Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: 0wyRh0jDDqvyTsweUVAWceXumeJJB59U7KxLIw0rMfw=
Subject key identifier: 9E:D9:09:03:38:63:65:D1:44:0D:90:01:BD:C5:25:49:C5:D4:39:47
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 01A1DC4B696659C20C0CEAE6170CDC420383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 1AF8
Signing time: Sat 14 Nov 2026 23:01:31 +0000
Manifest this update: Sat 14 Nov 2026 23:01:31 +0000
Manifest next update: Sun 15 Nov 2026 23:01:31 +0000
Files and hashes: 1: AENYJALANSjKlBoltdKemnCFKjs.roa (hash: s2OVjDuX6iIGr8lYPRWiO+GCWriVBdcRjsgW+JAkKFY=)
2: WT3Gx2IH-UOQxMFe0DcDIk0_2gs.roa (hash: 8xLda/bRGDPhlqY86QUEIR+DAlGhY+eQ/Yy7FCK+A6E=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: b6BmO4HhGAKAD8AQdKk9ehsHJqh4BpGf7ymd2crpWhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4b:69:66:59:c2:0c:0c:ea:e6:17:0c:dc:42:03:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Nov 14 23:01:31 2026 GMT
Not After : Nov 15 23:01:31 2026 GMT
Subject: CN=9ed90903386365d1440d9001bdc52549c5d43947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:ca:07:e9:4e:aa:03:f7:dd:bf:85:bf:6d:
4a:a7:8c:b8:3d:68:36:68:0b:c0:bf:c6:84:46:3f:
38:5e:cb:75:1b:ac:83:d9:9c:ed:8d:df:29:ee:a5:
f2:d2:71:76:73:a2:ee:7d:17:13:6a:6b:3f:17:ff:
37:9a:05:d6:20:8d:ba:f2:14:1e:7e:c7:6e:07:70:
7c:38:3d:7f:82:1e:3b:ae:d3:f9:2b:20:8e:fb:6c:
a0:29:65:ed:80:2e:1c:3f:91:18:36:7e:7c:6a:f7:
f6:d1:22:b0:1f:b6:27:d1:13:af:c1:d6:b1:fe:c8:
52:3c:21:09:96:40:6c:c1:30:cf:f0:5f:4a:b5:62:
a1:3d:a6:8d:2f:03:ee:12:a5:4b:26:0d:d4:b7:01:
f4:7b:8d:00:2e:56:28:59:aa:69:93:6a:42:b1:62:
8c:4d:3f:54:c9:c1:20:e6:4c:1b:73:a8:b0:ec:53:
0b:16:37:58:db:0f:d8:75:b8:35:fa:f1:27:6f:7a:
78:44:6b:c7:ba:6f:b7:87:59:06:3f:f2:46:07:9e:
c9:c3:01:8c:8d:03:3b:2a:d1:c3:f6:3f:b5:7d:e8:
3d:02:d9:23:ae:07:6a:92:59:a5:c0:95:a6:da:8a:
9a:bb:84:9d:be:03:45:b5:59:67:f4:ec:29:01:6e:
69:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D9:09:03:38:63:65:D1:44:0D:90:01:BD:C5:25:49:C5:D4:39:47
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c4:1b:d0:f2:98:d3:94:32:f3:60:91:de:dc:9f:00:31:c6:
0a:af:0d:9e:23:54:81:c1:64:f4:e3:a1:04:56:7a:da:c4:3a:
29:b3:25:5f:4c:ad:48:e2:46:4f:df:55:26:69:0c:78:df:47:
d9:87:cc:8f:13:f4:fa:90:6a:a4:8c:e6:de:b8:eb:44:fd:d1:
de:13:2c:4a:fe:84:9e:61:6b:8a:3a:92:7b:0d:99:e8:03:54:
41:e8:98:40:71:bb:ff:d5:b2:ed:42:fa:39:a2:95:9d:91:95:
48:e5:e3:11:fe:cc:08:04:9f:25:50:13:ff:55:1e:e3:0c:d6:
de:a5:83:5d:3b:59:f5:ca:55:20:c1:8b:33:e1:4b:a6:10:72:
1b:3a:bc:fa:e7:96:9f:6f:b1:b2:ee:4c:f6:b5:9c:01:8b:ae:
40:b5:70:ab:b8:d7:ab:33:26:b2:45:88:e2:d2:a8:a5:b7:8f:
aa:2b:69:fc:13:1b:31:17:7e:09:a1:ad:d6:ea:ef:09:48:1e:
25:8a:7e:0d:e5:ae:a7:a7:8b:5f:00:5c:b6:27:bd:5d:92:a9:
30:43:93:db:e2:66:fc:98:a5:4e:4c:b3:f7:67:5c:77:49:ff:
9a:f6:a9:07:cd:05:06:96:37:d4:9f:df:9a:83:d2:fa:14:8f:
bc:47:df:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:28:21 2026 by rpki-client