Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File: Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier: Hw9ebGuT8enMB6hI+OG9iJPCPcHtXQTfV9PvQoALLGo=
Subject key identifier: 5A:73:C4:0B:15:A6:72:4C:8A:B6:04:E8:71:AA:81:70:84:92:C0:0C
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 01A17A71469B530CCD986E42CA15C6356A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number: 1350
Signing time: Mon 26 Oct 2026 23:00:06 +0000
Manifest this update: Mon 26 Oct 2026 23:00:06 +0000
Manifest next update: Tue 27 Oct 2026 23:00:06 +0000
Files and hashes: 1: 19m5MDbUFOo2nenyTAHaAJWRktg.roa (hash: ifiLYIYFLAmYeXVeugFRbq75qlpi3IBXffi18Sxi0dE=)
2: 6LuRkajZnDjYtPY9Kwttrn-g_Ak.roa (hash: XwlANNzT80zBjsIaS8y+0k0yqbRtmsi+Y0xqqRDsVVU=)
3: EcWTWsW7l7pSDkzIfszK-ABUpsY.roa (hash: psJpT6d58TfpqU9qeBsatlA8wNIaL/3bQDwy3Orowzs=)
4: O-pdjSm1G27EcLZc1YIur1izX_U.roa (hash: jKMq7pI2u6HCOkXwOZSmin7/bWw1O5apvOvL1pGFigA=)
5: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: 3bI5jumCH3KJPAy8OFlDDnv7A6hd3rASFjpoUhZ04rk=)
6: doyYOGkkycNxN7CI_sa7Q6rCkOM.roa (hash: woc85YZFaTyz+Qogag/CUtpAQY4A09lS0R0JgcvwyKk=)
7: lN52A8wmVdK-KeTgv5TB-V3C8VU.roa (hash: r7UmoxX/ZzMNRX796XCzomjg3WCGmP7MqKUteRQKBkc=)
8: uB-js8eLrApF33iZUBGxAz2OeB8.roa (hash: v2CZS4LBPcR03VFDtDYyNJUFkRjGLvokXi+BKkeMV0s=)
9: z3KWbXv42c-ZATgtnic3uJ_XhGc.roa (hash: F/Z940zFmLWbSHSUiP5QUTYBI1TQajSnkxOAhEnwt4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:46:9b:53:0c:cd:98:6e:42:ca:15:c6:35:6a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Oct 26 23:00:06 2026 GMT
Not After : Oct 27 23:00:06 2026 GMT
Subject: CN=5a73c40b15a6724c8ab604e871aa81708492c00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:47:c3:8f:e5:29:0a:0d:12:9c:d3:a3:b6:0f:
2c:88:5b:21:12:ce:b4:75:a2:43:9a:b4:a6:b7:53:
89:33:cb:40:8d:ea:5b:f1:7d:75:6e:bb:9c:39:d9:
99:90:04:83:1b:6a:99:eb:48:f9:73:85:32:51:6d:
6e:fc:22:ff:3e:3c:13:72:94:7b:35:c1:ba:1c:0c:
98:81:a1:a6:6f:da:fd:07:b9:75:45:d5:45:73:b7:
60:9c:73:ab:9e:e2:a0:cd:42:5a:9c:85:ec:67:5f:
0d:09:49:0d:43:53:1d:7b:53:d5:51:49:2e:9e:04:
30:ac:a7:d2:56:21:1e:a3:1c:06:2a:c3:e4:53:8e:
15:50:ca:80:be:46:86:5c:36:4f:cb:ee:09:66:17:
76:ae:14:e2:76:1c:c4:5a:71:92:ea:95:ae:c8:0d:
6b:97:ec:23:6a:6b:e6:a4:cb:6f:96:54:c6:c9:2c:
86:e0:a5:ad:9e:b2:31:e3:94:4b:0d:a0:96:e4:94:
97:3f:1c:6a:3e:14:03:06:20:13:12:25:40:b9:1a:
89:52:0e:c5:03:bd:9e:15:a7:8a:40:90:af:ca:e4:
24:37:5b:aa:76:ef:72:f4:37:8c:2a:85:de:9e:c1:
99:d7:70:83:bc:6a:22:08:11:a1:15:bb:ac:56:07:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:73:C4:0B:15:A6:72:4C:8A:B6:04:E8:71:AA:81:70:84:92:C0:0C
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:74:8f:73:df:ba:d8:b7:ec:cc:ab:da:9d:c0:04:80:7c:73:
b9:4c:20:86:4f:38:4b:e2:e8:4f:71:76:b0:64:da:f5:6a:36:
db:05:a8:c7:fe:e2:9e:22:6d:48:13:b0:66:9e:23:6c:34:4d:
55:2f:a5:21:21:bf:1d:f9:8f:ce:c3:8b:e0:db:38:e6:7f:37:
70:8c:ec:4d:1d:e0:3e:0b:a4:7e:f3:7f:21:96:84:2d:e0:e3:
78:29:3e:1a:d4:da:36:05:06:81:50:2d:5c:0c:21:2e:19:23:
1c:1a:42:a3:84:44:c6:24:c2:da:bf:f4:fc:dc:03:34:2a:66:
d2:31:db:94:3f:89:4e:5b:5b:a1:09:e3:63:52:65:8e:25:40:
73:d8:c0:2c:fa:c9:13:52:b5:85:2d:f3:e4:bf:0e:40:ef:15:
1d:73:87:56:8e:67:5f:3a:f8:a0:1f:0e:02:fb:1d:08:18:ce:
e9:ff:f0:7d:b6:e1:4e:ac:2e:ff:66:3d:dc:9f:ec:66:f3:94:
ec:cb:70:67:64:be:57:a0:3c:de:6a:38:3f:ab:21:3d:ec:c5:
77:93:6e:45:33:b6:0f:6b:2b:60:d8:37:b3:b0:7c:92:d6:3b:
fa:4c:f1:47:4f:06:d1:0c:22:be:f5:1e:dc:76:66:6b:53:9b:
98:df:ef:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:51:59 2026 by rpki-client