Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: bCoFXnM8lyBiUNo6BMYpnip4sRPKLoGJkTH9mbWzzEU=
Subject key identifier: 6F:A7:89:01:3D:6A:98:7C:11:3C:5B:ED:DD:D0:97:C5:BD:10:1B:85
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 01A0FC104658B82D531F49774DC5C134F4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 1A89
Signing time: Fri 02 Oct 2026 10:01:59 +0000
Manifest this update: Fri 02 Oct 2026 10:01:59 +0000
Manifest next update: Sat 03 Oct 2026 10:01:59 +0000
Files and hashes: 1: 2Zg_-dpcqfmzuDStyGzldA-iv1s.roa (hash: rO88dw5SEIUE2fPQKc2On6kad3jKSdwxG+JqeHFebNY=)
2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: 7lAheEVXv1uOPyCv6aUtEjjSReU9F+fGLkdxgN3l8Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:10:46:58:b8:2d:53:1f:49:77:4d:c5:c1:34:f4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Oct 2 10:01:59 2026 GMT
Not After : Oct 3 10:01:59 2026 GMT
Subject: CN=6fa789013d6a987c113c5bedddd097c5bd101b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:25:41:14:07:e1:b5:3f:cc:00:b7:3e:7d:
3e:bb:b7:a6:f7:a7:4b:52:96:bc:4d:49:68:ab:5c:
1c:1f:c7:4e:95:31:95:63:96:2b:2b:46:bb:69:27:
55:bd:30:97:55:a8:0b:68:fe:36:f3:69:9c:c1:d1:
25:7c:87:c9:fb:79:35:69:ce:14:28:66:84:db:95:
ab:36:db:0e:ff:b2:b1:d4:a4:ce:f5:01:bd:a6:d7:
42:d2:a8:73:c8:80:b5:29:ca:19:23:42:26:ce:bd:
b6:55:e2:e7:c7:a9:0a:a5:30:71:5e:34:52:71:5a:
b0:34:47:3d:4d:5c:70:1e:51:4c:df:6d:c8:c6:8a:
80:60:a0:ec:9f:6e:9e:c8:6b:84:4e:ba:af:6b:5b:
16:f6:55:0a:84:a2:76:7e:fa:42:fd:10:7b:1e:d5:
b5:9a:64:7e:b4:3d:38:9b:2c:08:19:5d:aa:3e:24:
cf:4c:25:0b:a4:09:63:42:8a:0f:36:af:ec:f3:30:
44:57:8b:22:41:46:da:12:46:1c:23:36:31:ec:2c:
7b:ab:2a:d0:ab:5e:66:52:ad:f5:79:dc:d4:b0:0f:
71:50:26:41:42:85:35:d4:0a:8c:d4:b4:90:ac:57:
08:90:6a:04:c4:98:b5:e2:8f:27:1c:79:de:88:3b:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A7:89:01:3D:6A:98:7C:11:3C:5B:ED:DD:D0:97:C5:BD:10:1B:85
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:48:29:1a:d2:db:a2:af:31:62:15:da:40:ae:d7:b1:ab:b8:
64:a8:fe:a1:67:27:82:f5:c2:ed:63:1a:f5:b3:90:93:f2:8c:
37:f2:e4:7c:06:55:03:e9:b8:02:3d:6f:97:ff:42:e4:a0:e7:
29:7b:87:f3:3e:ac:68:79:de:30:95:af:b9:d7:98:ed:a8:05:
a4:51:73:fe:e9:ae:02:f2:03:04:6d:97:95:75:6d:12:ed:e4:
e2:a2:d1:22:87:bf:c4:a8:95:ab:25:81:29:65:a8:cc:1e:2a:
ad:fb:49:e6:e3:71:26:c5:17:37:00:f5:c3:e6:4a:f9:53:49:
17:e7:79:d1:a5:20:b9:93:fd:d2:3b:8c:65:07:ce:9d:41:0a:
72:a4:a3:8f:9a:3c:5c:4f:0f:5f:4f:88:a2:2a:fa:d1:44:21:
99:a7:cf:0e:38:00:5f:36:11:6c:c7:47:7e:b7:f2:fe:c1:65:
88:47:3d:07:14:84:c9:75:45:b9:65:c9:cd:31:17:c6:cc:25:
3e:7d:5c:41:7b:27:93:39:13:b5:0b:0d:40:ae:fe:f4:3a:2c:
45:cc:84:06:3e:6d:cd:a8:77:13:7f:8d:b1:06:82:65:ac:27:
2e:4a:4b:86:04:57:83:07:0c:2f:c0:5e:ca:d6:7d:78:70:f2:
3c:66:07:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:57:59 2026 by rpki-client