Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier: hQKbQfnGH89fGDvSZj55HjQiFIvTO11H1ANn0zssGgA=
Subject key identifier: 33:13:14:63:DB:01:5B:6A:92:51:0E:3C:8C:E0:4D:FF:F1:2D:3E:57
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial: 01A17F2B24C2E128B98AF86F6230E760670D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 21:01:36 +0000
Manifest this update: Tue 27 Oct 2026 21:01:36 +0000
Manifest next update: Wed 28 Oct 2026 21:01:36 +0000
Files and hashes: 1: EY3B-toGXUZtNKRbRIT1VD4kBHE.roa (hash: 3Wh78iI9ibfL8FY/7stYt19m1NshKZMf/srlWVz8NYk=)
2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: 4MR8adAUuycP2AWFWHz2Tvwg+anHp1v0TayJkOvlaW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2b:24:c2:e1:28:b9:8a:f8:6f:62:30:e7:60:67:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Validity
Not Before: Oct 27 21:01:36 2026 GMT
Not After : Oct 28 21:01:36 2026 GMT
Subject: CN=33131463db015b6a92510e3c8ce04dfff12d3e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:03:40:d3:7c:8a:84:71:08:cc:b3:51:8a:
0e:5e:86:fd:c6:da:21:e2:e8:3b:db:e4:d1:29:d2:
9a:c7:96:43:54:6b:70:0a:3c:f4:aa:db:8f:d0:61:
26:b8:48:de:ab:f1:3e:f4:13:af:0b:7a:ef:3e:f7:
65:15:bb:d2:57:3e:f6:ae:6d:83:f8:5b:b9:9d:80:
c9:f3:0b:05:2e:96:2b:08:c1:5c:68:47:f4:d5:7f:
c5:f1:83:3c:41:37:cf:92:7c:68:d5:0e:c3:e3:df:
dd:b1:7d:60:71:0a:e9:e6:2f:b4:5b:b9:fa:08:59:
44:97:16:7e:02:1a:91:25:de:23:88:a6:ba:f8:45:
c2:cb:90:32:7a:79:c3:74:95:3f:00:e7:ed:b8:c0:
d9:1e:e1:27:34:54:3a:5f:f0:8b:42:6a:07:8b:44:
39:5f:70:20:81:07:20:c2:36:5e:37:b0:dc:71:71:
0a:88:d3:0f:ce:0c:5f:a6:49:c7:a2:05:00:9d:88:
bf:f4:20:31:a5:18:82:68:04:a3:d3:53:67:8a:86:
32:95:f7:27:5b:84:94:b9:29:38:7a:d4:33:d4:53:
e3:89:fc:15:f4:d2:89:e3:6f:14:ec:b8:17:8d:d9:
22:c2:82:da:47:b0:f8:4a:51:fe:e2:52:28:f1:63:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:13:14:63:DB:01:5B:6A:92:51:0E:3C:8C:E0:4D:FF:F1:2D:3E:57
X509v3 Authority Key Identifier:
keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fc:92:e6:22:e5:25:6a:fe:db:43:cd:e1:bb:d3:e8:c9:7c:
95:3b:12:2b:9c:02:87:10:98:8c:b6:b6:e3:45:81:9a:2d:cd:
ad:62:ff:2d:ea:56:3e:14:e4:7d:b0:c6:58:4b:90:71:f3:2d:
7f:93:60:bb:77:ef:22:4f:d9:e0:5c:6a:7b:eb:22:1d:4c:0f:
4f:f8:c6:fe:c4:05:3b:ef:9b:16:29:80:1b:2d:69:73:66:95:
71:f1:30:7e:bc:16:fa:71:6e:74:5d:0c:a2:d6:db:9a:9a:0b:
da:d0:83:d2:4b:1d:a1:a4:25:9a:cb:94:0b:29:20:85:12:17:
be:f6:20:16:fc:67:b0:44:f8:31:78:9d:a0:64:13:19:64:ab:
46:fb:7b:e9:c2:38:5f:13:e8:4f:0b:44:65:fb:d7:ee:1b:9a:
67:55:98:78:23:59:0c:6e:89:33:e9:66:f3:ab:1b:f9:e3:db:
46:df:13:0a:91:bb:b3:be:8c:f7:21:fe:4f:a7:f5:de:59:a4:
e1:81:24:d5:ac:e7:e9:75:01:80:a2:21:8f:84:d5:ee:9a:aa:
f5:8e:11:af:dc:2f:a2:91:c0:ed:d5:cf:a4:92:b0:df:e8:64:
1e:aa:e4:6e:c3:7a:e0:12:13:2c:4b:77:8b:08:54:34:7e:23:
71:59:f6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:18:20 2026 by rpki-client