Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier: YSl6O3tNsOgaKjwhQTmw/S/ojjsFmKYfVm3BE3COWCI=
Subject key identifier: F8:81:98:6C:BA:89:C5:6B:84:F0:CA:09:8F:AA:B6:EC:26:CB:F5:36
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 01A18186DF953583CAF558B6A579177B74A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number: 10DC
Signing time: Wed 28 Oct 2026 08:01:02 +0000
Manifest this update: Wed 28 Oct 2026 08:01:02 +0000
Manifest next update: Thu 29 Oct 2026 08:01:02 +0000
Files and hashes: 1: Nl9enAQ5fxiyA3bgN-Zg8I6GiQM.roa (hash: A7OWUX4yXC7G/EYKNd9MidD+EY701iJQatSHjQ+zADU=)
2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: CA8WAas131a4xVnzGzjsiorMyM4r5RryDYaz9Vwxgmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:86:df:95:35:83:ca:f5:58:b6:a5:79:17:7b:74:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Oct 28 08:01:02 2026 GMT
Not After : Oct 29 08:01:02 2026 GMT
Subject: CN=f881986cba89c56b84f0ca098faab6ec26cbf536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:91:fe:97:6f:09:d7:9d:1d:43:b2:3c:42:
d5:79:5d:c2:07:bf:cd:b8:90:9c:1f:ce:3d:78:23:
75:20:d5:9d:50:a7:83:55:1c:83:47:bc:be:7a:43:
d7:83:ac:80:dc:90:1f:7f:ef:b7:4f:8e:6c:d6:2d:
fb:c1:57:3e:db:6b:b9:95:bd:37:16:2b:c1:66:a2:
2b:5c:ad:0f:49:1d:ab:22:8d:ec:52:6e:52:c9:b1:
8e:62:18:0f:f8:20:8e:cf:91:95:40:ba:fa:25:89:
9e:79:13:50:bf:00:72:11:e6:49:0f:8d:45:35:e8:
eb:49:3f:05:60:84:b3:f8:44:34:b2:92:45:90:d6:
d7:2a:3b:1e:48:de:e2:f4:17:f7:9a:ce:1a:fd:f5:
f8:41:a2:84:62:e7:b3:f5:12:a6:50:76:2a:42:6a:
1b:8e:21:af:1f:25:cc:cd:79:d1:91:27:78:f7:36:
18:7c:81:e5:a9:b3:67:ea:51:fb:da:55:fc:5b:aa:
3a:24:27:19:c6:76:37:a9:67:37:18:93:7e:f0:41:
a8:1e:05:5c:b9:e9:7e:3e:90:67:03:50:8c:db:27:
32:6a:fd:82:2e:45:44:42:34:c8:e3:0b:fa:7c:19:
a4:a1:30:f9:5f:4e:be:46:01:6e:ee:61:99:ab:de:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:81:98:6C:BA:89:C5:6B:84:F0:CA:09:8F:AA:B6:EC:26:CB:F5:36
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a7:17:e8:57:41:68:0b:ab:b9:a1:89:2c:92:02:0d:8f:78:
1c:f2:e3:87:a4:3e:88:b7:0d:b0:d5:68:f9:e1:26:db:e3:ae:
da:a4:b3:15:ac:a9:0a:c7:c5:8f:80:07:39:19:50:d0:43:52:
97:57:0b:8c:c2:36:37:7c:71:1c:d3:03:ac:f6:08:79:1a:71:
33:2f:17:fb:72:b8:88:33:7b:42:30:87:57:b2:00:8f:39:88:
62:02:1a:f1:e5:83:35:af:90:cf:75:7b:5c:7d:bf:db:94:44:
e9:f4:fa:1e:bd:60:7e:c2:7f:76:ed:81:4b:f8:ea:c2:57:c1:
30:6d:98:ab:1b:12:0f:e4:f1:ca:ff:62:0c:c8:71:c9:d3:1a:
5f:dd:02:5a:0f:fc:74:0d:5f:e7:a3:af:4e:44:ae:0a:81:ca:
52:6b:63:a1:92:5f:9b:ab:af:e8:e3:9b:9f:60:4f:9e:8c:60:
c9:80:5d:15:12:db:df:e8:af:d6:72:8f:b4:24:71:e9:ba:3f:
0b:5b:1d:b3:85:4e:5e:73:e3:06:39:66:22:ad:32:ae:2b:5a:
43:e6:0e:ad:f4:f9:a3:ae:69:04:b0:52:c1:e4:01:1b:53:0c:
03:23:6b:fd:ca:2d:7b:35:8f:71:37:af:6f:b6:43:5e:88:84:
11:93:80:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:16:32 2026 by rpki-client