Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: cotxc5992z4sax9V337+hwg3vMGdNiGXmZnFE3b62hc=
Subject key identifier: 6C:9D:5B:36:C3:18:06:62:27:8F:CF:C0:CE:4A:4A:F7:5F:33:BF:99
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 01A1618E3A261F16DB2CF185A39C82006214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 1AC2
Signing time: Thu 22 Oct 2026 03:01:13 +0000
Manifest this update: Thu 22 Oct 2026 03:01:13 +0000
Manifest next update: Fri 23 Oct 2026 03:01:13 +0000
Files and hashes: 1: 0GL7DdIdoFqMUjvFhCRfHpKPMbA.roa (hash: pZia0ALckAxbVwXjSvk9ZitHob5JnbAYRMcyTh/GAHw=)
2: 4CJ3InuHwPxMIYug15LfFjf4TFE.roa (hash: AqjwYTvPMHv8KhwXl422zB5jGiNZqfOiCwgbFsHZ07g=)
3: H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa (hash: z0WYajZ68GEteUnmX5OmcBfJ0ynCGdGVIvLSKmVhonU=)
4: VxmBydPNDVkjAwNW0HlCl0mcW2A.roa (hash: 2uX2f6w9d7FkhAQJ79lByeDaz04Av+toag4OFSNYkF8=)
5: X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa (hash: rE1Gy+5Y3N/6nRhiVvsTgzmZ/j4C83X5X1jx7h+hjs0=)
6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: fUZTyBFp2yUMzk3KpGaaUaaLS9ce96kGeZaJkGtM5/s=)
7: srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa (hash: WOqlcZKIxr5sVUqyyKJNHMiLfFbk3vNnFX+UsNkt18I=)
8: zPyNAFdQmlJqV2qKRKA-eSuuTJY.roa (hash: WQ7fB4l+y3xXDPGETnFXWLdLLeTLH4yREUZKhvFa6Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:8e:3a:26:1f:16:db:2c:f1:85:a3:9c:82:00:62:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Oct 22 03:01:13 2026 GMT
Not After : Oct 23 03:01:13 2026 GMT
Subject: CN=6c9d5b36c3180662278fcfc0ce4a4af75f33bf99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:15:5f:b3:fd:72:35:d1:db:6a:59:1a:03:
07:cc:5c:cd:fa:0e:78:de:86:3a:34:f5:e4:a3:63:
1e:8d:98:8b:e1:e8:67:b6:99:e6:ba:19:fc:f9:02:
a3:32:e7:d5:a1:e7:09:f6:60:a2:58:36:4e:d1:87:
d3:dd:3e:a9:e7:d8:2a:b2:fc:2d:ed:0e:18:a4:a9:
fe:1c:84:92:02:5f:bb:d0:0a:6e:91:c0:cc:51:99:
f2:38:8a:57:0d:21:d0:7b:d9:31:ec:08:b5:9d:17:
75:cf:26:f7:0b:e0:4d:f9:3f:83:64:c1:2f:04:9f:
34:cf:44:21:61:6b:3e:f4:33:75:db:f1:de:5a:49:
5f:9e:50:da:92:25:3d:67:f7:3e:34:93:c9:33:e4:
e8:6f:e7:e8:91:30:a7:64:11:4e:8a:1d:54:37:07:
2e:cf:ba:76:cc:1f:b4:f8:38:3a:85:e2:79:69:02:
e1:aa:07:43:52:e4:29:c7:c4:a7:8d:09:6c:b4:6a:
15:0b:57:d8:49:e4:72:0e:d4:fb:6c:8d:f5:6c:9c:
36:07:9e:ec:69:eb:41:09:89:4c:1b:54:23:8b:40:
b1:45:c8:61:71:5b:8d:c6:22:04:c2:e0:69:3d:f2:
bc:7f:06:6e:81:2a:3c:a3:35:42:44:ed:c9:02:90:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9D:5B:36:C3:18:06:62:27:8F:CF:C0:CE:4A:4A:F7:5F:33:BF:99
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e8:4a:fd:0b:17:23:3c:44:c6:3f:dc:77:3f:90:34:58:ed:
df:ba:4e:ed:ee:25:2b:e8:45:62:19:7c:d0:1c:a0:c6:a6:8b:
4c:87:ea:e6:23:c8:46:81:62:a4:3f:3b:c5:26:fb:e3:e2:c3:
45:98:db:90:ee:0c:22:c5:62:7b:26:6e:53:6e:3e:77:61:ed:
7f:d4:a0:9d:54:64:d4:b7:1a:c1:b2:50:0f:82:1d:12:2a:e0:
eb:6c:2c:ee:95:92:24:af:e2:11:10:6b:22:04:24:cf:a8:20:
ba:bf:fc:37:5b:2b:f4:78:21:a2:53:8d:64:bc:04:6f:02:cd:
92:4a:92:10:ed:4b:78:a2:58:60:a4:09:af:d7:95:8b:59:8b:
f7:cc:55:c0:ba:e8:7b:8d:e8:19:31:99:3a:03:e2:9f:3d:1c:
c8:bf:9a:03:69:39:55:5e:b1:3b:d1:09:13:e8:c8:12:79:9b:
54:a0:03:f5:4c:d2:f7:91:ed:76:32:cb:15:6e:ff:b6:85:13:
c5:bf:1a:b3:32:91:97:c2:00:68:81:48:4c:8d:f1:cb:bf:b7:
8a:2a:3f:fd:2e:b2:fb:a4:7c:54:6e:a2:44:ab:6c:ab:bc:51:
43:8e:80:5f:2f:52:58:58:74:38:98:f0:cd:13:74:05:6c:9c:
60:55:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:14:25 2026 by rpki-client