Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
File: z3gtKHK556EKkaJ_MHAg2pSESCc.mft (raw, json)
Hash identifier: fk+KxjxWhtOhuY7kHbtJpoWQeZ6ZmaV1BxlY0EJPzEw=
Subject key identifier: 42:95:AD:EB:F3:BD:1B:41:39:AC:78:0C:F8:84:2B:CD:B7:5D:4C:E2
Authority key identifier: CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
Certificate issuer: /CN=cf782d2872b9e7a10a91a27f307020da94844827
Certificate serial: 01A17E861596F4643F5071DB38120825AC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
Manifest number: 011E
Signing time: Tue 27 Oct 2026 18:01:18 +0000
Manifest this update: Tue 27 Oct 2026 18:01:18 +0000
Manifest next update: Wed 28 Oct 2026 18:01:18 +0000
Files and hashes: 1: e1IhMKeMisuXEHcAjWQVgSjjfD0.roa (hash: oQ/Qfz2KLZdeJN7zojygq7vM4Um6kObVX4+hO49cwrc=)
2: z3gtKHK556EKkaJ_MHAg2pSESCc.crl (hash: ePJY0lsUxv2gqRAE5tlRC27YbfAh72q8em9r2oDG+c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:86:15:96:f4:64:3f:50:71:db:38:12:08:25:ac:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf782d2872b9e7a10a91a27f307020da94844827
Validity
Not Before: Oct 27 18:01:18 2026 GMT
Not After : Oct 28 18:01:18 2026 GMT
Subject: CN=4295adebf3bd1b4139ac780cf8842bcdb75d4ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:89:b1:8c:1d:91:c3:c0:5a:8f:d6:0d:60:
12:30:66:5f:be:5c:77:fa:4b:f8:c9:12:0d:cd:af:
5b:7a:21:d9:f4:b7:83:80:e0:cb:32:51:1f:3e:8a:
af:2c:d5:71:15:98:45:08:6a:7a:97:1c:12:ea:d4:
ca:7e:53:a5:76:4a:10:a0:cf:a0:73:a7:49:80:b3:
d0:40:5d:2a:de:36:a2:54:e4:c6:9f:9e:b9:9e:92:
11:2a:26:5f:8b:9d:50:07:24:60:ee:41:8d:e1:f3:
07:3d:45:2c:55:8b:54:aa:7e:f4:3a:82:75:ed:94:
5b:88:0a:84:b3:16:ee:a1:10:f5:a1:60:92:27:e6:
50:53:f1:5f:17:8c:fb:4d:1f:93:eb:a2:07:7a:6a:
2d:cc:ec:53:fd:3e:8c:6f:1d:b4:41:40:8c:75:cb:
b8:fa:63:f7:74:f8:45:ef:db:80:82:77:43:14:7a:
62:51:2a:e1:36:57:83:e1:d3:70:e6:ce:7b:d8:a0:
1d:1b:02:7a:93:a7:4a:80:ab:7b:16:10:a9:f5:b9:
64:fa:09:56:44:dc:94:e1:8d:3d:c6:f3:ec:a7:cf:
11:db:7d:fc:84:a8:c0:20:70:f7:f8:5f:6d:0a:93:
85:39:0a:59:3d:b5:24:24:cc:13:8d:c0:cc:9e:48:
2d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:95:AD:EB:F3:BD:1B:41:39:AC:78:0C:F8:84:2B:CD:B7:5D:4C:E2
X509v3 Authority Key Identifier:
keyid:CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4a:4c:7f:eb:bd:4f:67:0a:84:a0:40:8c:ed:33:a3:26:f3:
10:80:da:b9:61:7a:c3:74:fc:8e:5e:fd:57:9b:78:82:a4:1a:
e5:de:ba:82:4e:93:5e:b1:2d:a9:da:41:2a:ec:e8:a8:79:76:
df:ec:5e:8c:41:af:ed:73:f0:4c:4a:ec:8a:57:af:09:61:e1:
8c:64:99:25:91:03:44:15:a7:fb:dc:62:37:ad:b3:13:2e:dd:
8e:da:0f:5c:a5:8f:e7:e8:84:f4:2c:e6:86:ca:fe:cc:fc:c6:
bb:6d:5f:a3:73:34:df:a8:a4:e7:fe:37:6f:89:46:01:48:41:
93:e0:c0:53:b9:2f:a8:62:45:f6:be:8c:83:c0:d7:98:d4:62:
d8:62:93:4c:d5:3e:74:e5:88:a7:ad:87:a6:6c:8c:ff:f4:2f:
ff:4f:e4:ac:ec:89:72:9c:6b:bc:92:22:37:2c:2a:a5:7f:86:
75:9a:3c:2a:c7:27:7d:e4:da:f9:c5:19:6a:5f:11:f7:b5:94:
41:44:79:bc:14:47:4e:57:70:d6:f7:3b:4a:a9:34:85:14:d6:
98:92:ce:92:d2:12:f1:12:a4:85:21:36:ee:49:e3:02:81:8c:
17:99:69:d9:3a:89:74:29:28:9c:93:5e:cd:5a:7e:6d:da:26:
44:a7:8f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:44:06 2026 by rpki-client