Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
File: ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft (raw, json)
Hash identifier: PVWyRF14WG2txmDTuVuzB9gZ53STGlIUyrKnG9FnhZc=
Subject key identifier: 50:44:2E:C2:58:EA:03:DD:68:6E:23:0C:66:3F:09:F8:7F:6F:90:31
Authority key identifier: 66:D1:AF:98:A7:F0:29:C3:F6:97:2E:E3:74:F6:9D:20:5C:6F:29:D2
Certificate issuer: /CN=66d1af98a7f029c3f6972ee374f69d205c6f29d2
Certificate serial: 01A15EFA4C1AA4804074D353063BBF57DA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
Manifest number: 012F
Signing time: Wed 21 Oct 2026 15:00:24 +0000
Manifest this update: Wed 21 Oct 2026 15:00:24 +0000
Manifest next update: Thu 22 Oct 2026 15:00:24 +0000
Files and hashes: 1: 5T1uta_W6Rt3zeWix3Ttlz3fPrQ.roa (hash: QUgenxmjnt6hLRphe+QYqG3ci12uKtkz5r9TvSluXps=)
2: ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl (hash: aWZPZtAwmqnSweb0IoWx01B27DRRIOxSLkldT3JzZlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:fa:4c:1a:a4:80:40:74:d3:53:06:3b:bf:57:da:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1af98a7f029c3f6972ee374f69d205c6f29d2
Validity
Not Before: Oct 21 15:00:24 2026 GMT
Not After : Oct 22 15:00:24 2026 GMT
Subject: CN=50442ec258ea03dd686e230c663f09f87f6f9031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:d7:1a:53:4c:d4:6e:6f:44:b6:91:c7:79:
c0:47:ac:98:0e:ec:85:ad:73:a1:5c:36:9a:88:cc:
10:24:80:a9:81:bb:38:9a:aa:6f:eb:71:f8:b6:80:
f9:5c:02:f9:90:00:af:78:98:09:60:7a:ee:53:83:
1c:3d:c3:fd:e4:9a:76:c0:41:88:ea:a4:0c:2e:81:
0a:c1:84:fd:37:76:e3:97:54:f6:17:97:bc:93:35:
04:b8:89:41:bd:86:a5:15:9c:66:ca:6e:88:bf:1b:
aa:90:ba:20:9b:84:26:63:e1:66:72:f3:93:fc:92:
77:93:b1:51:8b:06:0b:3b:bc:ca:b5:5b:c6:a7:99:
35:38:03:a7:d5:12:a6:38:52:9d:cb:3e:cb:a6:3d:
cd:13:dd:32:2a:6a:5e:7f:dd:b8:fe:f9:97:82:2f:
26:b0:62:a9:c3:a8:e6:7b:bc:4d:3c:ce:a0:a7:70:
da:ec:4d:4a:a9:fd:87:4c:3c:e2:3b:ae:7a:d7:65:
d1:2a:72:55:83:fc:7c:f7:a0:1f:14:99:98:d4:66:
19:b5:8a:c0:c4:a9:ec:58:36:fe:cf:ad:c5:3a:f7:
31:25:b5:2e:b1:7f:4e:09:03:d7:e1:95:6b:38:79:
c0:b4:02:a9:3e:d2:aa:98:1e:24:1a:f9:ca:06:2b:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:44:2E:C2:58:EA:03:DD:68:6E:23:0C:66:3F:09:F8:7F:6F:90:31
X509v3 Authority Key Identifier:
keyid:66:D1:AF:98:A7:F0:29:C3:F6:97:2E:E3:74:F6:9D:20:5C:6F:29:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:54:af:70:1b:36:1e:3c:e6:48:c2:f1:62:2c:da:42:fa:46:
62:9e:95:e4:dc:b4:45:53:2d:02:9d:fd:e9:f9:c3:1d:da:8f:
05:48:64:de:26:fa:07:33:57:b0:3d:90:9d:9c:0f:71:fb:d2:
a4:a4:7b:09:5a:53:b9:ad:cc:9a:72:5a:05:94:35:f3:6b:7e:
c3:e6:25:f7:8b:df:9f:da:3d:35:e2:32:f3:c9:d3:a5:3f:0d:
90:e9:ce:35:d7:d4:3e:e8:ff:0a:71:da:a8:9e:bd:bf:d6:c5:
2a:7f:ba:d5:0e:b9:39:71:50:5f:36:f6:a1:69:2a:55:d3:b9:
cb:65:46:80:e6:0f:51:45:09:9e:63:d4:cd:37:d7:b6:c7:19:
1f:12:3f:b0:4b:3d:ec:25:5b:5a:8d:cb:3e:27:42:25:3f:ac:
41:8e:53:63:a3:13:62:44:bd:16:1a:69:5a:3d:66:dd:ad:06:
a4:f8:2e:8f:7f:ff:25:b6:66:20:4d:e8:03:6a:fe:d8:62:0d:
16:55:4e:c1:57:46:39:e9:ee:ca:03:55:18:3e:ee:c3:4b:ec:
7d:04:b4:af:fa:b8:80:4e:3b:a6:b5:a4:52:09:d2:c1:55:04:
37:3a:da:6f:8d:4f:20:23:9d:87:cf:88:f7:d9:a5:cf:5c:b3:
f5:21:e6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:13:36 2026 by rpki-client