Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
File: Z_TjgP46-q_fnIL8auXjPOAyirI.mft (raw, json)
Hash identifier: xNBiYZT4Jxqq+yui2SAM8yWy4qlu4e+CXw3EolHHGpo=
Subject key identifier: F0:54:8A:11:57:4B:30:3E:23:A0:A6:BE:16:FC:CE:E1:74:DF:F6:E0
Authority key identifier: 67:F4:E3:80:FE:3A:FA:AF:DF:9C:82:FC:6A:E5:E3:3C:E0:32:8A:B2
Certificate issuer: /CN=67f4e380fe3afaafdf9c82fc6ae5e33ce0328ab2
Certificate serial: 01A10FCCC9E8D2CD9E644C7B781985E2CA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
Manifest number: 0106
Signing time: Tue 06 Oct 2026 06:00:41 +0000
Manifest this update: Tue 06 Oct 2026 06:00:41 +0000
Manifest next update: Wed 07 Oct 2026 06:00:41 +0000
Files and hashes: 1: 81dpJBDy9Dao5ZscfFbdcGEGKx8.roa (hash: xYZWmARqztzpL9bYvU/vnFuYMaN1rzIszkHOfUaA5hw=)
2: JDNYiM5cTQvYl86g2PlIXooszc4.roa (hash: k41osz+0Jqv0dxjQFYhX5kFK2fQdrK1p+ItLN6xOXqI=)
3: Z_TjgP46-q_fnIL8auXjPOAyirI.crl (hash: oGqg/DGypUfoXa/WlszumLsOdRDEn/NadTjOJMsSrro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cc:c9:e8:d2:cd:9e:64:4c:7b:78:19:85:e2:ca:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f4e380fe3afaafdf9c82fc6ae5e33ce0328ab2
Validity
Not Before: Oct 6 06:00:41 2026 GMT
Not After : Oct 7 06:00:41 2026 GMT
Subject: CN=f0548a11574b303e23a0a6be16fccee174dff6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:33:e3:59:6a:1b:58:08:8d:0a:7c:31:38:
07:4d:03:fb:cb:b1:29:38:f9:35:23:a1:41:f4:e5:
22:d1:2d:83:9c:b2:fc:54:da:49:15:12:dd:6f:4d:
af:35:da:35:73:8b:89:c1:5c:68:8a:6e:85:c2:c9:
9c:ca:0f:e8:ea:09:4f:22:4b:a6:e3:7d:43:ff:12:
be:4a:a6:77:ea:f2:7f:32:9b:c1:d5:8b:4a:cb:2a:
8f:d7:2e:d0:75:88:2b:03:51:33:9b:56:a3:63:16:
63:77:90:75:ab:ab:38:18:f3:c5:89:bd:3c:e7:6e:
b9:43:ca:db:3f:6a:5d:05:d9:9a:e7:6c:b8:84:4a:
ba:5b:91:c5:f0:e9:ae:ff:8f:36:84:f7:9c:e5:84:
19:64:e0:54:ba:70:9d:21:dd:e2:ab:aa:2f:9a:aa:
9c:34:f2:80:ad:5b:24:4e:2a:12:9d:98:96:69:c0:
d8:24:e9:15:d8:bd:d3:b2:b3:3b:49:c0:f4:01:9e:
d9:0c:ad:80:92:50:cd:cc:05:07:06:ea:97:8d:82:
ab:96:5f:34:35:10:68:0f:33:bf:e7:1e:8d:65:ad:
fc:55:14:d4:73:e3:f0:f3:0c:3f:ac:58:33:39:da:
38:dd:94:c1:34:91:4a:1a:c9:86:1a:71:51:7e:fe:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:54:8A:11:57:4B:30:3E:23:A0:A6:BE:16:FC:CE:E1:74:DF:F6:E0
X509v3 Authority Key Identifier:
keyid:67:F4:E3:80:FE:3A:FA:AF:DF:9C:82:FC:6A:E5:E3:3C:E0:32:8A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:71:dc:34:3b:d8:9e:d5:9c:7d:92:2f:09:ad:41:3f:25:7c:
95:e7:1a:07:ae:1b:c2:9b:ef:48:5a:73:40:bf:23:24:98:da:
a3:72:d5:aa:e6:6c:40:a6:dd:21:3a:8e:91:5d:01:c1:76:15:
0b:48:61:03:18:6b:52:e2:4e:c5:68:81:31:63:6c:2a:14:62:
21:bd:d0:bb:c4:7a:0f:24:24:3e:41:61:0e:e3:91:ed:47:46:
98:fb:07:b2:84:1f:ba:bc:d6:2d:31:f8:b5:e0:33:bb:66:98:
00:bf:f5:0c:58:1b:a3:9d:41:5c:3d:6f:5b:a0:fc:f5:63:02:
c9:b6:3e:a1:af:77:2b:c0:a5:29:fa:73:92:b9:e4:48:14:6d:
72:d4:78:69:2f:34:78:e2:33:a7:c9:ff:04:41:f1:58:5a:2b:
dc:03:21:ce:54:aa:93:51:52:8e:62:bf:89:4c:43:14:d7:ee:
ee:42:9a:33:c1:8e:2b:5c:a5:92:3c:ed:24:5d:64:97:6f:a4:
a2:6f:df:7f:0c:a6:35:1f:6f:b7:6e:26:4c:98:62:7b:32:95:
8f:33:45:70:1a:58:c9:01:45:e5:e5:fa:f6:39:a3:88:2d:5a:
68:c7:c5:6f:bb:96:94:66:68:26:59:89:9a:db:ee:6f:c3:31:
ce:9f:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:53:54 2026 by rpki-client