Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File: ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier: 0N2d3xR41JsiQ7Q8CJnJu4fKYiXqZaOdmcwD6BhmQwU=
Subject key identifier: D7:AC:2B:CD:B0:0E:6B:04:96:EE:8E:64:43:15:61:80:42:68:8B:E2
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer: /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial: 01A17BF2D974A5826ED89B9B00C2AE0E707A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number: 1ABF
Signing time: Tue 27 Oct 2026 06:01:15 +0000
Manifest this update: Tue 27 Oct 2026 06:01:15 +0000
Manifest next update: Wed 28 Oct 2026 06:01:15 +0000
Files and hashes: 1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: TfdE3rsANRbgU00UjHZmxSFmzi7ESqtwJxhk3blTmts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:d9:74:a5:82:6e:d8:9b:9b:00:c2:ae:0e:70:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Validity
Not Before: Oct 27 06:01:15 2026 GMT
Not After : Oct 28 06:01:15 2026 GMT
Subject: CN=d7ac2bcdb00e6b0496ee8e644315618042688be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b5:8f:90:bf:ff:7e:48:5a:e6:52:39:ab:d1:
1a:57:7c:e2:ec:5a:4a:d4:45:70:ac:60:2a:f2:06:
6b:89:2c:d0:f3:29:2b:42:08:de:76:dc:25:7a:1d:
29:63:9d:41:14:ab:7b:d5:0d:32:5c:e7:91:ad:2f:
05:97:65:22:3d:3d:58:16:10:a6:33:d9:91:1b:63:
f3:4d:3f:d7:8f:2e:ed:18:0f:3e:a8:41:b5:8a:d5:
0f:3a:29:1f:7e:65:fd:e3:e8:d2:55:3b:95:b3:b0:
12:b4:23:01:33:35:cb:46:06:b2:5d:f3:c0:ed:53:
ec:80:ed:80:10:2e:18:c8:37:c6:6f:80:d5:06:2e:
7a:5b:ff:05:50:c2:66:12:85:77:fd:a6:1b:28:ee:
d7:28:7c:dc:92:17:5c:f1:3c:cb:40:bd:d7:84:60:
8b:76:c4:f2:c2:29:56:ec:d2:6e:d2:49:40:69:68:
13:60:75:3d:a4:83:52:0a:1d:94:b0:fc:ed:65:93:
7a:88:6c:fd:ff:0d:01:a4:46:fb:56:8e:74:b0:f6:
9b:09:cd:95:92:7c:33:ca:3a:ba:dd:5e:a8:db:b5:
c1:22:53:4d:fa:91:f2:89:18:89:49:87:ca:8a:84:
1d:a7:a5:70:63:ab:e6:d3:87:4e:83:2a:10:39:ed:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AC:2B:CD:B0:0E:6B:04:96:EE:8E:64:43:15:61:80:42:68:8B:E2
X509v3 Authority Key Identifier:
keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:20:93:3c:f7:37:97:0b:0c:7f:71:11:58:49:66:9f:94:0f:
45:cf:b5:37:d6:15:d7:a7:88:05:11:f9:c6:e3:13:1e:87:67:
e4:4b:53:42:0f:1d:36:1a:7f:1b:b0:a5:4e:fb:03:81:8f:57:
24:2f:1d:d6:93:9e:7e:79:b9:96:eb:38:35:17:ff:bb:c8:b8:
60:77:0e:2a:21:96:ec:33:67:4d:01:8c:a4:3b:f4:ad:9b:cd:
58:06:6c:54:00:8a:81:86:93:86:18:e6:21:85:ac:52:fb:41:
fe:55:a2:1a:0e:55:8b:46:b1:84:a7:e0:82:e9:38:ac:c2:27:
91:ff:27:6f:67:5d:ce:ab:b5:54:43:cf:10:b4:5e:84:dd:76:
f7:8e:1d:a1:2b:03:2a:c9:f3:59:6e:92:73:50:99:91:53:ca:
06:8c:28:6c:7a:47:66:81:f5:f5:f1:2b:f5:aa:74:9c:2c:4b:
4e:00:69:8b:b0:95:88:1b:78:b5:5d:79:88:31:42:ec:9a:a0:
01:b3:d4:dd:bb:70:7f:87:8d:9b:0a:9d:40:6a:5b:3c:42:77:
9d:ef:3e:48:51:e2:fb:e4:4f:d8:17:10:8e:3a:4e:ed:df:1f:
a2:84:81:b6:6e:10:c3:a7:05:a5:d7:bd:c0:ec:74:0c:21:b4:
a4:2b:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:39:09 2026 by rpki-client