Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier: dqiKdJ5BtgDqTtfI9387cgC+UPAgwtiphdqykZgZjTE=
Subject key identifier: 1D:6D:4C:EF:4D:4D:0F:24:24:61:FE:89:7D:2C:40:9B:DB:5E:39:1F
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 01A1DF4C12A2F931C577F3D0D939DBCD6EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 13:01:07 +0000
Manifest this update: Sun 15 Nov 2026 13:01:07 +0000
Manifest next update: Mon 16 Nov 2026 13:01:07 +0000
Files and hashes: 1: 502RJFuHYsVVdsk5nlBdFZUnjzA.roa (hash: J6t8qFuhu7mWQDizillanFkdE0VQubG3/+wxJ1PTiNE=)
2: H5WGDRV0Cja1HIG_Gz5Hy5IDN2I.roa (hash: xT+WKT5cnc3Ep9zj5B/hCN7Fut8wkjVPD70bqm1rWyw=)
3: N3w2YmGANLSdSH-pmW22BuKUUBA.roa (hash: uB29W9OdRAZ7PHwh9T8cMIQuzRXrkCYKeRnBEx1cojA=)
4: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: mJCZpGmLCYao527+BCJGC51qPXmrWzD3tXEWylNL2H8=)
5: ehC04eDurG--NxqYOKej5J5_Mkc.roa (hash: awoH3KlHVYA/xFgpcE34EbkUxOAICljJqKoGjg1R2VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:12:a2:f9:31:c5:77:f3:d0:d9:39:db:cd:6e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Nov 15 13:01:07 2026 GMT
Not After : Nov 16 13:01:07 2026 GMT
Subject: CN=1d6d4cef4d4d0f242461fe897d2c409bdb5e391f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:db:f7:d1:08:ef:7a:4e:bd:ae:34:6b:ca:
52:be:d7:44:5e:be:b6:bd:82:ce:ff:d8:3c:85:28:
d6:5c:90:13:c0:f5:38:0a:ff:75:d5:ea:79:e7:41:
ca:87:10:74:c6:90:f4:99:24:c3:5b:76:4d:82:8c:
a4:8b:0a:60:a9:27:c4:a5:fe:de:f6:e4:49:80:d0:
c5:5a:9b:8e:0a:8d:46:7c:fb:1b:b2:d4:85:ae:df:
1c:65:18:2c:53:0f:2c:06:e8:47:06:c4:58:ba:d0:
b2:c2:68:04:0a:32:ed:88:fd:73:dc:2b:8c:24:65:
c0:98:ce:c2:01:b5:17:a4:9d:c3:aa:b4:b3:1a:b2:
10:35:44:16:be:ad:23:c2:0c:c6:0b:18:d7:4e:c8:
16:ba:60:03:df:06:ec:88:55:de:1f:f0:2b:4e:66:
0c:5a:8f:83:b0:0b:65:31:23:eb:6f:88:c1:35:7e:
a1:e0:96:85:13:11:be:27:43:4c:44:f3:b6:20:2b:
12:98:5d:1e:0b:f0:0b:33:69:e4:c4:79:bf:9a:34:
fd:03:05:d1:65:41:88:9d:7a:84:cc:8c:46:07:dd:
9d:7a:1d:cc:25:c4:54:8d:e1:24:b6:1a:d7:c7:5b:
58:cc:c6:b7:f5:c0:bd:5a:9f:66:4e:a5:41:23:27:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6D:4C:EF:4D:4D:0F:24:24:61:FE:89:7D:2C:40:9B:DB:5E:39:1F
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d1:9d:da:45:72:5d:aa:a8:0d:a6:ab:b8:3a:5b:5e:0f:b4:
1c:70:c1:22:f7:45:6a:a2:50:ee:c5:96:36:bb:71:4b:46:96:
ed:42:1a:6c:e8:c2:60:71:50:98:39:b2:74:64:bb:88:0a:60:
62:9f:82:60:78:cf:bb:bb:10:ff:a6:e3:a3:e4:66:b0:16:65:
b7:57:0c:f0:4a:a7:bf:e8:1b:05:73:35:46:f4:af:e9:c5:fa:
5a:5d:0b:fc:f0:fe:ad:cf:20:26:04:ff:97:63:77:e8:22:c3:
37:77:a9:12:87:55:ad:0e:74:f1:63:69:5d:2b:86:3c:db:e2:
02:4d:00:07:0c:52:ba:1a:51:c7:37:72:1d:fc:4b:d1:43:d8:
19:ef:fb:3c:0c:07:a3:0a:c0:23:b1:c6:16:d2:09:57:a1:54:
bd:7f:12:99:8b:0b:e3:ab:8e:1b:28:14:d5:40:b3:8b:9e:16:
70:36:f5:ad:a2:a3:d1:94:06:14:78:46:f2:9f:3b:54:54:1c:
06:10:20:8c:dd:1e:25:33:db:ca:6a:62:27:31:44:fc:db:b0:
5d:a2:8f:c6:bd:b8:87:6d:cf:47:7f:e9:58:b9:84:8b:de:da:
56:b2:15:8e:0b:dc:da:ba:87:8b:3f:6c:9b:38:44:34:b9:23:
95:27:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:04:37 2026 by rpki-client