Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File: Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier: jyP1QbLWPq1SslEkGZ1WG2UGksrxlfvJbtSiyQy0sPg=
Subject key identifier: 57:45:F8:C7:B5:84:30:F8:BB:2E:3A:8A:9F:0D:3F:0C:FD:A5:12:34
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial: 01A18563D8CFB6B04F5E2F6F90F1C9D8FDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number: 1AD0
Signing time: Thu 29 Oct 2026 02:01:15 +0000
Manifest this update: Thu 29 Oct 2026 02:01:15 +0000
Manifest next update: Fri 30 Oct 2026 02:01:15 +0000
Files and hashes: 1: 9_ZPXDi15fm1zzx9GsCu0r8cLwA.roa (hash: h9CqZh0rb7DZM2DSkg1oUJ5C5eMZCB3Ebd3JWwXuuXI=)
2: Z2S57soliueMTVEyGovf75orajw.crl (hash: 2+RebDmIxYKWtHTttZfBfCC+xrO3IeqMMnw93tKIGdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:63:d8:cf:b6:b0:4f:5e:2f:6f:90:f1:c9:d8:fd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Validity
Not Before: Oct 29 02:01:15 2026 GMT
Not After : Oct 30 02:01:15 2026 GMT
Subject: CN=5745f8c7b58430f8bb2e3a8a9f0d3f0cfda51234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:1e:63:d7:8d:f5:f3:12:a0:06:a8:4e:35:
0d:ef:29:fc:f7:65:0a:a0:4a:d7:75:56:45:48:e8:
98:66:ca:30:76:32:2b:57:2b:b8:14:87:66:ce:ef:
72:f1:32:66:53:c7:90:52:7f:c6:a2:62:40:08:f0:
f7:f5:75:5d:78:ed:46:1d:35:85:ca:75:1c:61:e7:
dd:55:a8:b4:4d:b6:3e:25:12:bd:a5:7c:df:1f:bc:
78:0b:0c:c9:21:f8:71:94:49:46:bf:5c:e8:dc:b1:
42:c4:45:3a:8c:8c:92:72:ef:8d:58:b9:37:a3:c7:
7b:dc:ae:6a:c1:8b:30:63:50:7c:52:cd:c9:2a:fa:
53:c5:2a:73:4b:d8:3a:f0:40:5a:91:d6:51:62:42:
1d:e2:90:f7:c1:5e:af:38:dc:b9:4e:99:56:f4:82:
f3:25:40:f1:e3:24:4d:ff:59:2c:ac:0e:11:85:de:
88:6b:9f:26:26:e3:cd:b4:fb:0d:68:fa:65:20:27:
7b:84:70:fc:c1:52:3a:fd:af:e1:c8:7a:a1:ed:d5:
c5:cb:ed:8b:c4:20:97:b0:11:18:2d:b0:59:67:a1:
18:1f:09:fe:ab:ae:e4:65:50:c5:76:c4:f1:b8:be:
a7:00:39:e5:2c:5f:f8:bb:92:ef:d8:ec:27:ee:f5:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:45:F8:C7:B5:84:30:F8:BB:2E:3A:8A:9F:0D:3F:0C:FD:A5:12:34
X509v3 Authority Key Identifier:
keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d4:ff:96:1d:2e:f1:e0:4f:50:3e:6d:a6:35:8e:82:cc:ae:
f5:d5:c2:6a:4b:9f:ca:43:ca:cd:ea:e9:8d:90:22:97:ce:29:
fd:5a:56:55:e0:cc:e3:28:a6:91:c4:3f:32:fe:9c:28:5d:3c:
0d:16:8c:bc:52:4e:9c:d6:4b:42:d9:ea:fb:0a:80:fd:6d:43:
04:b1:1b:e7:72:58:28:2b:98:50:dd:cb:98:e2:7e:eb:d0:b7:
fc:8f:5b:4d:02:1a:71:76:21:46:26:17:b0:bd:a6:e1:28:d5:
a3:28:9f:c1:33:8b:64:88:48:3b:2e:dc:bd:e3:d4:92:68:9f:
e9:23:b2:32:e3:ef:32:ea:24:38:ef:e8:64:a6:71:76:e4:2d:
de:cf:62:7d:73:6b:de:00:24:b1:81:54:6c:3f:e0:a7:f0:50:
1a:d9:1e:74:f0:74:0b:b7:b7:73:46:25:59:8d:f7:11:a0:df:
83:48:d6:af:1b:40:4e:96:4c:9b:ab:20:4f:2a:bd:81:61:98:
c2:94:71:50:48:48:05:3b:26:c4:48:b7:d7:72:aa:f1:05:ca:
7e:bf:8c:26:05:66:3a:09:f2:fb:a9:ce:5c:61:e1:55:6c:06:
dc:b8:55:2f:2e:49:3b:cb:5e:c1:85:8b:dd:de:05:04:50:9b:
00:cd:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:58 2026 by rpki-client