Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier: Ql0cWKvRToj4UVVSITBBgXUrA68q+f8L2rLkls9t1U0=
Subject key identifier: B5:F8:6A:7D:EB:C8:2F:0C:7B:1C:52:F0:16:44:BD:79:0C:4A:2F:9A
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 01A15B1EF398305CA64AF7D29231440FAC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number: 1904
Signing time: Tue 20 Oct 2026 21:01:57 +0000
Manifest this update: Tue 20 Oct 2026 21:01:57 +0000
Manifest next update: Wed 21 Oct 2026 21:01:57 +0000
Files and hashes: 1: ElW47ObyfnNKPgKpwIJenZynEps.roa (hash: MYYtJ2cX574IGimZRbIB/INbKI/GwnvZia+SyQYKKgY=)
2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: gyonWWQzfbMAPN5bDfDWZffQ4O6fpaJxDwEvQOFg0Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:1e:f3:98:30:5c:a6:4a:f7:d2:92:31:44:0f:ac:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: Oct 20 21:01:57 2026 GMT
Not After : Oct 21 21:01:57 2026 GMT
Subject: CN=b5f86a7debc82f0c7b1c52f01644bd790c4a2f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:bf:28:4f:2f:e9:aa:04:2b:8e:96:09:c5:
59:22:92:9c:a9:e7:12:18:96:86:18:33:00:5a:78:
6d:3e:bf:98:19:11:1e:53:a0:ce:c8:ff:66:84:74:
f3:c2:94:e0:a3:67:f8:02:6f:65:38:9a:7f:86:63:
80:24:52:e4:ee:ce:cc:28:33:13:2b:e1:9d:03:af:
4f:c7:48:f8:05:fe:e4:a8:d8:1f:d7:b8:eb:ad:cc:
f3:46:a7:cd:e7:a4:1a:9b:ab:65:9f:e1:91:9e:54:
11:6d:81:ac:a9:32:4b:06:18:9f:a0:5b:36:fc:b3:
6a:8e:c1:e6:e9:d3:c4:7f:aa:1a:b4:d3:25:a4:62:
5b:e0:cd:6c:44:31:9b:f8:7e:44:9b:92:f4:d0:f4:
0f:b8:93:05:aa:a5:a5:62:21:a2:42:b6:f3:95:03:
2f:c4:32:11:ac:61:bf:a3:a1:bc:9a:c5:0a:e9:75:
5b:29:30:0d:93:10:63:9b:36:9f:98:6e:83:1b:99:
56:b5:4a:45:12:03:c4:70:34:4d:f7:2d:89:e8:70:
60:b5:17:b2:8e:f0:4e:80:45:f7:6e:a6:98:31:63:
71:73:9c:62:26:ee:85:da:74:97:40:f2:af:58:40:
ae:58:f0:59:c0:ec:18:49:1f:6b:42:8f:57:f1:33:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:6A:7D:EB:C8:2F:0C:7B:1C:52:F0:16:44:BD:79:0C:4A:2F:9A
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:87:3a:e0:e0:13:a7:78:5d:41:59:35:e6:29:d4:87:8d:51:
d9:4f:4c:2d:42:72:10:4f:bf:35:d5:8b:0a:a7:e7:c1:38:bb:
b3:d5:de:df:f8:31:d8:03:2c:b8:ed:80:69:1e:79:77:d7:32:
8b:32:f4:58:2e:dd:a5:01:75:3f:f0:fe:99:fd:23:c7:08:6a:
76:b0:9f:b6:01:4f:7b:cd:b6:b2:7b:f9:79:6d:c0:b1:3a:47:
d2:58:a3:63:d8:fd:de:a6:60:6b:6a:42:92:2a:8c:7e:88:36:
7e:d5:da:e3:a6:33:14:29:29:2e:47:cc:83:88:2f:88:11:cb:
24:31:a0:44:c0:12:d6:76:d8:7c:10:81:be:66:68:e6:26:fe:
c6:96:df:6e:ed:9c:cc:88:eb:5c:1e:1e:99:45:cb:31:9e:aa:
91:c5:60:11:56:d4:4f:51:bf:fa:cd:28:a5:3e:35:03:cc:6e:
d5:55:ad:f2:59:86:02:5d:fb:5c:55:2d:52:b5:2f:1a:1d:de:
9e:f5:b3:ab:98:ca:82:65:be:7c:eb:f3:1a:67:c9:a5:ca:4b:
60:3e:13:5c:a1:9c:aa:e0:c3:d4:76:83:60:47:43:02:db:a9:
31:a3:75:e5:fe:b0:a3:56:56:96:98:90:7d:75:b7:81:4c:76:
af:66:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:08:38 2026 by rpki-client