Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: gfSCuuIJ1Y2lLS39IPXyqvxfbY3AaParlpRm7r70ZrQ=
Subject key identifier: 0A:47:1E:7E:FD:F3:04:DB:7B:97:75:30:02:8A:49:DB:7E:E4:A4:33
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 01A17C5FFD29FE28E2798CF0CFADC1C459C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 1443
Signing time: Tue 27 Oct 2026 08:00:27 +0000
Manifest this update: Tue 27 Oct 2026 08:00:27 +0000
Manifest next update: Wed 28 Oct 2026 08:00:27 +0000
Files and hashes: 1: a0kN2gfK01wMuqhoW-MZjPAbstc.roa (hash: mmiujuewrIIcuNRFw3juwDDGpDhJAvUuobcjAggyfUE=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: W200+cnK3CKr7SxNhkVqqdtLEPs3x4Empwur7AVGleY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:fd:29:fe:28:e2:79:8c:f0:cf:ad:c1:c4:59:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Oct 27 08:00:27 2026 GMT
Not After : Oct 28 08:00:27 2026 GMT
Subject: CN=0a471e7efdf304db7b977530028a49db7ee4a433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:86:d7:3e:6c:76:fb:72:ee:91:ce:c4:e1:
ff:78:64:aa:11:01:d2:1b:a1:47:09:90:ee:5e:00:
2a:8a:1b:71:77:13:5b:60:96:59:6e:d4:e1:85:3a:
1a:f0:c1:dd:0c:ea:a6:21:25:a8:74:5c:c8:df:c5:
43:28:d2:05:5d:26:8e:d5:f0:22:8f:54:19:17:6d:
dd:68:20:1f:3d:f9:f3:e5:4f:21:3a:d6:a5:47:20:
9f:69:b8:f0:c4:f6:40:e0:16:fa:1e:5c:63:71:fd:
c2:98:9a:68:57:0a:7e:ce:53:46:30:52:fb:3c:34:
ef:9f:7a:28:71:32:b8:93:24:cd:94:77:e1:e5:ef:
6d:20:8c:14:ea:d7:8f:49:2d:6c:96:ba:5c:59:1a:
a7:b7:58:dd:95:0e:60:fe:47:11:53:02:9a:32:35:
15:90:92:6c:82:f6:3f:93:29:cd:31:1d:52:29:66:
25:65:b6:4c:2b:5a:4a:fb:b9:30:75:5c:9e:23:0e:
43:1a:ac:c0:f9:8f:49:bb:9f:1a:cf:6a:34:b5:c0:
a5:e2:9f:db:73:e7:0c:90:7f:fc:5b:c6:1d:ce:6b:
d4:12:37:2a:ab:29:2b:e8:03:0e:3d:a8:bf:79:52:
0a:36:b6:22:ff:9d:ac:8c:d0:5f:2a:61:05:2a:c0:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:47:1E:7E:FD:F3:04:DB:7B:97:75:30:02:8A:49:DB:7E:E4:A4:33
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:16:f6:0c:d2:6d:0b:fe:12:0d:9a:11:83:31:04:92:f4:96:
cf:74:c2:ad:d2:97:82:1b:05:c8:ed:f6:62:7d:24:2d:9d:6e:
35:2c:21:b1:b4:20:f3:87:bc:af:96:bb:9a:cd:e3:e9:76:87:
db:b9:ae:76:ab:75:1d:0d:9f:e3:68:c4:25:ee:bb:1d:3a:60:
a1:1b:4b:fc:c4:d0:ff:2e:0b:5b:a8:a5:fa:4d:be:49:73:5b:
30:13:35:34:e3:a1:97:f3:4d:20:70:db:ba:33:a0:90:65:ef:
a8:d5:7e:12:3b:e3:81:9f:34:d7:c6:e7:86:ee:50:c7:ca:10:
9a:d1:9a:dc:01:1e:ca:98:07:67:9f:3a:79:20:34:9e:12:83:
a3:ec:d1:00:d4:59:6d:c8:ee:a6:3d:19:17:6e:75:c8:a8:51:
b2:d2:06:fd:6b:e8:5b:5a:b5:90:b2:30:ee:22:3a:da:88:e1:
9b:07:bf:fc:05:d7:f8:07:21:b2:13:39:bf:64:3a:cd:dd:06:
fc:6c:13:02:02:96:59:45:c9:e8:83:af:37:4d:45:29:f1:67:
09:7d:8c:24:82:71:f9:3a:0e:7d:1d:3b:2f:51:c0:ca:6d:3e:
5d:95:94:f6:38:8a:39:e7:b2:8a:af:3e:e7:a2:39:46:7b:1b:
50:01:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:00:28 2026 by rpki-client