Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: aAIxc3+KwXl/X3f8WpqKNfd6XXTNb/kXXEi8pDfrZXM=
Subject key identifier: A6:31:76:7D:45:BB:D0:7E:EF:CC:7B:C3:9B:D7:2B:97:65:81:EA:BF
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 01A0E061E6C49768E9BB123CE2F102B490A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 07CB
Signing time: Sun 27 Sep 2026 01:01:47 +0000
Manifest this update: Sun 27 Sep 2026 01:01:47 +0000
Manifest next update: Mon 28 Sep 2026 01:01:47 +0000
Files and hashes: 1: 7Lr6p7DxKnwsqNm2CLB6OM0-G9k.roa (hash: MVl7TrZfOYT29YZfSTEksTVjTVaYtldybqMvFAfAqSw=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: vu0NQ/iPB6b5tGQt5fJ5fj8jxtP+Wn1UlT7ZBoKLPHE=)
3: nLzx58TFso7KcSU-xZqQFwqs76E.roa (hash: X8XgfJ4xsaevH8Jt00V++9TqwIkHOO/EM9BBJ5XdWxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:e6:c4:97:68:e9:bb:12:3c:e2:f1:02:b4:90:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Sep 27 01:01:47 2026 GMT
Not After : Sep 28 01:01:47 2026 GMT
Subject: CN=a631767d45bbd07eefcc7bc39bd72b976581eabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:81:ca:28:50:d3:a0:91:b2:07:92:78:5e:
92:32:33:2d:00:aa:9f:db:f5:6a:86:12:69:6f:ff:
79:5c:18:f2:c5:28:f6:d6:4c:ea:1c:6c:1f:f2:43:
ab:f3:64:f5:2b:65:61:08:cc:ba:9d:cc:e8:dd:ce:
ed:fb:a5:ff:e2:9d:f7:e9:3e:39:4e:8f:64:08:4d:
f8:b3:1a:a7:c6:cc:7f:07:43:76:0a:2b:58:41:93:
7b:1b:e8:03:39:a1:d7:05:83:5e:8e:ec:b4:bd:9d:
ff:7d:a9:ff:a5:3b:7e:62:3a:3d:77:15:11:0f:7a:
3f:e0:1d:e0:d0:2d:d3:16:86:b7:74:21:18:7d:92:
5b:4a:5c:6a:1c:da:5c:af:28:14:5b:0d:ef:92:e9:
c8:a5:12:79:ee:2e:b1:4f:c4:c8:2e:92:a5:72:58:
be:40:ec:36:47:5f:19:55:39:61:a7:0f:eb:65:0f:
08:f1:69:6e:b0:7f:20:f8:59:16:d4:5d:ae:4b:c8:
76:5e:17:af:65:0e:84:1e:4c:e0:2c:f9:ee:89:e3:
35:96:ea:20:6b:32:8c:ea:d9:46:7b:36:a0:9f:68:
3d:11:ee:cd:27:6f:a9:5b:6d:9e:6f:94:44:cc:28:
00:15:cd:3b:8f:16:3c:6d:dc:fe:10:77:8f:98:1d:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:31:76:7D:45:BB:D0:7E:EF:CC:7B:C3:9B:D7:2B:97:65:81:EA:BF
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:35:6c:68:9f:d6:cd:0e:31:b1:3d:13:63:be:9d:c0:6c:f2:
1e:9b:b7:56:13:85:61:6a:c1:14:e4:23:92:92:e0:7d:83:3d:
98:7f:4a:97:df:dd:c2:82:d7:6d:24:bd:8a:e2:f4:e4:0f:39:
4b:08:f2:03:af:81:bb:bc:b2:d7:3c:86:b8:f4:94:5e:b8:3e:
d9:2a:64:47:c3:ec:cd:02:b7:d3:1c:fe:8e:7d:ad:6a:35:54:
be:2d:4f:54:74:03:7d:4a:fd:02:3f:10:61:d1:9e:d9:47:50:
20:ee:89:b5:18:1a:ad:8b:57:5d:27:d1:36:16:bb:ea:0d:3f:
74:f6:28:d3:75:20:4e:a3:aa:b9:cf:29:03:f2:3f:b1:2d:f5:
da:30:47:02:08:65:b6:ff:96:1b:d7:24:51:80:67:8c:7b:0d:
d9:2a:f2:cf:34:36:73:ee:d9:49:a1:cd:9a:c8:17:0e:cc:19:
a4:ce:a8:8f:02:63:6a:a0:e4:d7:45:2d:21:21:f0:e8:25:b2:
60:40:78:96:b5:92:54:9e:d4:8a:37:81:05:43:44:3e:f2:8c:
ac:0d:e7:c5:e6:e7:23:de:bd:ab:97:dd:68:4e:aa:55:b4:3b:
7b:6b:7a:aa:92:9b:6f:7a:b0:17:5f:15:0b:89:41:5f:ad:3c:
4e:d8:5e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:22:49 2026 by rpki-client