Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: gZTEr6hs1uwHc9wJ6Xk9laSYfBj7ovD4gyHkKMQvuW0=
Subject key identifier: 47:7B:60:CD:69:AA:A4:8D:6D:7D:BF:E9:87:45:E4:25:27:91:EE:7B
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 01A0EE8AA9B6DAD6377EDD78E2E125AA7FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 1A0D
Signing time: Tue 29 Sep 2026 19:00:59 +0000
Manifest this update: Tue 29 Sep 2026 19:00:59 +0000
Manifest next update: Wed 30 Sep 2026 19:00:59 +0000
Files and hashes: 1: TnpKsIrCpfum69mVWYffLpmGkW4.roa (hash: GTcF25unpZajDdgtvW9ktN1du2kJWKPqouAAWsJtWlU=)
2: iUEHX1o0_l8jTQlhzAvjptzhPL0.roa (hash: DpWo5iq7cHsCZy0a6PUHW0Vs0n1oWSh3Ty0O4gm3/dU=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: zI32s9LITIjPK+S1ZbufYMVXY2ByBaK4DwWsFMvI2tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:8a:a9:b6:da:d6:37:7e:dd:78:e2:e1:25:aa:7f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Sep 29 19:00:59 2026 GMT
Not After : Sep 30 19:00:59 2026 GMT
Subject: CN=477b60cd69aaa48d6d7dbfe98745e4252791ee7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:6d:1b:c2:0f:d6:19:a4:b4:5b:8b:3b:b2:
2d:d9:61:84:de:72:1d:99:f0:c8:cb:b1:04:4c:46:
95:fd:3d:9f:36:9c:e8:f5:ed:a6:77:22:d5:bb:a2:
cc:4f:44:87:13:23:fb:b3:32:7a:db:0e:83:d0:51:
63:91:ed:9d:93:35:17:5c:d8:fc:80:9d:3b:d0:fe:
52:98:8e:85:c0:77:54:28:8e:f9:43:98:1f:c4:c2:
9a:54:93:87:d5:8e:fd:76:d1:7f:11:e5:c0:1d:c6:
7b:96:31:c0:e3:51:fc:74:2a:7b:16:fb:53:41:f3:
7f:af:4a:85:d2:eb:b0:ba:9c:82:89:c8:e6:2c:6a:
76:01:7b:fb:5e:51:6b:8a:65:89:0f:df:1d:ec:cb:
7a:e8:ee:7c:23:c7:20:37:9f:8b:69:fd:92:48:39:
da:ba:d9:d0:ad:e2:8c:41:fd:49:19:ee:44:95:64:
e7:04:55:c5:73:eb:f2:c7:c9:09:45:62:35:09:f9:
9b:0b:1e:52:2f:e2:96:aa:3f:89:ee:cf:37:6e:44:
61:62:4a:62:83:12:4f:74:8e:fb:f3:13:9c:37:f0:
d9:db:0a:c6:e4:f5:ea:44:fc:ab:8e:1f:dc:25:7e:
d7:89:da:7f:28:92:58:bc:ad:b7:cd:06:5d:b3:d6:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7B:60:CD:69:AA:A4:8D:6D:7D:BF:E9:87:45:E4:25:27:91:EE:7B
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:08:3c:df:1b:59:ec:99:f6:4e:ea:17:8c:6e:15:12:47:b5:
9d:3b:37:b0:d4:a2:e7:35:e5:40:d4:23:98:a3:15:e3:47:82:
34:fd:8c:39:03:67:ef:dc:c9:f4:8a:55:ff:fc:1c:e0:47:db:
70:24:cb:61:6a:c0:ce:a0:0c:4c:5b:ac:d5:e9:d3:c6:c5:7d:
59:8e:da:b8:2d:f7:f7:b8:d7:6f:e5:f0:1a:06:10:a1:22:d7:
83:40:46:78:f0:ba:e5:5c:75:be:57:55:7d:fb:fe:3c:55:7c:
37:b2:e1:c0:00:d7:52:12:39:8f:14:c1:91:ca:1f:fa:f9:5d:
a5:37:87:07:8d:fd:64:41:62:52:3b:99:79:e7:88:12:5f:0e:
f9:44:98:d2:60:35:20:5a:61:28:0e:d0:e0:46:d8:0a:9e:34:
b3:8d:07:dc:20:3b:ea:ac:e6:26:56:30:96:be:29:a9:54:d5:
1f:3b:48:27:f6:a5:74:d1:a5:e4:30:9c:69:6d:a9:60:1a:96:
5e:fc:71:d3:6f:28:b8:ef:f8:ed:4b:df:5c:bf:bb:55:33:78:
f5:90:12:6c:9f:bd:a2:17:10:11:9a:0b:0c:32:94:c3:37:7a:
8d:78:ab:55:b5:fe:fb:41:5b:07:88:64:68:5b:4f:5b:0e:cc:
96:62:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:00:31 2026 by rpki-client