Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
File: zHjaWyZetWpkanhB0edipoGdGY4.mft (raw, json)
Hash identifier: s6jNSnECfKStiFNRTRubZuN2ib4GfNoYvCOFYysqkDs=
Subject key identifier: F3:53:79:0D:A8:9D:57:B8:36:AB:29:57:DE:FD:61:9D:37:6D:F3:60
Authority key identifier: CC:78:DA:5B:26:5E:B5:6A:64:6A:78:41:D1:E7:62:A6:81:9D:19:8E
Certificate issuer: /CN=cc78da5b265eb56a646a7841d1e762a6819d198e
Certificate serial: 01A0E0CF7539137612F2623DC7E0B7FACFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
Manifest number: 021B
Signing time: Sun 27 Sep 2026 03:01:27 +0000
Manifest this update: Sun 27 Sep 2026 03:01:27 +0000
Manifest next update: Mon 28 Sep 2026 03:01:27 +0000
Files and hashes: 1: G8cAZv7tHHribPfmvn4SJFJ-UoQ.asa (hash: DZYgSOVWEWTSSh7Vu2ORd4WJTX15OedkU36FRtvd8io=)
2: tP4qHEtDUQvjf36iOnLV45cOf2o.roa (hash: 5UJ1b7p3+0n6ZdGAJbovENFOUwGoBnRF0QiPojOFI5o=)
3: zHjaWyZetWpkanhB0edipoGdGY4.crl (hash: c6RxtuhO0N09HGuCIKz52IbYMvgMwnfkWQZmsYI0lPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:75:39:13:76:12:f2:62:3d:c7:e0:b7:fa:cf:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78da5b265eb56a646a7841d1e762a6819d198e
Validity
Not Before: Sep 27 03:01:27 2026 GMT
Not After : Sep 28 03:01:27 2026 GMT
Subject: CN=f353790da89d57b836ab2957defd619d376df360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:f1:2d:a4:28:4b:4c:fb:57:49:00:d9:88:
0a:fc:37:1d:39:f7:40:73:46:9a:8a:87:ac:a3:c8:
4c:be:3a:51:a2:42:a1:f1:ac:3e:2d:63:44:de:02:
19:3d:70:cb:ba:0e:61:99:0e:1e:ab:79:7d:2d:d6:
3c:e1:12:0f:55:dd:3b:26:3a:f5:a5:d6:ca:09:9a:
c4:55:18:2f:c2:45:bf:77:5e:c3:0c:f0:57:e3:6c:
90:83:d8:af:56:db:4e:5f:a2:e3:e8:e8:ec:e0:5b:
72:26:26:71:de:0a:d2:9a:c4:b7:90:dc:dc:78:7b:
69:eb:0b:5a:f5:b0:8d:76:db:e6:b4:d9:8f:0e:73:
3c:f1:3e:bb:aa:1b:cd:36:f6:5b:e6:20:b6:1f:3b:
9d:65:25:70:f8:fa:08:b8:20:32:be:fa:2c:a6:3d:
08:c6:ad:2c:94:9d:05:c1:ed:f3:c7:1e:8d:dd:8b:
3d:93:dd:0c:da:be:39:57:c8:99:be:3d:af:8d:55:
3c:b1:58:92:e4:32:70:80:9c:eb:d2:3d:05:4b:c6:
b5:19:be:e1:0b:7f:c6:e2:23:2a:1f:ba:b1:00:66:
5d:47:36:2e:d7:ca:b2:2f:db:27:bc:84:bf:95:e0:
71:ec:4a:2b:8e:89:1f:86:e9:13:d4:4f:4f:e4:34:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:53:79:0D:A8:9D:57:B8:36:AB:29:57:DE:FD:61:9D:37:6D:F3:60
X509v3 Authority Key Identifier:
keyid:CC:78:DA:5B:26:5E:B5:6A:64:6A:78:41:D1:E7:62:A6:81:9D:19:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8c:5c:a6:55:1a:9f:03:f6:b5:2e:47:02:86:8d:5c:55:70:
60:af:a4:04:6c:bf:6e:dc:62:3a:72:06:cc:70:06:d9:d9:2b:
3a:45:df:4d:69:34:08:3d:af:fd:dd:da:79:6f:de:0c:2b:62:
51:1d:8d:1b:fd:71:fc:49:a6:78:02:49:a0:84:da:5c:99:60:
a2:84:a3:92:ed:b4:9f:eb:b7:ba:f7:75:8c:72:69:30:e3:c8:
d8:fa:d3:9e:d3:8d:2c:4e:c0:60:68:7e:96:d4:ed:51:5a:25:
73:75:e8:5d:85:e1:32:0c:a4:12:dd:85:7f:fa:2e:bd:a4:56:
38:6a:03:44:50:7b:df:50:a0:48:ab:c2:4a:6c:15:57:94:1d:
be:98:ac:9e:bd:b0:57:07:e1:5a:65:4d:d5:7f:f3:35:13:3d:
7a:9b:bb:28:1e:b7:ae:3d:fc:a7:01:ab:be:90:81:01:c7:bd:
e7:3c:07:7f:38:16:12:4d:6e:5c:4e:62:46:d9:4a:cf:27:37:
f5:c0:44:d7:aa:de:26:64:46:7c:8d:41:71:61:7d:58:fc:f9:
1a:70:88:a6:9c:a8:84:14:64:8f:00:a5:b7:68:7c:c9:51:49:
90:f9:53:3d:40:09:37:e9:42:1c:3d:66:7c:6d:46:57:0d:c6:
dd:66:c5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:39:16 2026 by rpki-client