Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: FJbm2fdQO/mzXORhAhf5wmAkWC4M1bk7aulreeasA8g=
Subject key identifier: B2:67:05:3B:FC:CD:87:5D:18:0C:2B:AC:A8:AA:27:B2:D1:75:27:EB
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 01A17092DEA9F9D475580DAE1D6B6A096717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 1B10
Signing time: Sun 25 Oct 2026 01:00:35 +0000
Manifest this update: Sun 25 Oct 2026 01:00:35 +0000
Manifest next update: Mon 26 Oct 2026 01:00:35 +0000
Files and hashes: 1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
2: 6HFZqocQgM6Tvjt5SVa1d-JKQro.roa (hash: R7CY28+/1QGV8imQwHhXvvPJh8Q9cCcEUd0a8h48WvQ=)
3: 9ZsiVUbUX5W-ZMCVQPzYEB1xBz4.roa (hash: PbpoXyAV/0b2z6QlVsi46fCFIAuuq0DUJ5Bw/Cp89FU=)
4: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
5: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: LLSvTA1VFTh/bvG0DIAaVD7gCLskrCDy3A25Hoda8nI=)
7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
8: inl3oK6KntOVTBjF2QtajgW1paQ.roa (hash: hSh/MkCdcKj7PpJEVgb25px7FEs0jeNWgRrerofSRCY=)
9: kB2FkBaRUfAJi-1yxcUFgqy84f8.roa (hash: EfQ4Aw8Q7Tcem9htNsAj6y3hOE53qNPfdKYIzWgsVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:92:de:a9:f9:d4:75:58:0d:ae:1d:6b:6a:09:67:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Oct 25 01:00:35 2026 GMT
Not After : Oct 26 01:00:35 2026 GMT
Subject: CN=b267053bfccd875d180c2baca8aa27b2d17527eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:12:f7:53:69:42:13:d5:4e:5e:c2:a0:60:
e1:53:36:79:86:5c:61:f9:92:7e:8e:c1:90:ef:58:
7b:7c:5a:28:a9:da:f7:64:8e:c2:95:f7:99:77:26:
3b:0e:0c:21:4c:d1:d9:39:ec:96:77:98:32:3b:ec:
c4:4f:f7:59:a7:8d:7c:23:94:ff:96:5b:63:6a:c4:
69:a9:4e:8b:ba:b6:2a:4c:5e:bd:8c:6d:06:da:c3:
14:cf:db:9f:8d:cd:65:57:6b:a9:ea:4f:eb:48:e0:
c5:9f:87:dd:6d:6e:86:d6:5c:3a:65:dd:25:fa:4b:
e0:49:03:de:e8:f9:83:7a:c7:49:7c:a6:73:2f:07:
06:dd:85:09:9b:ef:04:22:60:30:fc:4a:a0:46:b4:
ca:ad:8c:67:cf:bb:96:1e:4a:bf:40:b4:d4:09:87:
1e:ef:da:5e:40:82:7f:c7:e3:a8:ff:bc:bd:fd:cc:
44:1b:aa:35:21:01:62:15:68:63:a9:80:33:da:f4:
da:3e:2f:bc:02:01:b3:7d:0e:e6:02:f5:1d:67:30:
7b:b9:2b:73:67:19:9f:45:d0:02:08:c7:76:ba:99:
bf:7d:d0:39:74:f5:f3:f9:01:f6:56:ab:75:8c:b1:
9a:37:c6:27:0c:cd:fd:bc:c3:8b:6e:d0:87:8b:db:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:67:05:3B:FC:CD:87:5D:18:0C:2B:AC:A8:AA:27:B2:D1:75:27:EB
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ea:3f:ff:7e:b0:3a:a8:fe:7c:24:0b:7b:19:38:e9:16:ad:
43:27:29:49:c8:99:d3:cd:82:92:a4:a7:65:66:05:97:57:87:
ec:fc:6c:93:d9:0d:e4:cd:e8:c4:ac:6b:fe:2b:50:89:c5:d0:
45:cb:36:f2:a5:72:af:21:d3:79:e7:53:c3:7b:d4:3e:a9:dc:
3d:ac:d5:20:90:c2:87:97:e4:89:5a:5f:cc:75:0d:ab:f7:6d:
77:26:09:70:45:1d:5d:14:d2:1d:6c:36:a1:9c:c1:6f:1d:24:
94:83:1e:27:b7:e3:02:7a:2a:c4:fa:ef:62:fd:52:7e:bf:69:
81:a3:8e:d1:90:fa:2d:6a:f4:2e:bd:3e:b4:f8:d1:4e:99:72:
82:1c:93:0e:a2:cb:2d:38:9f:44:5c:e5:00:5c:81:1b:ea:0d:
0f:ab:c9:03:aa:cb:37:1c:6c:44:ee:30:1e:d4:16:30:4f:76:
7f:bf:c2:17:9e:19:8a:7f:54:23:3d:a1:52:9d:a8:e0:1e:2f:
37:9a:bd:f6:c3:a9:5e:ab:30:71:ff:c9:9d:49:a5:f0:9e:9e:
0a:1e:86:05:ca:ab:5f:0e:97:12:07:2d:b4:53:2d:74:3c:32:
8a:01:4c:39:d7:aa:90:fb:36:0e:c2:e0:a9:7c:94:cc:87:f0:
07:6f:22:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:57:36 2026 by rpki-client