Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
File: u_ZiVRjeFxdQ353R3d5c5PATUUs.mft (raw, json)
Hash identifier: 655AlfkVvFUhC5EXerQBYPOiYQspXscSbuBMb7svNK0=
Subject key identifier: 4B:F8:17:35:2F:42:A3:CA:CE:81:3F:53:31:FB:81:60:E2:ED:9F:1D
Authority key identifier: BB:F6:62:55:18:DE:17:17:50:DF:9D:D1:DD:DE:5C:E4:F0:13:51:4B
Certificate issuer: /CN=bbf6625518de171750df9dd1ddde5ce4f013514b
Certificate serial: 01A0ED420CEC414F13D4676A8E09401F26D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
Manifest number: 86
Signing time: Tue 29 Sep 2026 13:02:03 +0000
Manifest this update: Tue 29 Sep 2026 13:02:03 +0000
Manifest next update: Wed 30 Sep 2026 13:02:03 +0000
Files and hashes: 1: A26-lasbV2k5M75rwTYmuN9_3do.asa (hash: Sun6EI7e8A+FFJyQElrNlyyAYtlzT8QGKplzHnPtD4g=)
2: r9sOkUJSTIYwYByOsBG7rQ5fUU4.roa (hash: 6XJeDwvqeUvD80Gd8Az6ZX6d/AoW+pC7ZiXXSru7U5o=)
3: u_ZiVRjeFxdQ353R3d5c5PATUUs.crl (hash: aaBZiffi+Y6hCMVMeXAHdHyzUA1tuF0lgZaDUTK1gu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:42:0c:ec:41:4f:13:d4:67:6a:8e:09:40:1f:26:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf6625518de171750df9dd1ddde5ce4f013514b
Validity
Not Before: Sep 29 13:02:03 2026 GMT
Not After : Sep 30 13:02:03 2026 GMT
Subject: CN=4bf817352f42a3cace813f5331fb8160e2ed9f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:8f:1c:31:c1:58:7b:95:b8:13:0b:f8:60:
4e:b2:ec:6c:99:dd:51:32:25:15:2c:bd:11:b4:13:
dd:ed:1a:ae:98:26:8c:bc:c6:ac:96:c4:db:77:c2:
40:9c:84:c9:75:ec:58:87:f2:af:02:34:51:1c:d7:
0e:03:c1:03:cc:6c:b7:51:36:73:91:65:ef:15:30:
23:f1:b7:ac:c1:d2:46:a1:ef:17:05:3b:a5:aa:da:
45:be:33:79:af:c0:8b:42:06:d8:b0:f9:ce:fa:de:
e2:fc:ad:00:b9:7f:5b:f0:22:61:0f:41:db:cb:b3:
25:64:43:51:9b:01:8b:c7:e7:b2:53:89:23:86:c6:
b5:dd:ed:7e:ac:5e:94:5e:00:7e:d0:8c:f2:c1:ba:
15:81:52:ed:b9:25:62:ba:61:0d:fe:b1:e7:95:de:
01:0f:b2:47:21:44:79:64:3a:42:10:06:7d:c5:5e:
c4:fb:24:68:23:d8:3b:59:04:5c:54:b8:9c:48:24:
15:88:d7:1a:30:92:eb:e2:77:bf:48:7e:82:9d:dd:
0b:a4:09:88:21:62:ea:c0:93:ac:ed:af:81:cd:34:
8f:d4:96:ee:db:7d:ed:74:cf:78:51:72:75:1b:41:
eb:cb:4e:c5:a9:8c:cd:5c:e6:15:21:9e:3b:50:66:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:17:35:2F:42:A3:CA:CE:81:3F:53:31:FB:81:60:E2:ED:9F:1D
X509v3 Authority Key Identifier:
keyid:BB:F6:62:55:18:DE:17:17:50:DF:9D:D1:DD:DE:5C:E4:F0:13:51:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:28:79:ee:78:fa:b4:5f:08:ea:cf:f1:fe:1c:81:22:dd:a9:
33:a7:2f:9b:7f:d7:18:29:20:f0:de:8f:f1:28:12:98:6e:54:
7c:ce:6b:8d:8f:0d:74:ec:1e:f9:2b:e3:88:60:74:fc:ec:85:
d5:0f:c4:cd:fd:3b:4a:4c:14:29:b8:dd:67:d7:f3:b9:2b:1b:
52:0a:63:3d:e1:51:e2:5d:96:b1:f9:9b:10:85:38:39:eb:6e:
dd:63:bd:44:58:c4:d1:1b:36:d8:a9:4a:f7:81:d3:4c:70:c2:
74:6d:9a:7e:c5:e8:5a:8f:2d:09:43:7b:b8:46:96:db:d4:41:
6f:ff:e0:72:c9:53:9a:9b:db:bf:6e:4a:61:5d:2e:54:af:81:
02:9e:e8:79:55:a7:d5:07:c3:72:39:79:33:3a:62:70:30:7d:
31:5f:c2:ec:b1:46:d5:80:34:70:41:8a:83:d4:20:e6:b0:38:
65:71:8e:0e:62:a4:7e:22:64:d5:ae:e1:80:68:56:9f:ec:1d:
97:97:d4:cd:77:41:eb:00:35:f6:2c:7e:0d:a6:82:8d:0d:85:
45:23:2c:69:38:bf:95:47:e3:36:aa:56:3b:d7:67:01:ca:e4:
e2:ef:a8:6c:53:e9:64:3b:05:8f:79:62:a5:eb:8f:8a:84:b3:
67:51:d7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:30:47 2026 by rpki-client