
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
File: M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json)
Hash identifier: P/wYEwP6MW0JXc5Z1hMnL8uKjjZXUf7IoHp+VMBy6Y8=
Subject key identifier: CC:DD:DF:42:3C:73:26:C8:67:08:FD:D3:1A:14:18:6F:DA:F6:20:ED
Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Certificate serial: 01A0E399D36DEA594B20CD8F3BF78D5BC3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 16:01:43 +0000
Manifest this update: Sun 27 Sep 2026 16:01:43 +0000
Manifest next update: Mon 28 Sep 2026 16:01:43 +0000
Files and hashes: 1: Ei3aWkPls_AzS2jY10p19EPkpsk.roa (hash: zb4SB34oJRAPczxZgNNmiB+q3XRqPpneSMS6PliMhAI=)
2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: epbKKiJ4dSMRolU6bSv2PVK9e8n01qkWzO8CbttQAD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:d3:6d:ea:59:4b:20:cd:8f:3b:f7:8d:5b:c3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Validity
Not Before: Sep 27 16:01:43 2026 GMT
Not After : Sep 28 16:01:43 2026 GMT
Subject: CN=ccdddf423c7326c86708fdd31a14186fdaf620ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:9e:74:49:26:35:a1:83:45:df:ce:3f:21:
e7:06:5e:f9:a5:db:bd:e3:27:5d:23:70:44:98:27:
82:84:d3:99:7f:4f:57:63:54:c1:c1:11:99:c7:7d:
94:75:e1:72:12:27:64:ae:69:6a:44:19:8a:b0:cb:
21:00:cc:0f:4f:e0:95:63:4a:bd:17:2b:02:9b:d8:
5d:8c:87:a3:ec:5a:9b:8f:4b:20:f3:1e:8e:ba:09:
70:96:bd:96:ae:7b:45:67:93:23:d4:90:f1:e5:90:
f2:00:d0:8c:36:12:16:a2:3d:ad:31:26:00:db:08:
d8:1b:bd:33:97:85:cb:e4:18:2b:e5:cc:85:eb:25:
ad:4b:39:01:2d:a7:30:93:ef:21:d3:b3:1e:0e:cc:
3d:11:f1:b7:07:3c:d1:1d:6f:a7:4d:f6:60:11:0c:
ed:cb:4d:7f:4e:e3:7b:f1:4e:e1:f6:f3:8a:27:61:
19:83:ea:4a:72:73:cb:2d:10:55:f1:fb:25:4b:21:
74:69:d0:0e:05:cd:cf:2c:fc:f0:1d:2e:90:5a:41:
9f:84:90:81:02:02:d5:eb:08:00:92:f0:3a:3b:99:
b1:1f:e4:6a:ca:5d:e7:53:cb:09:63:ca:24:8f:9c:
fe:a5:65:c9:53:0e:48:97:d5:1b:bb:07:55:8b:fa:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DD:DF:42:3C:73:26:C8:67:08:FD:D3:1A:14:18:6F:DA:F6:20:ED
X509v3 Authority Key Identifier:
keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bd:c7:5f:99:48:d3:d6:70:d6:08:5d:1f:09:81:91:8e:a8:
c1:d0:eb:33:0f:cb:3a:69:19:1e:04:0d:14:14:f3:65:d7:a1:
a5:8a:58:12:db:9c:26:44:f7:77:c9:4c:e1:55:e6:2b:c8:0c:
2a:54:c1:d1:93:cf:a4:cf:c5:a2:ae:dd:81:0a:81:1d:50:01:
e2:64:45:11:56:95:eb:8e:9a:db:fa:d8:7b:a6:55:c3:7a:84:
79:c3:1e:b0:e9:03:17:3c:6a:ba:8b:c5:a4:81:dc:0f:52:9c:
53:be:c1:05:07:8f:26:8a:28:07:b2:80:ad:38:d5:07:1c:62:
17:9e:92:b6:34:62:7c:a3:85:ac:3a:88:b6:22:58:ba:79:4c:
b6:60:8b:0b:17:21:60:cd:d9:8b:79:ce:c9:12:f2:30:e2:82:
e3:21:24:06:2b:1e:17:76:e3:08:4c:56:90:84:c8:67:0f:77:
d9:2d:62:db:96:bf:5a:29:1d:e0:a7:ff:84:ec:f3:6c:78:50:
e8:31:40:9e:6b:81:f0:97:1e:22:b0:df:ab:04:f1:ca:28:0b:
ae:34:c5:a7:b7:08:be:3a:cb:28:a1:92:1e:e4:73:c4:2c:d4:
a3:13:a5:45:1a:d1:06:47:a3:30:55:3f:1b:7f:f0:66:85:cf:
d5:d9:c2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:22:59 2026 by rpki-client