Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: 3tIB3F6CW83NEnpzYGKarmycHI5CuaLculVDD/Zutgw=
Subject key identifier: ED:B8:13:32:63:14:BF:19:A3:41:38:A6:AE:AD:12:E7:07:23:02:C1
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 01A0D5395C0925FBCECB64C3AC8CDB52E14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 21:01:41 +0000
Manifest this update: Thu 24 Sep 2026 21:01:41 +0000
Manifest next update: Fri 25 Sep 2026 21:01:41 +0000
Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=)
2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: 0DIjMDowLxUlm1Lvbr581pexSjobid0Uhptq3OroZGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:5c:09:25:fb:ce:cb:64:c3:ac:8c:db:52:e1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Sep 24 21:01:41 2026 GMT
Not After : Sep 25 21:01:41 2026 GMT
Subject: CN=edb813326314bf19a34138a6aead12e7072302c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:80:d2:00:27:f1:ec:cf:fc:9d:db:7c:a4:
84:6f:b8:2c:6c:3b:1c:5b:6d:9a:ad:c9:2b:01:b7:
c3:91:75:c5:e4:64:e0:17:e7:27:13:7b:26:3f:bb:
98:12:87:2c:9a:a4:2c:35:d8:1a:64:1e:08:d9:f4:
b9:b8:c5:ef:e5:64:9c:84:be:45:39:70:78:4b:07:
59:f6:26:c5:d7:c2:ea:d1:ab:ae:c4:63:46:46:30:
2f:cc:7c:e3:c0:09:e2:16:db:91:59:7c:b5:0b:3d:
79:1a:75:b2:b3:18:8f:10:e7:6d:99:01:65:e4:56:
72:fc:85:84:5e:67:53:72:87:e9:90:bb:9f:c4:d4:
e9:c4:d8:9a:3a:9b:be:05:e9:ee:20:b5:6d:e6:38:
13:5f:77:ec:f3:fb:1b:6e:58:fa:39:0a:94:ee:f5:
21:1e:a7:8e:c8:dc:e6:f9:28:9d:0b:c0:0a:fe:3a:
84:3d:23:4f:bd:5c:5c:65:7b:57:a4:a0:d1:66:1e:
55:4f:82:6c:8f:dc:73:09:c6:1a:a3:a0:6b:fb:47:
ae:16:4f:39:9d:10:ea:ac:68:1b:ae:7f:f2:3d:5f:
f4:0f:2b:1f:96:f8:ad:4e:fe:8f:6f:37:7a:0e:92:
d0:10:82:95:79:4d:e5:10:bb:a4:62:b8:46:79:0e:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B8:13:32:63:14:BF:19:A3:41:38:A6:AE:AD:12:E7:07:23:02:C1
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ab:9e:bb:48:1f:d3:78:c1:49:29:da:f9:54:67:3d:24:ed:
b6:3a:56:57:11:68:09:6e:5c:3e:7e:9a:40:72:2b:53:e3:e9:
cd:6b:0b:c8:17:e5:72:13:50:d6:90:59:b2:62:c2:3b:b6:81:
47:29:af:b1:a3:6e:b8:5f:3b:8d:52:af:1d:d5:af:3d:68:3b:
fd:08:c4:1c:95:30:30:50:3b:3e:db:6a:11:48:73:41:00:35:
1e:a1:7b:9f:d5:16:98:9a:28:34:d2:14:04:6c:b5:16:c0:e0:
d2:fd:fb:d0:6b:58:57:0e:30:a1:4f:45:57:67:76:31:92:fb:
f8:6c:3e:d7:0f:4e:5b:b3:ee:35:ee:91:63:26:92:18:84:76:
5f:b9:ac:e5:68:96:c4:21:71:8d:94:1d:aa:14:eb:94:67:7f:
6b:0a:66:3e:27:8f:91:5e:3e:52:b6:46:47:c0:f7:ca:19:16:
88:3a:c0:f3:3d:94:0b:07:5b:4d:84:d6:26:2b:01:5b:e9:f2:
1c:f0:dc:8c:60:e3:5d:2e:ae:1b:a6:8f:8f:d3:8f:6c:b8:2f:
43:1e:4a:80:fc:87:8f:bb:77:6f:a4:4e:3a:b8:20:95:8a:3e:
3f:d6:f6:7a:e0:00:0c:a8:45:7d:42:52:93:c7:64:0d:60:7b:
ef:70:ce:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:34:30 2026 by rpki-client