Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
File: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft (raw, json)
Hash identifier: Ex8b5tukmz0LOKZA5HJKzBMaIP9nIZ/mKeqHHGD2Lbs=
Subject key identifier: 91:E3:5B:6F:D6:B1:FA:7E:B2:6F:B1:10:26:C9:39:20:AE:8A:5B:C5
Authority key identifier: 65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
Certificate issuer: /CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Certificate serial: 01A1814FB2ED0BD5D21C9C603D99DAEA7077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
Manifest number: 02F0
Signing time: Wed 28 Oct 2026 07:00:46 +0000
Manifest this update: Wed 28 Oct 2026 07:00:46 +0000
Manifest next update: Thu 29 Oct 2026 07:00:46 +0000
Files and hashes: 1: EdxZYg5OqmQWPMmegu-B52k_ZIY.roa (hash: fcd0uJPxM+GkSq+RnRCi5gTClxrJIshw64cEooNSAkU=)
2: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl (hash: Z/gK102EyQG1uLPtB3b17GdzWeY/JwFWW8Pv5dsmm9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:4f:b2:ed:0b:d5:d2:1c:9c:60:3d:99:da:ea:70:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Validity
Not Before: Oct 28 07:00:46 2026 GMT
Not After : Oct 29 07:00:46 2026 GMT
Subject: CN=91e35b6fd6b1fa7eb26fb11026c93920ae8a5bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:59:5f:09:0e:04:ce:c3:e3:b2:df:f1:76:53:
d0:2c:07:e3:e0:e8:c8:9a:8f:1b:d7:ec:08:dd:c6:
a9:06:6c:ac:a8:9b:b3:f2:5b:16:5f:1c:8d:54:41:
7c:25:b6:ed:24:a6:11:a2:71:f5:dd:07:a0:bb:2a:
9e:97:ac:57:5a:df:36:1f:e1:e4:30:4a:f4:43:8f:
aa:8b:a0:61:ac:84:67:89:34:56:61:70:61:6f:df:
fa:96:e1:c3:4d:96:ea:c6:71:d0:4d:f6:83:a2:48:
f7:b3:b7:66:ac:c2:7c:20:d7:da:69:f3:16:41:43:
4b:cb:f7:05:bf:aa:fc:d8:ba:d8:6c:e6:46:ae:1b:
b4:33:15:47:74:a3:28:2e:1d:15:7a:bb:24:c6:d0:
aa:25:d5:52:94:df:e3:40:3b:c8:22:42:84:d3:a6:
e5:a4:da:1b:d5:9f:77:4e:6f:89:b7:c1:5f:9c:6e:
07:e0:d4:fb:b4:7c:1e:5a:53:4a:6b:64:4d:25:0f:
0f:ec:aa:f0:74:f8:5b:95:41:9f:a3:cf:c1:f2:03:
04:07:46:4e:f5:ed:35:63:8c:60:60:85:17:46:4d:
ac:c9:8b:de:d9:f9:ea:79:f3:45:0e:c1:78:c8:b0:
f9:c7:2a:62:f0:20:e6:cf:41:df:35:2c:69:a6:71:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E3:5B:6F:D6:B1:FA:7E:B2:6F:B1:10:26:C9:39:20:AE:8A:5B:C5
X509v3 Authority Key Identifier:
keyid:65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:76:05:48:27:e3:bf:dd:8d:e5:33:27:69:c5:e4:ac:0c:87:
d6:c4:a3:c6:c7:f8:d2:20:a9:04:c0:8f:e8:78:f4:0f:18:a4:
9a:5e:5a:3a:4f:70:e6:2f:7c:45:a9:0d:58:49:ad:8a:b0:70:
47:c9:fe:bd:c5:28:ad:1f:fc:68:ea:ad:e0:fb:f4:39:c8:95:
aa:b0:77:ca:38:c3:ef:d5:16:68:f3:21:9b:e8:0c:c3:c9:19:
59:bc:0e:1c:03:6b:31:32:aa:cd:47:fa:44:e8:a7:04:c9:94:
2c:24:4e:28:c2:f5:59:22:d3:a8:6c:3e:a4:0e:58:84:e1:06:
50:84:3d:f8:a7:00:4b:ab:c0:df:d8:e5:8a:b8:9b:65:de:87:
6a:28:58:40:9b:be:4f:9f:d4:a9:5e:ab:34:51:7b:ba:42:d1:
ec:65:e7:ec:33:65:e8:38:dc:73:89:79:1e:3d:e9:15:a2:b9:
95:ac:92:66:3a:8d:db:05:d9:76:92:34:4d:93:0c:0c:76:72:
6e:e4:91:c1:96:e7:67:df:f4:76:46:d5:0a:c8:19:b8:0a:6a:
42:a4:5d:a4:a2:fb:7f:ad:37:d3:53:20:98:53:16:42:40:0b:
ca:ba:74:53:b4:3f:01:4e:7b:69:53:30:62:62:58:57:45:3e:
04:66:2a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:13:22 2026 by rpki-client