c:33:1f:e4:86:ab:e2:10:1d:f5:05:2b:9d:eb:
4c:e4:0e:52:1d:6a:53:56:df:c5:e6:4c:71:53:15:1f:4e:6a:
51:bf:bb:eb:c8:54:12:4b:4a:3e:74:7b:ce:f6:75:20:81:f7:
31:dd:ba:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 10:06:02 2026 by rpki-client