Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: nx6RuhI4rMyiwfZx796MShr1Rh9lEtzKaSlVjFjkaxc=
Subject key identifier: F2:3E:16:CD:E6:61:36:C0:A9:BD:FB:76:E9:6D:1A:99:44:9B:7F:63
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 01A111F2A5015A096C4587456C045DCC5B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 1338
Signing time: Tue 06 Oct 2026 16:01:16 +0000
Manifest this update: Tue 06 Oct 2026 16:01:16 +0000
Manifest next update: Wed 07 Oct 2026 16:01:16 +0000
Files and hashes: 1: 5GenFMQsSYDx9FcfiAXgf9Uomdw.roa (hash: 4H+3cPhJ7oDZNP6D43X5l+hl9KT5PURFIDgzFceABtg=)
2: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (hash: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: 3bBnqH5iI6Xmj5jF47hUYcQq7vIZec2yAXOQ/Jg8iBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:f2:a5:01:5a:09:6c:45:87:45:6c:04:5d:cc:5b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Oct 6 16:01:16 2026 GMT
Not After : Oct 7 16:01:16 2026 GMT
Subject: CN=f23e16cde66136c0a9bdfb76e96d1a99449b7f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:80:da:65:94:ee:05:74:cb:4d:c1:d5:7f:
ce:4e:46:d9:c2:05:2c:76:ca:4c:06:6c:9b:1f:ef:
39:af:6f:9c:c8:85:5e:dd:8d:52:eb:e0:f0:16:83:
23:6a:79:67:e9:03:db:8c:0b:2e:6a:50:a8:7f:ab:
84:a5:ca:da:8c:1b:a3:07:94:bd:61:c6:42:88:77:
54:a0:b5:7a:54:2e:b4:d5:85:46:8a:8d:a8:0f:d3:
04:d2:84:75:20:71:b7:b6:a4:9d:5c:1e:7f:3b:ab:
70:3e:ad:b0:0a:1a:36:c7:dd:db:75:44:bc:d1:36:
01:d8:26:f2:14:30:d8:e4:fd:74:7b:af:77:38:1c:
93:f7:e3:e3:c4:3e:14:6e:f8:6d:dd:67:ab:89:d5:
5a:8a:05:72:b3:93:b5:1a:66:f2:d4:3f:b7:89:aa:
8d:72:bc:6f:5b:70:38:b5:21:c9:08:59:9a:03:2b:
e7:02:cc:42:66:62:0c:14:70:bc:7e:a0:3b:56:3d:
d4:43:a1:bc:dd:ac:92:52:f4:4f:f5:ab:43:af:f1:
57:6a:04:2a:df:0e:fd:74:73:03:a1:45:61:d1:5b:
f3:8c:c3:4a:c4:bb:fc:dc:79:26:10:3d:1c:6b:8b:
6d:b5:66:f5:ca:15:d5:bf:c4:fb:33:f1:5a:ca:81:
c5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3E:16:CD:E6:61:36:C0:A9:BD:FB:76:E9:6D:1A:99:44:9B:7F:63
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5b:66:f5:2a:00:7c:4d:ec:c4:26:f5:3f:02:23:f4:dd:92:
ed:f9:63:d8:84:3c:b9:28:f0:62:6b:a0:0e:af:45:a9:d4:5c:
dc:7a:45:ea:28:3d:c5:d8:46:ab:fe:8c:e5:d9:7b:9f:6c:83:
e2:75:09:0f:b4:81:2b:78:14:8a:8f:9f:dd:6f:fb:9a:e7:75:
90:01:cf:9a:74:cd:c8:42:28:01:f2:a4:83:29:fa:2d:97:ac:
ce:e4:60:c1:53:e6:cc:17:51:52:a5:37:40:1b:54:95:fa:d2:
f6:48:ce:96:64:32:98:01:c6:17:47:f3:fa:2c:b7:43:f8:cd:
10:02:3c:95:fe:05:c4:93:1b:1f:63:62:2d:a7:78:7c:c4:5b:
83:45:d6:16:12:09:c0:20:a5:05:d9:99:92:a1:c6:fd:86:6e:
b7:3e:ff:df:4f:95:65:1c:15:86:e0:76:e5:6e:a6:a1:45:92:
90:2b:65:b0:4f:25:50:26:a6:fd:7a:ca:63:f6:b6:1e:08:52:
53:80:72:9a:95:dd:5a:0e:7f:a1:2e:1b:e5:c1:13:20:52:36:
62:67:d4:4e:3d:fb:14:1c:1d:5a:09:38:26:f5:6e:3d:3a:fb:
9f:4d:44:ad:07:4e:e5:85:f1:a3:9f:4f:6b:6d:9b:81:7e:35:
1a:9a:6d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:01:35 2026 by rpki-client