Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: Ns30SQd01Auq7dnJUNQ4re1VOQtQcaZ1b9vkZI8U8Cs=
Subject key identifier: 8A:10:24:0C:AD:F9:A9:F2:C0:B1:52:05:6F:00:23:F9:09:78:84:CC
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 01A0D3B863891666E65565E983363B32984E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 14:01:11 +0000
Manifest this update: Thu 24 Sep 2026 14:01:11 +0000
Manifest next update: Fri 25 Sep 2026 14:01:11 +0000
Files and hashes: 1: AENYJALANSjKlBoltdKemnCFKjs.roa (hash: s2OVjDuX6iIGr8lYPRWiO+GCWriVBdcRjsgW+JAkKFY=)
2: WT3Gx2IH-UOQxMFe0DcDIk0_2gs.roa (hash: 8xLda/bRGDPhlqY86QUEIR+DAlGhY+eQ/Yy7FCK+A6E=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: FiuTVu7uUNsYCHmOGXxlsRe8MWRsYEtOLvFLmqS4mZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:63:89:16:66:e6:55:65:e9:83:36:3b:32:98:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Sep 24 14:01:11 2026 GMT
Not After : Sep 25 14:01:11 2026 GMT
Subject: CN=8a10240cadf9a9f2c0b152056f0023f9097884cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:f3:86:5b:5f:08:08:5f:0b:6a:07:55:f6:
81:99:4b:8b:06:52:fe:7a:3d:38:80:77:b5:3e:d0:
82:a4:da:09:87:df:e0:e8:3d:79:7b:58:87:20:68:
ca:f8:1a:06:e3:1f:b1:7d:90:fa:b9:11:39:80:73:
c0:e2:25:66:1d:39:00:f7:e9:8b:e6:ee:2b:80:0f:
9d:f5:25:03:73:18:49:02:9c:80:a2:59:29:60:74:
76:b1:06:05:d2:a7:94:03:26:46:22:c1:96:76:e7:
0b:29:11:44:c1:63:52:73:98:e2:04:39:fe:be:95:
9e:ef:7f:f4:58:09:91:0e:25:2e:ff:37:e2:ee:69:
10:89:e2:1f:92:e6:4b:be:c6:80:15:72:e7:e0:72:
4a:b8:53:48:26:67:6b:2c:c2:ba:54:dd:7d:a2:ce:
ee:fb:0c:c8:10:9a:e9:08:73:83:73:54:12:a9:ee:
26:3d:f1:4f:b5:fa:2e:cc:cd:d6:db:e6:fc:56:13:
56:3b:c1:f4:0f:ed:b9:cc:00:f1:49:cd:41:c0:69:
e4:92:f3:c4:6b:73:aa:ce:e0:1f:c0:aa:a1:33:d0:
6c:f1:9b:2f:b7:3e:aa:ed:d7:d6:cb:bb:6f:a5:7d:
85:a2:5c:72:b7:9b:90:6f:d8:d2:0e:e2:fb:a3:17:
32:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:10:24:0C:AD:F9:A9:F2:C0:B1:52:05:6F:00:23:F9:09:78:84:CC
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ae:12:cc:66:98:c2:0c:16:4c:b8:45:75:f5:74:d6:43:98:
d3:07:02:df:e7:bb:a6:25:71:18:ac:25:3d:61:56:6e:6f:d5:
ae:f4:93:1f:bf:f5:3c:d0:a8:21:ba:e5:83:bc:e2:57:bb:f5:
38:26:ea:f3:6f:9c:ae:77:78:fd:47:47:15:42:b9:61:2a:77:
51:dd:60:48:74:2d:f4:41:7a:b0:2d:e6:d1:7e:b4:fa:b0:5a:
30:bf:d9:c2:7f:19:37:74:c7:94:db:fb:cc:c8:46:03:d4:d1:
98:cf:af:cb:1a:62:a7:f0:81:42:ff:42:93:a1:17:90:67:05:
a3:85:86:bc:ba:48:37:e5:7e:8f:1c:34:0b:43:21:79:00:0b:
47:b4:76:7e:d7:96:50:df:a9:fb:8a:c1:11:48:6b:f1:9c:30:
5c:d9:cc:0c:e7:7a:2f:a3:c2:85:2b:02:08:6b:63:ed:cb:df:
00:17:7c:df:1c:4e:fa:18:fe:e1:d1:15:b4:b7:52:36:3f:61:
1e:76:d0:28:74:c0:51:50:03:5f:3d:71:b1:b4:c6:cc:27:c3:
4b:6c:ea:24:82:10:55:ce:b8:55:c1:6c:6b:3e:6e:30:e4:61:
4e:7c:05:fa:e1:c1:e0:79:85:57:cf:d0:67:9d:47:9e:95:79:
f1:dc:45:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:24:35 2026 by rpki-client