Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json)
Hash identifier: HsFpc3w+ZHVaiHJz7m51bl27zdz9md2Pfsv3cGSRmO4=
Subject key identifier: 81:85:9B:6B:91:CF:66:3D:12:90:BD:48:51:4B:7C:68:5F:F8:55:8A
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial: 01A1697E0E836106FA22B2DAB8E459EEE0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
Manifest number: 126A
Signing time: Fri 23 Oct 2026 16:00:31 +0000
Manifest this update: Fri 23 Oct 2026 16:00:31 +0000
Manifest next update: Sat 24 Oct 2026 16:00:31 +0000
Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: rF2RB7npkL/BHcon+DHnKziKSCpB1gk88wfPgCYYz2E=)
2: zY7N7I-0j2wyToIYtsy8gjVgKFc.roa (hash: eG6Aql8AjY8k7IpGUPh2hREkMKRNs6mKuXLIFh3G5Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:7e:0e:83:61:06:fa:22:b2:da:b8:e4:59:ee:e0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Validity
Not Before: Oct 23 16:00:31 2026 GMT
Not After : Oct 24 16:00:31 2026 GMT
Subject: CN=81859b6b91cf663d1290bd48514b7c685ff8558a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:70:c7:4c:b2:21:bb:ed:d9:72:46:b4:91:
a9:a9:36:b5:ff:f2:38:0d:2e:b3:92:bf:78:2d:62:
13:9a:9f:75:3f:c3:a9:d4:44:c5:73:86:4a:e5:a6:
2e:d6:16:e6:b2:47:dc:49:f8:9f:d9:26:85:24:76:
4e:2a:7a:ec:ba:27:6f:c7:e7:a2:af:6a:25:72:d9:
bb:9e:3c:80:ca:da:ea:b1:cb:9c:13:a4:22:de:6c:
9a:34:4c:d3:bc:b6:9b:0f:09:76:bf:e2:91:22:0a:
09:3b:9e:98:69:51:75:11:44:76:21:6b:8d:8c:a6:
c9:fd:4a:9a:7f:21:f8:9f:73:f0:75:88:43:91:d7:
1c:22:31:48:df:65:37:2c:15:31:e9:9e:f5:10:ef:
e0:65:48:ce:5a:ee:e1:f7:48:18:52:95:bf:74:be:
d4:c1:e9:69:d3:06:b1:ea:8f:71:95:c5:f2:67:23:
ec:bf:ea:fe:4b:7a:dc:49:cf:9c:6f:a7:1c:2a:88:
00:d8:f7:c1:74:71:0c:87:27:13:b0:fe:f5:98:82:
a9:35:03:6a:c4:ee:7f:a9:fb:6d:92:6c:3f:5b:dc:
66:a3:b0:90:48:27:94:94:a4:5b:55:df:0f:35:8c:
bd:00:f1:d0:05:a3:bf:5a:47:42:57:b9:28:c7:9a:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:85:9B:6B:91:CF:66:3D:12:90:BD:48:51:4B:7C:68:5F:F8:55:8A
X509v3 Authority Key Identifier:
keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4e:dd:49:78:b4:87:85:c6:57:da:f4:58:78:86:69:1d:a9:
f4:30:25:3b:4b:e8:e0:4d:c6:bc:0b:55:a5:32:18:a7:c5:18:
73:6c:82:f4:e9:d5:09:ff:4c:69:92:bc:4e:ec:26:30:d1:cd:
96:77:b3:63:74:d8:54:f7:8a:28:b0:b2:06:98:76:3e:95:58:
e8:90:0f:98:33:8d:3b:a5:cf:b9:c9:8c:53:d5:15:61:95:eb:
59:36:cf:0a:d7:46:df:ec:51:6c:6c:cd:e8:a1:0f:4d:de:92:
a6:8f:c6:1f:40:a4:e2:c6:bd:f1:50:65:f6:7b:64:78:6a:e3:
79:8e:27:3d:8c:f5:a8:47:1d:43:39:32:69:58:5f:1b:2a:13:
4c:7b:fb:22:96:a7:4b:be:39:a7:32:be:14:51:8d:da:67:e4:
e4:f0:0c:08:4b:cb:8d:7c:6c:88:ff:93:ab:d9:c4:cb:67:75:
2e:c7:e9:8e:57:f6:d4:af:9d:7d:29:ab:55:6e:87:98:e2:a7:
cf:d0:c0:ac:68:33:27:4b:ce:a1:52:91:54:6f:4d:8b:57:66:
4d:56:d8:89:ba:57:2e:8f:30:55:34:f6:a8:c9:ce:74:47:14:
eb:50:c6:6b:5d:f0:73:a6:64:a3:ee:86:5a:67:b7:45:56:89:
ab:d1:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:49:19 2026 by rpki-client