
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
File: zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json)
Hash identifier: Vfpp/Ni0R0CxU4yzqS6I5Rdp0QQvlNUCxah+wot64MY=
Subject key identifier: DC:EC:8B:AC:49:FC:A3:E6:F1:FE:CB:43:0A:65:4B:9C:0D:02:60:80
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Certificate issuer: /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial: 01A1DF4BFF270AB33BEA8825830CA3810DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 13:01:01 +0000
Manifest this update: Sun 15 Nov 2026 13:01:01 +0000
Manifest next update: Mon 16 Nov 2026 13:01:01 +0000
Files and hashes: 1: 8irMhN6XI4UTd6CziWQze6aQaRU.roa (hash: 4USQ1+WIpW+ALL4UR8+ywA+eZ3L7W74DTtNUv/veQUw=)
2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: swq67TNcFt6/xx46Gpgagyk71f1OBf9uKxHoARPTFuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4b:ff:27:0a:b3:3b:ea:88:25:83:0c:a3:81:0d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Validity
Not Before: Nov 15 13:01:01 2026 GMT
Not After : Nov 16 13:01:01 2026 GMT
Subject: CN=dcec8bac49fca3e6f1fecb430a654b9c0d026080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:35:b8:4f:8b:7e:3a:0f:da:e7:9e:9d:a3:
9f:bb:b6:4f:78:99:0d:39:d9:4c:10:ac:19:99:2b:
44:88:a1:2d:a1:9b:a9:39:27:19:86:2a:e5:4f:de:
a4:64:67:a0:0d:95:cf:63:30:4d:91:b8:c8:47:29:
b6:f8:eb:be:4a:72:79:4e:4f:d8:9e:eb:70:e1:12:
2f:a3:69:44:c5:8c:45:ed:e9:a4:54:2d:2d:32:7c:
62:ed:b2:a7:0f:dc:40:67:2d:9f:f2:17:7a:10:21:
18:76:09:2b:f5:98:4e:7e:f9:a9:d2:85:fc:fd:d5:
34:7d:eb:64:23:22:91:a1:96:5d:b0:49:1c:23:6b:
e1:08:1a:09:38:ab:4a:3f:62:cd:a0:12:36:2b:bc:
6b:89:8f:83:f1:51:c5:46:79:26:5f:06:17:55:d7:
ec:a5:0c:32:60:16:bc:b5:6c:22:e1:3f:1b:45:91:
a9:f8:74:ea:ef:2d:35:6d:71:51:c1:c9:8a:cb:84:
3d:35:cf:5b:ac:96:b6:4c:28:a5:49:c8:b1:bc:d1:
4b:b9:62:0a:40:84:21:a9:e9:74:d6:12:27:c4:6a:
5d:38:11:0a:59:d5:2d:a8:b0:90:41:de:b6:a4:92:
8f:0b:55:5f:94:e6:5f:30:9c:49:f4:6b:3f:df:6d:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EC:8B:AC:49:FC:A3:E6:F1:FE:CB:43:0A:65:4B:9C:0D:02:60:80
X509v3 Authority Key Identifier:
keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:94:05:38:2c:19:62:99:d9:f6:a8:6d:a7:d0:40:18:ba:e1:
7a:ad:f6:03:04:2c:a8:11:eb:28:bb:dd:10:b1:94:8a:1b:be:
a5:3c:ec:42:4e:1a:61:43:a2:0c:a7:fc:8e:48:41:63:81:d3:
ab:8e:e5:14:3a:17:2c:53:ae:11:78:d4:f5:66:8d:7c:7e:50:
d4:85:ba:65:60:d1:c9:7d:82:a0:4e:d9:00:70:6c:ed:c4:7a:
89:f3:a2:d8:0e:ee:de:55:c8:c5:cc:7e:4c:7c:24:87:c0:22:
0b:c3:2e:ce:9a:43:46:3b:49:de:25:9d:57:4e:37:78:82:d9:
5e:11:8b:e0:4e:01:13:7b:4e:41:06:23:a5:57:14:48:a8:7d:
b4:3a:2f:05:f6:73:b8:17:b7:52:ad:05:52:b9:4a:e1:0e:41:
1c:18:d6:03:54:e4:84:70:4e:4b:13:c5:e3:4d:1b:21:10:b6:
84:8d:8b:6d:8b:a3:47:63:fa:f4:57:3c:dd:73:8d:fd:5b:58:
93:39:8a:32:84:e4:65:11:ec:c0:fd:ee:26:e9:5a:d6:4b:0c:
0e:06:93:bc:d5:1c:62:56:19:df:ed:67:32:77:1a:ab:14:61:
6c:b5:09:d2:9c:f1:5f:0f:70:c7:4a:09:c0:cb:30:09:d0:a7:
58:58:ab:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:43:58 2026 by rpki-client