Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File: zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier: 8VdGmygrMTPaKxGqQp+bUop5GakjXabUeiV9oRuNonM=
Subject key identifier: FA:60:71:E1:37:45:FC:70:E1:6A:F6:A6:AF:6D:F9:75:B3:A6:1F:14
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 01A1261DC181AC952016BDC6D7CCFA6C4442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number: 1AAB
Signing time: Sat 10 Oct 2026 14:00:46 +0000
Manifest this update: Sat 10 Oct 2026 14:00:46 +0000
Manifest next update: Sun 11 Oct 2026 14:00:46 +0000
Files and hashes: 1: 8OPf-TYppgb-lWxDdXUmvn4lAOc.roa (hash: hCC9pcZlwckfG4uw3UFpwoter9oKt9FivUAlBWxQl7Y=)
2: L66cmmlC06Wcdn7XL6i2OjeyJz8.roa (hash: 98r7JlYeRTjaXUzjuxu020n7woB7ZmKJCIQsHxK3ViA=)
3: LT0Iyo1R8YEuaI1JHoSd3uYiu4U.roa (hash: doboAOIfjYNyHdw1r6xfrE7hmv8gQ0YwGnxIdc/ApGY=)
4: OxKWVKSu8q5MpbR4mXLRZseiBak.roa (hash: WzjynFG/qnlCwj8eYyliY8fN3o7QhJH4fPJus7/EOTQ=)
5: Wx7zSJ4BFdUre-x5J2lYzvpF4jE.roa (hash: 5usbDenLcJwn1HnlbKVb9xkpHXYP/L2fciKVWt4yeXw=)
6: XNfpJ_jMRsEIETRyReqCXiOLGU0.asa (hash: RC0524eXrry18ALIN/KuXMpYFLI/ZkcUf5LSNtqd4ss=)
7: cOUUKUyq3fFSSy6l5-mjbaxhQhs.roa (hash: KLqb5U6DgNfIS88yDz/06LUw3OWjpinY/pIyqKDYmR4=)
8: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: XZ9VnUnxCfZtJh4FfEw0gT191n98JoQc7F12gJM4iyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:1d:c1:81:ac:95:20:16:bd:c6:d7:cc:fa:6c:44:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Oct 10 14:00:46 2026 GMT
Not After : Oct 11 14:00:46 2026 GMT
Subject: CN=fa6071e13745fc70e16af6a6af6df975b3a61f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:ae:11:b5:9a:55:9a:74:83:43:c5:fa:a1:
d5:6f:47:ac:4a:c1:50:29:59:01:ce:26:01:4d:a7:
b8:cb:da:fa:c2:c0:e9:80:2c:9a:a5:2e:ec:87:22:
22:a1:89:ad:27:4d:2e:46:d9:4c:66:3b:9e:5e:6b:
be:a1:46:08:b9:c3:39:3f:96:bb:3e:69:d6:05:67:
6b:b8:9b:25:6e:72:12:bf:b0:ca:23:57:81:7d:39:
6d:22:f4:35:ab:e9:35:f0:c6:cb:05:35:09:4b:43:
5b:9e:16:45:1c:06:29:8a:8a:d3:33:ab:8a:83:ea:
1f:fa:a9:3e:17:24:b5:5e:82:26:a5:f8:2f:a8:09:
f4:07:bf:f1:91:6f:0f:42:3e:51:9e:af:bb:d1:c7:
61:a1:40:70:93:26:d2:90:0f:b1:96:14:ad:eb:c3:
df:dc:68:a7:7d:f0:96:c4:3b:4d:5a:e0:ee:9f:46:
45:6d:c6:a7:c3:52:aa:35:83:28:1a:0f:87:d3:3c:
6a:cd:bc:5a:1f:8e:17:c2:34:28:85:d2:d2:23:ab:
cd:0c:98:f2:7f:61:16:57:51:ee:78:80:3e:b9:02:
75:e1:0e:c6:8e:24:81:0d:68:be:ee:68:b6:86:e9:
00:35:c5:4d:8b:60:49:fc:08:54:13:00:ef:71:bf:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:60:71:E1:37:45:FC:70:E1:6A:F6:A6:AF:6D:F9:75:B3:A6:1F:14
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b5:a7:21:ee:4b:11:f5:15:5b:57:d2:b7:9c:20:77:4e:40:
85:d4:84:53:3c:db:95:5d:b7:f7:4e:83:33:df:2d:90:a9:04:
b3:05:66:f5:bd:27:16:d4:94:60:9e:05:9f:b2:bb:ff:a2:89:
06:83:32:e0:59:31:c0:65:87:11:08:c9:c9:74:79:d2:0d:db:
2b:97:14:3e:3e:36:ab:6b:e8:c0:d5:96:ba:9d:88:2d:e9:20:
d0:23:3c:4d:46:d1:1b:ca:56:02:0d:08:5f:05:4b:e5:96:5b:
0c:70:06:5e:ae:c9:57:58:44:c0:d3:33:82:3e:6a:30:ae:c6:
e3:97:fd:08:da:0f:36:9b:6d:0b:06:56:eb:9c:77:7e:5b:0b:
26:76:ad:b0:a1:27:32:48:bb:11:3a:c9:71:69:26:8d:82:2b:
c5:d6:07:ad:40:db:60:83:3d:28:23:14:26:1c:f3:39:14:34:
48:e7:76:91:c4:cc:aa:05:be:c4:16:29:a7:e6:fa:ae:d5:84:
20:75:ac:69:09:92:08:6b:4c:90:aa:c6:ad:d2:67:a2:91:1b:
56:92:f1:d5:27:22:98:01:22:f1:40:ed:2b:bd:63:0f:f8:6f:
ef:f4:40:5a:c3:1c:ea:1a:0a:f5:25:75:cf:b2:d7:78:ea:cd:
23:0b:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:39:11 2026 by rpki-client