Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
File: zIiKpmyEAKHmQJxdzFDr17jkMF0.mft (raw, json)
Hash identifier: SD4zB7jiQkmbB2bRmfw6XNrwe27NTp4ChOOf9HQZc20=
Subject key identifier: E6:69:A1:82:D2:1D:DB:5B:B6:CD:FC:63:56:22:C7:7D:E1:E2:E5:E4
Authority key identifier: CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
Certificate issuer: /CN=cc888aa66c8400a1e6409c5dcc50ebd7b8e4305d
Certificate serial: 01A0FFECDA047131A3E5464308A90B4BBB86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
Manifest number: 01CF
Signing time: Sat 03 Oct 2026 04:01:47 +0000
Manifest this update: Sat 03 Oct 2026 04:01:47 +0000
Manifest next update: Sun 04 Oct 2026 04:01:47 +0000
Files and hashes: 1: Cj6_o8sOiBgjNnzgImvX4eLilBo.roa (hash: GWj4PVam61KpU/B7S3H1nczjNuFdlEmDrmCiC34iMTA=)
2: IQgUFXohTVi2Y4XfWtFJarOT0q4.roa (hash: J2MJLqrQ5YjNoDasd1MZixNZt0/WlW4h/Wdqx4ZC4tw=)
3: wQGsS70JXw7EzI_ohYX-ZhN3HWk.roa (hash: V9wby/6/IQHqv6ZSSWsMOjiXOYqBXSyK8u1dRZnHf0A=)
4: zIiKpmyEAKHmQJxdzFDr17jkMF0.crl (hash: Kdmvny9VrvQwiNJXcL3bp2qgUt9OFOa+NbAB881muDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:ec:da:04:71:31:a3:e5:46:43:08:a9:0b:4b:bb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc888aa66c8400a1e6409c5dcc50ebd7b8e4305d
Validity
Not Before: Oct 3 04:01:47 2026 GMT
Not After : Oct 4 04:01:47 2026 GMT
Subject: CN=e669a182d21ddb5bb6cdfc635622c77de1e2e5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:62:ee:6d:9c:18:ab:d3:37:ed:1b:46:49:
fa:be:ce:bb:00:5c:3a:44:c9:47:bc:a4:b9:71:8f:
d3:99:1a:96:a3:63:e7:f6:27:7a:41:85:64:2a:35:
04:b7:c8:77:71:5f:37:e8:e2:98:85:b9:44:96:53:
5d:06:0c:14:c0:df:a7:97:e8:65:cc:a3:72:03:28:
ab:b8:f1:2a:3e:0f:91:67:94:b6:12:ff:04:de:f5:
80:fb:92:6b:da:6e:9e:2e:f0:3b:be:85:ac:4a:c9:
fc:27:5f:0e:17:e6:a7:79:dc:cc:a7:b7:7e:2e:5e:
d1:af:87:31:ff:37:e0:83:6e:c6:4b:4a:a0:90:d4:
fd:68:38:ae:32:a5:b1:87:f3:44:02:f8:33:15:9c:
4d:05:7d:9c:90:86:15:fa:c7:e2:32:dc:c7:85:49:
cd:39:2e:aa:64:ed:a2:ce:48:b6:8a:d5:b8:65:4f:
40:eb:f1:f5:c0:04:fd:f5:e5:32:85:31:78:f3:31:
d0:75:1e:d4:92:f4:ff:ff:6b:bc:c0:fb:82:69:f3:
89:df:af:dd:8b:70:84:a7:43:13:eb:94:7c:97:b8:
2d:87:ea:c5:36:50:d2:26:33:fa:41:90:b0:db:73:
83:72:c6:7a:9b:51:1e:b9:25:07:5b:2a:ae:35:e5:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:69:A1:82:D2:1D:DB:5B:B6:CD:FC:63:56:22:C7:7D:E1:E2:E5:E4
X509v3 Authority Key Identifier:
keyid:CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:04:64:b4:22:5f:2d:8c:5a:77:58:5b:3f:a0:19:bb:b5:d9:
3c:74:30:ec:24:0b:8f:01:de:a7:bf:62:96:eb:87:23:8f:71:
86:47:4d:9d:c3:67:14:7d:41:82:66:6f:39:a6:c5:37:47:8f:
36:f8:08:38:dd:f5:6b:ee:52:4a:a5:1e:08:dc:67:d7:cd:9b:
9c:69:5a:a0:aa:33:dc:3d:fd:5a:81:ce:c7:8c:70:96:ed:28:
b0:26:14:19:88:56:2c:14:86:84:cb:be:26:0a:93:ac:b2:57:
a3:f9:79:5d:e2:9c:e3:8e:ed:3f:06:30:73:8b:ed:08:15:ad:
3f:26:3c:6d:95:1a:df:1e:66:b9:4a:89:c5:94:c0:a0:d9:f9:
45:9c:4b:9a:74:10:88:7d:7b:d7:04:f4:ce:e6:65:9e:4f:66:
3c:b9:68:0d:21:38:84:d3:8e:c4:51:f8:7f:d3:a4:7a:d7:72:
7d:7c:c7:a4:c7:ca:c9:98:b3:b4:56:33:d9:48:3c:00:c6:84:
2f:4f:db:e9:b2:55:6d:74:75:75:63:8a:e3:bc:9d:fc:56:78:
16:fe:9e:c6:b2:16:21:bf:38:f7:8d:11:95:59:f4:7b:08:04:
09:ae:b7:09:3e:f6:98:32:57:fb:88:ea:dd:3a:ad:29:e5:21:
0c:f8:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:20:58 2026 by rpki-client