Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier: tnJ3qsSJyAhrXvs3Zi1B91Lu5g0/ppgVDWjk2A9RqRA=
Subject key identifier: 7F:D5:0A:68:11:41:88:98:1F:EB:B6:9F:B7:0A:4E:DD:D5:EB:D4:3D
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 01A15364ED157DD78BC1E463179A2045D8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number: 1900
Signing time: Mon 19 Oct 2026 09:01:25 +0000
Manifest this update: Mon 19 Oct 2026 09:01:25 +0000
Manifest next update: Tue 20 Oct 2026 09:01:25 +0000
Files and hashes: 1: ElW47ObyfnNKPgKpwIJenZynEps.roa (hash: MYYtJ2cX574IGimZRbIB/INbKI/GwnvZia+SyQYKKgY=)
2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: DAmHxBQA/s/l31xzUfcVUuEcq/pWwkOoqMaaqg3OtiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:64:ed:15:7d:d7:8b:c1:e4:63:17:9a:20:45:d8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: Oct 19 09:01:25 2026 GMT
Not After : Oct 20 09:01:25 2026 GMT
Subject: CN=7fd50a68114188981febb69fb70a4eddd5ebd43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:9c:d4:43:40:27:4e:64:2f:c3:87:71:a4:
17:2e:ff:3e:68:b9:76:d3:d3:27:8a:05:56:2d:db:
36:98:b0:76:e1:12:12:ff:e9:04:69:18:34:45:99:
1e:a3:16:21:5f:b3:99:f5:11:d6:55:56:29:85:c3:
cf:36:02:bc:50:ff:10:ab:a4:9a:85:27:48:7c:00:
bb:00:de:d2:48:f7:8e:3a:3e:1a:87:2d:b8:30:0c:
96:cd:d5:89:38:5b:13:4b:95:33:58:74:82:fd:47:
25:5f:70:6b:bc:10:8d:e2:4f:e3:93:41:77:48:b5:
d2:8e:76:08:7b:89:98:2e:8a:42:51:93:82:bd:f4:
35:95:a3:4d:51:19:c1:96:2a:60:34:5a:68:76:d0:
e4:26:8e:1a:5a:1a:8c:98:80:17:3e:4a:04:10:2a:
64:66:2c:86:a4:1c:9d:8f:74:73:3c:51:2a:c0:b3:
88:f7:70:eb:6d:6c:4c:aa:be:16:0e:1f:76:41:be:
f2:68:05:5c:87:8a:47:1d:a0:53:1c:2d:97:37:c0:
6f:1b:60:49:8a:6d:52:66:62:fc:85:4f:d4:35:52:
a4:62:54:c9:d3:f2:61:d1:01:56:06:ee:e5:9f:2d:
22:f3:21:02:c3:c4:52:63:32:a6:e7:ff:83:81:40:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D5:0A:68:11:41:88:98:1F:EB:B6:9F:B7:0A:4E:DD:D5:EB:D4:3D
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:48:7f:8f:f5:f6:fe:0b:43:f6:28:de:4c:f9:27:43:1d:68:
79:f6:11:55:fd:36:67:f3:61:c2:41:11:dd:c1:fa:67:45:28:
7a:bd:00:ac:94:70:f5:a2:1f:58:e3:68:a2:fd:a6:6a:9f:94:
15:50:fe:cc:91:97:ff:48:91:ca:15:a0:db:99:a3:f8:12:7f:
70:9d:6b:e4:3d:8a:e8:a8:37:d4:d8:0c:c1:e3:44:44:9a:81:
f2:3e:a2:5b:93:95:f4:c7:63:ed:cf:fd:a1:7f:db:3c:76:c1:
87:6c:24:77:bd:c7:4e:53:c4:b8:6e:84:e1:d1:1f:ca:05:bd:
6a:b4:07:65:b7:de:70:29:f8:09:3e:0b:d7:0e:92:7d:2b:45:
57:35:c6:22:7a:c5:04:8c:e8:89:5a:2a:d6:95:63:36:3d:a5:
e8:a0:74:1b:2b:5c:e5:6e:0f:3e:d1:b9:4d:bd:58:84:8d:86:
55:45:3b:aa:7c:2e:9b:01:d1:52:1d:7c:29:c4:84:32:68:3b:
6c:dd:23:64:c3:12:f2:5b:88:6d:41:f7:13:6b:b9:03:55:aa:
bd:c2:e2:0c:6c:f5:26:92:b2:46:76:be:a1:da:87:a2:6f:ed:
02:c9:28:78:1e:29:33:24:d0:ba:dd:b0:ff:df:da:c7:11:12:
4c:5b:dd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:30:33 2026 by rpki-client