Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: CPt4HsPAQDdQV0gLq76aqZygIGZH+DOr8Rg4VZsywLo=
Subject key identifier: C4:C1:D4:BC:8E:CA:AE:90:56:B0:79:F9:3E:23:3E:61:44:5A:2D:9A
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 01A1747030BF883EC767D2513A293F7F0CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 1B12
Signing time: Sun 25 Oct 2026 19:01:11 +0000
Manifest this update: Sun 25 Oct 2026 19:01:11 +0000
Manifest next update: Mon 26 Oct 2026 19:01:11 +0000
Files and hashes: 1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
2: 6HFZqocQgM6Tvjt5SVa1d-JKQro.roa (hash: R7CY28+/1QGV8imQwHhXvvPJh8Q9cCcEUd0a8h48WvQ=)
3: 9ZsiVUbUX5W-ZMCVQPzYEB1xBz4.roa (hash: PbpoXyAV/0b2z6QlVsi46fCFIAuuq0DUJ5Bw/Cp89FU=)
4: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
5: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: GQMryXEgGRMY6RcAugbFaRbzJCxZh0RIiq8G2okbU7Q=)
7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
8: inl3oK6KntOVTBjF2QtajgW1paQ.roa (hash: hSh/MkCdcKj7PpJEVgb25px7FEs0jeNWgRrerofSRCY=)
9: kB2FkBaRUfAJi-1yxcUFgqy84f8.roa (hash: EfQ4Aw8Q7Tcem9htNsAj6y3hOE53qNPfdKYIzWgsVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:70:30:bf:88:3e:c7:67:d2:51:3a:29:3f:7f:0c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Oct 25 19:01:11 2026 GMT
Not After : Oct 26 19:01:11 2026 GMT
Subject: CN=c4c1d4bc8ecaae9056b079f93e233e61445a2d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:bb:44:a2:06:37:75:01:24:71:d2:1f:20:
2b:a7:ec:c1:d0:2f:5c:9e:b3:d0:d6:b6:6c:14:88:
1a:94:5d:c3:b5:98:e2:e3:41:be:aa:59:9c:e8:69:
d2:70:18:76:34:44:29:15:43:c1:35:20:6b:1a:ec:
86:e5:71:6a:3c:8b:1f:ed:d8:78:3b:a9:9b:f2:e0:
6c:db:ad:ef:99:3a:ec:17:62:bc:7a:ba:5a:ea:f2:
18:2a:a6:45:77:51:55:27:11:dd:86:2c:bf:fa:c9:
bd:68:4e:fa:c3:8d:ea:21:5d:2a:42:b6:2b:0b:9f:
a0:32:ef:31:0d:e9:71:87:2f:69:99:e3:ab:79:88:
24:25:59:0b:5b:96:1b:eb:2b:16:d1:6b:c4:e3:7d:
e8:4e:80:40:99:a7:2d:f2:c6:59:4c:95:a2:0c:9a:
84:2a:33:3e:80:1b:bc:67:31:4b:3b:4a:50:4f:67:
40:df:1b:0d:63:a4:75:43:e3:e8:40:a4:9b:e2:75:
99:36:1b:d7:f8:58:a7:21:c6:af:27:0f:08:d9:53:
40:0d:1c:d5:d2:01:b7:aa:69:38:33:0f:32:5f:63:
04:f5:02:a1:0f:26:28:9a:4c:ce:72:f2:35:89:03:
dc:73:0a:1f:c5:e8:08:61:04:5e:67:d6:c5:c4:c2:
92:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C1:D4:BC:8E:CA:AE:90:56:B0:79:F9:3E:23:3E:61:44:5A:2D:9A
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:69:10:03:78:a5:af:8f:d9:6d:3b:4d:b7:2b:25:a5:dd:bb:
f1:ca:de:e7:d0:ce:a0:3c:d3:39:bc:c9:4d:14:1d:b8:30:77:
83:62:da:0e:31:aa:0b:92:0d:98:58:cd:dd:d5:e8:35:f5:f6:
b6:24:f1:45:dd:99:11:9f:0c:d2:45:83:3f:0f:c0:86:0d:d2:
04:13:fe:88:38:da:cb:2a:6c:f1:3c:13:51:ed:c9:5e:52:c1:
d3:ff:cb:49:d1:7f:93:fa:de:51:5a:7c:bd:11:62:b0:e6:4b:
d0:68:5d:41:80:fa:c1:b3:15:a9:26:c2:bb:6c:8d:ec:68:77:
68:e4:82:53:cc:75:6b:0d:74:d2:fd:f4:e2:7e:ff:71:03:54:
dc:24:85:f9:ee:9e:d6:57:ea:c0:f3:fb:cb:ef:20:d4:24:b0:
f5:37:09:65:d7:85:b4:f8:6f:0d:f6:88:a8:3f:3a:3e:44:89:
1b:db:b8:34:0d:6a:bd:b3:a3:e2:79:cd:65:4f:1f:f0:d6:24:
6c:40:e3:8d:b8:0c:56:cb:27:e1:1d:bd:a6:0a:ed:3e:a7:05:
12:33:e6:b5:51:2d:49:cb:85:87:d8:ab:a3:86:4e:81:ef:3b:
6b:e8:4e:ed:ee:14:22:95:84:97:6a:0f:fb:8a:17:97:bd:be:
c3:d8:6f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:31:25 2026 by rpki-client