Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File: ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier: +nL9NTU+poqLEjHOb9vAVWf2RrjQGT8odBNYcHIDC7s=
Subject key identifier: 25:A1:76:B6:DE:E0:2C:D9:3C:3C:AA:F1:F1:30:16:51:57:E0:50:29
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 01A1863F31509E2854F630F266433D0E1B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number: 11AE
Signing time: Thu 29 Oct 2026 06:00:50 +0000
Manifest this update: Thu 29 Oct 2026 06:00:50 +0000
Manifest next update: Fri 30 Oct 2026 06:00:50 +0000
Files and hashes: 1: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: GWV+xjOaG7WUs/GxdoEeeBH6cBeNh/zwYNDYaVQ9FwE=)
2: kO3ikc55etvofjUz54lkxBw2Zts.roa (hash: FQtm/UjIvg0izBKVwcfTdDDZlcQWbE25eid7tWcMESM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:3f:31:50:9e:28:54:f6:30:f2:66:43:3d:0e:1b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: Oct 29 06:00:50 2026 GMT
Not After : Oct 30 06:00:50 2026 GMT
Subject: CN=25a176b6dee02cd93c3caaf1f130165157e05029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:53:7f:c9:22:c0:70:4f:8e:f5:f2:a5:24:
4e:69:90:cf:f9:f3:cf:df:a6:be:73:fe:27:c7:92:
99:72:16:b4:21:1f:5a:be:37:e3:ec:10:01:d7:03:
59:8a:59:a8:96:40:11:e1:8c:3b:eb:8c:8f:e4:ed:
b5:22:83:c5:bb:93:31:c2:c1:d6:35:95:22:7c:e2:
d1:29:b3:5f:70:df:5f:ae:18:e3:9d:76:3a:eb:68:
9e:c8:e5:25:46:03:0e:0f:c2:ec:d9:13:69:11:e9:
78:c3:80:a6:a7:90:75:8a:b9:62:9e:ce:6b:cd:cf:
07:56:39:1f:79:c4:c0:ab:e5:61:c1:3c:78:c2:49:
17:24:52:ae:6c:04:a5:44:2d:83:77:a7:5f:b9:79:
18:a9:f0:a2:7a:ea:26:89:be:e0:7c:24:6b:bf:26:
b8:60:80:ec:59:d1:5a:38:9b:4e:ef:ab:7e:c3:07:
bf:14:a3:99:19:ef:0c:56:80:3c:9c:4e:a9:d8:e9:
83:51:e5:20:9d:31:7e:7f:a7:b9:ac:fb:3b:2a:49:
2a:88:ad:07:29:15:12:de:0d:a0:a7:97:bc:50:02:
ed:93:7d:59:ec:c8:88:e6:fb:e9:31:a5:7b:96:3d:
fa:61:a0:82:c0:f9:7b:5a:21:93:d9:7c:1d:df:8f:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A1:76:B6:DE:E0:2C:D9:3C:3C:AA:F1:F1:30:16:51:57:E0:50:29
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:be:a3:83:58:45:b6:5b:46:38:89:ea:9e:a4:9d:6f:1a:45:
d1:ed:20:2c:44:20:ae:e3:b5:6a:78:e9:40:96:fd:b6:e4:80:
7c:71:99:0b:12:15:ea:75:ff:99:ab:b6:e4:73:ce:e0:3d:6d:
94:57:2d:c4:00:57:5b:f9:6c:33:7c:df:1c:fd:2f:e0:49:ad:
58:9f:52:3a:18:f0:64:c0:c9:c8:e5:56:26:9f:db:08:ad:c1:
65:4f:6a:91:d0:20:9e:da:17:b8:f9:ee:80:1c:25:ca:08:da:
e9:c4:0d:be:e6:60:64:39:f7:ba:cf:6f:3c:c6:4b:d3:d9:88:
4e:6c:f3:33:d8:02:25:f2:82:9c:3c:da:6d:8c:6e:95:8a:74:
ba:8f:2e:d5:fa:54:a2:14:b1:4e:5a:77:84:df:05:3f:6e:8d:
f0:0f:42:9c:9c:05:7f:c6:43:1d:44:3d:d8:4c:3b:f6:0e:26:
3c:d0:82:84:88:be:39:06:b1:03:24:6d:ba:b0:ce:a8:31:dd:
16:40:99:35:0e:81:35:a2:cd:d6:1e:51:c0:63:16:31:47:5c:
6a:bc:bf:13:8f:b9:7e:d9:f9:de:4f:5a:d8:94:b5:43:76:ae:
a2:6a:b1:4a:86:e4:e9:8f:f0:20:be:fb:02:2e:04:8d:a0:b0:
b7:b8:f7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:07:28 2026 by rpki-client