Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier: sD2TwKwA4adPABIWeHytCRmUHEkvvLrIGXkFIhIr+kk=
Subject key identifier: C2:C8:33:60:F2:03:4D:F6:EE:A0:ED:48:B8:B5:DD:6E:51:61:C3:D9
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 01A1DF82CBDEFCF8041847FD57A91EEF7212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number: 1659
Signing time: Sun 15 Nov 2026 14:00:53 +0000
Manifest this update: Sun 15 Nov 2026 14:00:53 +0000
Manifest next update: Mon 16 Nov 2026 14:00:53 +0000
Files and hashes: 1: G0xz0bLV9EAQly4_g7VObUShRtE.roa (hash: ABgZUft6yhbazt8klEM2ZtMjod9FBs3oPUw6gWfrGKk=)
2: Nl34h2eIaTAhYgUdF-bfPv1rKsw.roa (hash: Td8M1b5eYn7YJIEViFQBLyeZjyCEUobMfRK7pwtir7Y=)
3: UhXahydsOo_qiwzRtVGqPmi_pwk.roa (hash: DFHZo+ZnvqIq4efxazwJLIWQqpNgr1YvbSZZDY8hdCA=)
4: dMRJpZJ1JNYLWgq3FuqchxjnETE.roa (hash: fce7GbHsuDUNjDLPVqwrMpy3SolSS3TeDUI3vt7NKIY=)
5: eTyIZqGBeRs9llTAx7ZMC0wX0a4.roa (hash: O9RU0zVHK29OhSRSOJLSNO075vgHiZ+2AECagLjqPhA=)
6: oomUoRc8kAeXbJ8Vact092RPz5A.roa (hash: +kRKbGJLzWAadibg+zB0y/8pWSdZTuvX7OD3gBOEtzw=)
7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: EtyoP801l1ktO2/BLKPYLEUqCLebW/3Qb4ZUk6IjOgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:82:cb:de:fc:f8:04:18:47:fd:57:a9:1e:ef:72:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Nov 15 14:00:53 2026 GMT
Not After : Nov 16 14:00:53 2026 GMT
Subject: CN=c2c83360f2034df6eea0ed48b8b5dd6e5161c3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:dc:19:b3:40:94:66:9a:3c:20:42:81:51:
c4:75:3d:0f:ff:78:57:64:e3:cd:dd:1d:a8:3e:8e:
6a:d6:88:db:0a:89:04:80:88:55:7b:42:4c:54:1a:
5d:83:a8:24:67:6e:73:06:1b:eb:05:fb:a6:c6:23:
28:62:c1:59:5a:b3:09:c9:20:1c:70:72:00:7c:69:
ab:19:7f:fd:95:7a:f2:67:60:41:35:4d:77:f5:68:
a1:40:b4:10:16:d5:0c:15:06:96:2a:1f:36:0f:c9:
64:f0:de:c7:4a:31:22:d1:d1:e8:b7:7b:c7:8b:7c:
ab:0a:66:50:90:0c:31:f5:7e:cc:b8:50:d3:c8:f3:
16:3c:78:29:c3:50:e5:7f:50:33:ba:5a:2e:7e:2e:
f4:41:3f:f7:30:c3:78:23:c6:95:d6:45:2c:3f:a8:
e4:5b:4e:f1:9b:3c:34:45:d3:b8:4a:f6:1e:c2:f2:
1b:ca:b2:3f:5a:16:b9:bf:68:b9:3f:eb:80:c9:81:
44:84:d3:5e:49:91:8e:b1:e7:d8:2c:39:79:97:ca:
3f:fa:95:9e:a4:ec:99:cf:98:ba:ae:3d:9b:0d:d7:
e1:79:14:c1:11:81:d5:b6:9b:e1:a8:c2:51:33:a8:
2e:0b:72:6c:2d:dc:72:6e:be:fd:b2:2a:db:7b:7b:
a7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C8:33:60:F2:03:4D:F6:EE:A0:ED:48:B8:B5:DD:6E:51:61:C3:D9
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:41:dd:ff:20:d8:fc:ef:fa:a9:0e:e3:3c:60:14:bf:a8:a1:
00:0d:0e:32:8d:80:55:6f:d6:d0:34:14:a3:da:02:d3:a9:8d:
65:99:1e:5e:f7:7c:e5:12:f5:cd:af:4c:9d:48:fb:66:85:fd:
ae:5d:b7:90:d6:06:27:23:d7:b1:94:63:44:cd:6f:55:71:a5:
5b:0b:a5:13:d9:79:91:19:3f:86:cc:9f:72:5f:f2:e5:b9:61:
37:94:fa:f7:b2:e3:7d:19:d4:08:e1:53:9e:08:c1:82:9e:cc:
de:9b:de:3b:fe:03:d0:d5:c6:69:d4:9c:1c:25:22:ac:d4:6b:
dd:fc:00:17:d5:db:b8:e8:78:3a:3c:ef:f4:4c:fc:68:bc:3d:
c8:1d:34:62:a9:8c:09:3d:9e:45:ef:d4:fb:90:a4:f4:bb:c2:
cf:cb:90:15:08:4c:57:0a:39:a2:e7:bb:67:7f:7a:8c:eb:c9:
b3:3d:d7:65:da:0f:be:a1:96:50:85:5d:2c:2c:29:1f:bb:25:
81:cf:54:2e:3f:bb:e4:56:41:6d:27:d3:bb:da:a8:6e:5e:94:
b2:6a:1f:3c:19:ec:82:28:62:91:b0:bd:0e:67:a0:d3:63:37:
bb:bb:91:68:63:ed:2c:f2:7c:6e:f7:ef:99:fd:33:4b:7d:78:
53:8d:be:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:40:34 2026 by rpki-client