Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
File: zNHiiTDXen65iRtvq7spFe44hao.mft (raw, json)
Hash identifier: BAMDPpw3KMxte6BpOIp/amNsFGY/apbJO5sRKiAbH00=
Subject key identifier: 5C:18:AB:84:42:20:CA:ED:A4:29:87:96:22:DF:7F:87:B6:56:17:44
Authority key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
Certificate issuer: /CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Certificate serial: 01A0CE9142C1289E2A3E74AD0D1553F7F6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 14:00:21 +0000
Manifest this update: Wed 23 Sep 2026 14:00:21 +0000
Manifest next update: Thu 24 Sep 2026 14:00:21 +0000
Files and hashes: 1: _NSxXKWLAT32ACYjnb_Q_v0bth4.roa (hash: jFEG3V9iSls0XRVWy4kyBvsz0M23pnXIeMtJ7lA5i08=)
2: zNHiiTDXen65iRtvq7spFe44hao.crl (hash: aUgvxeFo6FDwQ0vDmNzOenKXjSD5igRYWanEmoqSTvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:42:c1:28:9e:2a:3e:74:ad:0d:15:53:f7:f6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Validity
Not Before: Sep 23 14:00:21 2026 GMT
Not After : Sep 24 14:00:21 2026 GMT
Subject: CN=5c18ab844220caeda429879622df7f87b6561744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:fd:e4:1b:b2:78:c1:1e:82:e5:3b:c6:8b:
05:d3:7e:a0:18:e0:5c:e9:9a:03:24:19:72:9a:14:
1a:b4:01:50:33:3d:7e:88:b4:ae:ad:65:cb:4e:36:
c5:a1:18:b7:06:57:d3:91:f5:de:c3:0c:82:42:14:
02:cf:82:52:ce:ca:71:77:f2:30:50:97:ee:0b:36:
77:1c:4d:bc:cd:c2:45:25:3c:84:4d:cd:49:2c:e4:
90:52:91:2d:a9:7a:c5:54:9f:40:02:7f:f4:34:9e:
15:dc:a9:3c:07:a0:49:54:3d:a9:8d:e0:56:41:2b:
59:53:d2:eb:90:e7:7b:69:ab:76:86:76:75:e8:66:
8a:21:fd:73:b3:bf:8b:a7:34:0a:20:04:b3:4a:c2:
f2:5c:bb:4e:b0:6a:5e:77:47:14:b8:00:b4:ed:e9:
6b:fb:d7:69:c3:be:cc:42:a3:0c:90:9e:c9:3c:d9:
47:7f:a7:05:e3:0a:c6:0e:ef:2e:37:15:6d:ba:55:
d8:ee:dc:52:b8:18:21:de:f1:9b:8d:35:f3:38:d5:
fb:b8:fc:d6:55:76:f7:3e:cc:5b:51:9f:57:50:d8:
88:e0:6d:2f:9d:b8:85:ad:25:82:9c:ed:39:eb:26:
89:38:3b:bf:2f:0f:0a:23:34:62:b7:86:a1:69:c7:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:18:AB:84:42:20:CA:ED:A4:29:87:96:22:DF:7F:87:B6:56:17:44
X509v3 Authority Key Identifier:
keyid:CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:65:fe:b0:96:b5:99:b5:6a:49:44:a6:39:f1:ce:33:d5:f4:
38:10:c6:94:f9:20:7c:94:30:e0:fc:1b:d3:3b:ab:c2:4f:74:
d4:a1:58:26:bf:54:dd:7c:48:10:c7:3d:98:fc:20:f1:52:4d:
97:2e:66:21:6c:3a:7c:98:4f:0c:45:79:dd:46:05:f4:2b:17:
5e:24:fe:c1:05:f4:3d:97:fd:2d:8f:c3:4b:60:88:22:0e:7c:
60:8a:c6:99:b9:5d:d2:cb:ce:93:3f:0f:f6:66:da:52:bc:53:
de:52:6b:d8:af:2c:cb:be:4d:72:34:d3:c1:9c:e6:ef:b2:df:
c5:0b:be:8b:a1:0b:7d:12:b2:6d:f9:bf:3c:76:ec:f3:bd:26:
57:b8:0c:b6:0c:8e:fe:6a:48:24:a7:9f:a0:7f:f5:56:6a:05:
b1:b6:13:e6:2a:ff:20:d8:5e:2e:c7:a6:06:0c:64:51:bd:80:
d9:73:47:a0:db:a6:d5:69:58:0e:86:bf:57:69:df:ac:d0:6d:
b7:07:02:e9:31:c7:b5:c2:2f:09:96:cd:7c:97:7b:63:ce:f7:
4b:4b:fe:8b:a6:0e:4a:50:ca:26:17:f3:00:37:74:23:87:02:
0c:d1:8c:1e:f8:ec:02:8a:04:e5:94:07:52:85:9d:22:4d:4e:
d8:c9:de:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:31:56 2026 by rpki-client