Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft
File: zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft (raw, json)
Hash identifier: DPDSU53H5TSsh4bgLr8r4oA6c9dsjTw1K9QNC9W9OCQ=
Subject key identifier: 2F:F7:19:94:7A:B0:C9:C5:AD:A0:ED:42:CE:A0:D7:D6:63:8F:A5:F5
Authority key identifier: CD:97:32:4F:B2:60:67:E1:49:06:EC:F0:6C:AB:73:9F:98:9F:A6:AE
Certificate issuer: /CN=cd97324fb26067e14906ecf06cab739f989fa6ae
Certificate serial: 01A0E174A4EC7BCBF9D13026C54CD1105A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft
Manifest number: 2C
Signing time: Sun 27 Sep 2026 06:01:52 +0000
Manifest this update: Sun 27 Sep 2026 06:01:52 +0000
Manifest next update: Mon 28 Sep 2026 06:01:52 +0000
Files and hashes: 1: HAgD-6lzARBUZEheRfE_VYTGH2E.roa (hash: UTf/mQA4tg3Niv2O7+oPEbWjLqeqIgO8fCv9i/kovK0=)
2: zZcyT7JgZ-FJBuzwbKtzn5ifpq4.crl (hash: n4Gu5MQ8SXCEiBHRtY4PcWtTabSmWo+ZkcpxjWKxC1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:a4:ec:7b:cb:f9:d1:30:26:c5:4c:d1:10:5a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd97324fb26067e14906ecf06cab739f989fa6ae
Validity
Not Before: Sep 27 06:01:52 2026 GMT
Not After : Sep 28 06:01:52 2026 GMT
Subject: CN=2ff719947ab0c9c5ada0ed42cea0d7d6638fa5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:04:a4:dc:5c:a2:c0:0d:f5:9c:f0:97:de:
b1:99:ac:21:00:fd:2a:f9:dd:3c:14:bd:37:26:be:
05:59:12:16:0f:68:38:9a:66:6e:f4:12:84:11:22:
2c:20:36:25:0e:18:cf:7a:b0:27:93:8a:26:43:45:
e8:ab:14:90:62:7d:43:84:59:0f:0c:ae:93:6f:bc:
53:12:ba:a6:ac:cd:2e:fc:ff:8f:73:26:e5:69:92:
d7:93:45:fe:44:05:85:d3:33:1a:68:9c:c0:2e:28:
0c:4c:2a:34:74:41:10:be:97:0a:79:d9:5a:42:b4:
0e:d6:02:d0:94:fa:51:d9:5c:df:52:91:13:9b:a4:
ad:b4:2d:3c:20:ed:99:d3:a4:97:8c:8c:73:27:01:
15:a1:d3:f9:cd:c7:77:10:64:9e:89:41:09:1b:01:
76:1d:23:f1:2a:13:28:d4:d9:aa:69:23:dc:a8:eb:
16:55:a1:1b:5e:eb:26:f9:9c:7e:48:58:f7:46:cb:
82:8c:38:04:2b:87:9f:44:f2:7d:da:00:fd:04:a2:
f0:d7:94:8d:50:b6:31:d1:a8:d5:b8:92:ec:0f:53:
17:57:7a:3e:77:69:5f:8b:80:6a:85:90:e8:c8:8b:
a3:e2:cf:ae:62:b0:11:c9:57:ef:3d:c3:41:98:88:
31:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F7:19:94:7A:B0:C9:C5:AD:A0:ED:42:CE:A0:D7:D6:63:8F:A5:F5
X509v3 Authority Key Identifier:
keyid:CD:97:32:4F:B2:60:67:E1:49:06:EC:F0:6C:AB:73:9F:98:9F:A6:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7e:42:58:77:08:71:d1:73:1f:e3:d3:cd:be:98:a5:8e:fb:
3d:b0:90:0f:e1:2c:19:2f:97:d3:44:66:6e:7e:e0:03:de:3a:
c6:fd:1e:27:57:dd:09:09:d4:cc:4a:59:31:b8:2f:d2:66:15:
a5:f9:ab:3b:e4:9f:c4:33:50:fc:0c:ac:36:ef:7e:19:f1:fa:
dd:f7:9e:5c:c4:57:b5:47:b9:a9:5d:3e:56:c8:97:60:3f:72:
f2:81:fa:dd:38:67:c6:be:e6:9a:27:b2:ac:8d:b5:ec:a5:bd:
95:03:28:0d:27:32:f7:0d:8f:d4:9e:fd:ee:48:5f:ef:3d:eb:
6a:5d:67:8d:3d:e4:15:a2:d9:9e:dc:19:60:a0:47:d5:de:18:
e9:2f:34:cb:50:d3:54:6c:7a:a1:94:64:3a:60:20:21:89:f9:
80:82:70:07:53:fd:2c:f3:6a:fa:fb:aa:81:60:ee:25:d3:17:
fc:4a:d0:8e:81:c2:1b:22:ba:85:2f:2d:ba:ed:b2:46:4d:ad:
74:1e:39:71:cd:3c:42:d0:5d:4a:7a:1b:30:3f:b3:17:83:35:
d0:83:75:aa:57:e0:0a:14:4f:96:de:ee:c1:23:79:0a:7c:dc:
8a:7a:2d:33:73:c2:b4:c7:45:41:45:b8:12:b2:aa:cf:96:cd:
b0:a4:5a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:59:29 2026 by rpki-client