Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: Vet8PaOKkJ6PTPPnOK/BTZjizcUINQIfwscHjNgA4LA=
Subject key identifier: F3:E8:CB:24:5E:EE:FF:FC:96:A1:20:AD:38:EF:A9:0A:90:75:1E:92
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 01A17E862642325DABFB7D931BE7A9908353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 0A6C
Signing time: Tue 27 Oct 2026 18:01:23 +0000
Manifest this update: Tue 27 Oct 2026 18:01:23 +0000
Manifest next update: Wed 28 Oct 2026 18:01:23 +0000
Files and hashes: 1: W37sGJ1Z1wl4UUbIKXQMtHltG0E.roa (hash: hXtR6w7vecs+GA3es0V1qVgIw93rkqQSf8/pd9Bww6I=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: Js6eO+yG/zIUwYnicCtj1XF8smrSRWK45/TsypprkAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:86:26:42:32:5d:ab:fb:7d:93:1b:e7:a9:90:83:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Oct 27 18:01:23 2026 GMT
Not After : Oct 28 18:01:23 2026 GMT
Subject: CN=f3e8cb245eeefffc96a120ad38efa90a90751e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:a9:b0:00:aa:f8:8d:5e:db:9d:29:14:e7:
d6:68:21:24:28:7e:19:e5:48:93:7e:fd:22:61:0e:
e8:79:6c:bc:53:b5:7c:0d:e4:02:a9:e7:28:d5:50:
c1:fa:f3:c7:9a:80:77:ad:f6:59:b9:9f:6f:60:92:
20:f2:72:59:be:a8:6c:14:b5:84:cf:15:59:f5:52:
75:e2:40:8c:f0:30:e5:43:18:3f:e7:0d:cc:e9:64:
42:a3:5b:aa:b3:60:ca:4c:ca:15:ef:51:cf:72:ac:
07:8f:a1:8f:e2:e0:04:3e:67:d4:a7:a4:b7:3d:5c:
56:2f:1f:f9:e5:68:d2:c2:8b:4e:c3:aa:b5:d1:3b:
b5:08:9e:b1:68:a9:ff:27:b3:20:d2:6b:92:b5:c0:
65:02:d6:7d:8d:bf:7b:0a:20:5a:76:c4:e1:d2:b4:
45:45:e7:e0:7e:bf:d2:d8:00:5e:99:36:85:f2:7d:
8d:82:69:75:5f:80:b7:97:d0:84:1a:3e:56:d5:a3:
b2:11:e9:1b:24:45:94:39:fb:0a:21:87:c8:0d:2e:
1f:b5:bc:b8:6c:ff:d1:bf:63:9c:27:96:6d:fd:e3:
a5:18:b0:61:b7:34:6b:f0:2f:45:c7:b8:fa:c4:81:
ea:50:33:4d:35:5c:3d:17:98:3f:74:9c:1d:4e:3a:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E8:CB:24:5E:EE:FF:FC:96:A1:20:AD:38:EF:A9:0A:90:75:1E:92
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d1:d2:da:a8:a6:55:2a:f7:6f:e4:b6:7a:45:fc:bc:60:76:
ef:e5:2e:7d:e8:12:5b:63:0b:cc:92:2e:ef:55:19:4b:ce:f2:
4f:d7:cb:e0:78:0a:ef:89:a6:ee:66:8a:c1:28:e6:25:66:4f:
d1:a3:a0:3d:a9:dc:9f:fa:99:ce:cc:06:b7:5a:17:84:44:d9:
95:b8:c1:27:27:ed:cd:a8:9d:54:f3:51:5d:86:03:f3:56:0a:
a9:78:c2:40:16:5f:2e:33:de:30:1e:b2:1d:c2:cf:c7:cd:81:
43:c8:99:35:dd:60:54:b7:fa:88:88:dc:ee:b1:5d:4f:f2:8c:
96:81:8e:ac:a9:14:64:9c:49:02:fe:23:3d:91:b8:94:d2:2d:
b5:62:60:1f:0f:ae:9f:a4:86:89:8c:67:6c:f9:7f:3a:be:80:
58:6c:4d:68:0e:b1:e0:5a:8d:48:3c:69:29:3b:ff:00:09:fb:
7a:e8:5d:8a:11:ad:11:36:fe:25:6a:1a:08:c5:33:d0:ec:7e:
25:f1:ff:8a:39:c3:03:47:12:88:f8:43:8c:4f:e5:c7:21:f3:
40:71:cf:a9:03:be:06:41:2c:7c:25:d9:cb:6e:bb:dd:8c:3c:
eb:8c:07:f4:fe:49:dd:49:e8:71:55:1c:5a:5f:06:17:ea:3b:
9a:0c:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:09:56 2026 by rpki-client