Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: KcHdPSEExk7FnqUM0aMiSyJE4sW3bnka72EvdNKX2z8=
Subject key identifier: 60:FA:C9:1B:84:B3:EA:C5:45:C2:B3:68:3E:77:10:23:E0:16:7F:DD
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 01A0E0989C26FFF0931AFEEB4CC62253244B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 1AC0
Signing time: Sun 27 Sep 2026 02:01:32 +0000
Manifest this update: Sun 27 Sep 2026 02:01:32 +0000
Manifest next update: Mon 28 Sep 2026 02:01:32 +0000
Files and hashes: 1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=)
2: ZRWcaFP2lNAESYX_mW0VBxZBTAc.asa (hash: 3/7iwA3UKTDGkjOa2IbhOlBaTEtOKBbyoubltpbAgRk=)
3: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=)
4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: Y+sg41GSLhyj6AcY4BtW40Lo5mTZJ6WYjbg/waLPnms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:9c:26:ff:f0:93:1a:fe:eb:4c:c6:22:53:24:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Sep 27 02:01:32 2026 GMT
Not After : Sep 28 02:01:32 2026 GMT
Subject: CN=60fac91b84b3eac545c2b3683e771023e0167fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:59:ba:3e:f6:0e:aa:a5:49:43:d4:e3:54:
66:c7:06:c4:16:12:97:21:ad:50:5f:d1:c9:da:2d:
27:95:01:fe:4c:4e:a2:13:94:88:62:75:98:c0:66:
71:0f:4c:d3:6f:59:70:58:fa:a5:41:08:a3:35:b9:
98:8a:71:ba:5b:89:6e:9b:7e:c5:d3:77:8f:69:e6:
1f:31:98:10:a3:9b:3b:33:18:1e:03:5a:71:98:a7:
5b:1d:06:21:bc:99:c3:ab:d2:6e:74:af:8b:9b:d0:
7c:00:ea:16:60:d2:e5:76:13:d6:71:a7:22:50:ff:
95:33:a3:1e:44:e4:29:e0:d2:99:d6:a3:75:ee:81:
f9:88:d4:eb:c7:18:01:ce:eb:8d:40:3d:c1:95:54:
05:ee:e1:74:45:05:04:29:e0:58:57:72:77:ca:71:
aa:a1:10:bc:17:dc:77:c2:f4:b2:6f:63:be:73:c6:
08:fe:e9:1b:90:e0:06:f4:cb:51:13:1a:c4:32:51:
82:e5:d5:33:ed:b7:ce:ad:d3:c6:85:3b:92:9b:66:
1a:2d:64:6b:47:81:9f:ab:26:60:84:c6:d2:6c:c7:
82:09:dc:4a:43:a0:07:03:53:15:aa:ac:00:58:4d:
45:db:17:d1:31:3e:66:85:39:19:f7:4f:cc:03:1c:
3d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:C9:1B:84:B3:EA:C5:45:C2:B3:68:3E:77:10:23:E0:16:7F:DD
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a3:16:fb:bc:23:35:02:04:41:79:33:0c:24:3a:7e:f0:9b:
78:34:4d:c6:23:cd:dd:ef:a0:17:bd:34:d9:c7:13:e4:23:f1:
4f:ad:d4:89:f7:8f:41:6e:ae:1d:46:34:e8:bd:fb:c2:30:55:
16:c3:71:e8:36:25:63:26:8c:70:85:a9:88:4a:4a:a8:b6:fa:
11:3d:42:fe:f2:ed:fa:79:98:69:ab:b0:a1:c9:36:67:2d:ce:
5b:20:0a:aa:09:69:ba:07:fd:f0:0c:f5:7a:b8:07:6b:e1:4a:
7b:6d:37:14:52:17:1e:8f:20:37:06:8a:14:55:42:a3:dd:7f:
71:ad:6f:3a:12:6b:e8:72:80:69:aa:01:90:82:01:2d:56:b3:
17:72:9f:c4:94:8c:75:2e:71:d7:91:19:29:e3:59:f5:47:d3:
9f:46:47:81:4d:c6:69:42:0b:33:e4:3e:ac:28:84:90:ef:d7:
de:a4:bf:03:74:93:fc:a2:65:11:82:1b:9d:fd:10:8c:8b:3f:
b0:76:45:70:4e:9f:80:53:f4:ae:72:e9:7c:4c:9d:2b:30:55:
b5:99:9e:56:a7:c7:a2:03:a5:8c:41:6b:17:0e:51:89:78:71:
87:ed:1e:82:c6:da:d1:8d:a4:26:da:ca:bc:7f:b2:91:36:c1:
02:f3:1d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:33:34 2026 by rpki-client