Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
File: Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft (raw, json)
Hash identifier: EpIzq2AL9LqLr0jkEN+Rp1v1+c6IrHseWi6xlNBydlc=
Subject key identifier: 01:06:D5:AA:C4:7C:CB:D8:6C:10:15:F9:91:89:4B:BD:3C:6B:95:BF
Authority key identifier: 67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
Certificate issuer: /CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Certificate serial: 01A15B1E7194B6AC8C78A4B47298F4413666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
Manifest number: 012D
Signing time: Tue 20 Oct 2026 21:01:24 +0000
Manifest this update: Tue 20 Oct 2026 21:01:24 +0000
Manifest next update: Wed 21 Oct 2026 21:01:24 +0000
Files and hashes: 1: Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl (hash: ICkmpmHzCvHz/DJCoxGQKgigw3Dfl3DBdhUAsvo05yo=)
2: _99RUrGdci44Oq4_4xcT9uSL-jY.roa (hash: YvmqrGHSZPjUN26szsH0GLTZcYZv0BvXR40esmV5asY=)
3: h658PKckKesTLernUES_denhymQ.roa (hash: TondVlbf8pLFUhLFF4XczbxXR4UNpHDTwhjMbduJWEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:1e:71:94:b6:ac:8c:78:a4:b4:72:98:f4:41:36:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Validity
Not Before: Oct 20 21:01:24 2026 GMT
Not After : Oct 21 21:01:24 2026 GMT
Subject: CN=0106d5aac47ccbd86c1015f991894bbd3c6b95bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:56:70:7b:d1:a8:ab:48:db:b9:11:fc:23:
93:51:d3:2d:29:4f:4a:1a:5b:c2:96:e5:ce:e6:b2:
63:1f:d0:12:d3:6b:61:f8:44:d2:0f:f0:e8:4f:8d:
64:f1:2b:cf:29:b7:22:f9:5c:42:fc:ae:7d:de:99:
06:d9:5e:1b:bd:93:a3:e4:35:5d:3f:e1:a4:78:a1:
3d:d9:54:a3:3c:42:b8:f3:cb:ab:31:a4:87:7a:f1:
40:8b:bf:19:35:08:a5:97:2e:fb:3b:7b:33:91:ad:
a7:e6:b8:7c:aa:1c:3a:21:85:ba:c7:a4:4f:cd:f2:
f7:aa:2a:f3:7c:70:df:1e:ea:e2:d1:8d:e0:98:c9:
af:53:24:c8:d5:ad:1a:55:91:c9:e1:18:25:4b:04:
99:2e:c0:30:d9:73:e0:e8:6b:42:70:75:b4:c0:37:
25:28:9b:43:c6:32:71:a1:25:a2:d6:22:50:6e:73:
48:f8:07:35:96:4a:42:13:60:a3:cd:ff:70:4b:7c:
67:69:75:a2:b5:fa:4b:ff:6e:07:f9:61:13:aa:bc:
92:c4:45:9f:ae:04:fd:95:b3:92:eb:f1:31:f4:c7:
f7:49:0d:95:83:2a:44:cf:73:a8:84:81:d2:62:98:
1c:07:35:68:51:11:cc:59:36:3d:32:71:75:d2:76:
b9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:06:D5:AA:C4:7C:CB:D8:6C:10:15:F9:91:89:4B:BD:3C:6B:95:BF
X509v3 Authority Key Identifier:
keyid:67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d8:24:8d:d1:fc:7f:d7:06:ca:c6:60:b6:25:b5:e8:a1:76:
ac:62:bc:9f:c6:67:3d:ea:27:70:2e:ef:09:25:46:b0:f8:92:
9a:6a:50:f5:fa:af:b1:1f:d6:7e:a1:92:74:c6:54:de:4a:69:
c5:16:f8:03:09:1b:3e:42:39:94:dd:f8:ba:ac:c1:19:ef:bd:
83:af:b5:9a:3d:f5:ef:94:26:ac:3b:a5:2d:4d:71:15:75:3c:
8e:0a:64:58:df:c5:21:0c:8f:05:c9:ae:87:c9:73:29:a9:15:
ec:f2:1d:8d:54:4a:43:f9:6a:1a:89:85:ef:cd:10:0d:37:66:
af:ce:09:e4:d6:43:43:f5:76:99:aa:f9:ba:09:29:b3:11:4b:
c1:2c:42:c1:7e:69:30:a3:dd:04:93:fa:5e:c6:21:25:03:a8:
90:f3:5c:73:44:a2:a6:a4:96:66:60:0b:39:7b:b9:93:29:93:
d1:56:b9:bd:e6:d4:46:22:7a:33:5d:a2:a3:60:79:b8:bc:2f:
b2:e4:9d:3e:2b:7f:f3:2b:ad:2f:93:d6:ee:0c:87:85:e7:1c:
70:85:b1:3a:da:db:b9:46:db:43:f2:cd:8b:8e:77:12:bb:52:
11:d3:b7:a8:e9:8a:49:b7:65:50:88:67:4e:6e:e0:61:88:0e:
18:44:33:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:52:27 2026 by rpki-client