Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: 3OEZPrsv14gevUmaioTs+K7gARCxm19vFFEfvTlENJ8=
Subject key identifier: 64:F5:40:DC:C7:5B:AF:22:22:C4:CC:AF:D5:6B:26:1F:ED:3F:06:11
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 01A1257982E54744FD200C658EE7B137062B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 1416
Signing time: Sat 10 Oct 2026 11:01:22 +0000
Manifest this update: Sat 10 Oct 2026 11:01:22 +0000
Manifest next update: Sun 11 Oct 2026 11:01:22 +0000
Files and hashes: 1: a0kN2gfK01wMuqhoW-MZjPAbstc.roa (hash: mmiujuewrIIcuNRFw3juwDDGpDhJAvUuobcjAggyfUE=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: u9NK3pzlc9K7KHUea4wB6n+OY9uPmaNd85cqPGt9nOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:79:82:e5:47:44:fd:20:0c:65:8e:e7:b1:37:06:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Oct 10 11:01:22 2026 GMT
Not After : Oct 11 11:01:22 2026 GMT
Subject: CN=64f540dcc75baf2222c4ccafd56b261fed3f0611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:bf:dd:64:e2:2f:10:54:bb:3a:c5:43:5a:
b4:5d:2c:7e:1d:38:f1:bd:da:9c:1b:24:0a:9e:4e:
48:23:28:fa:2e:8e:ea:db:8a:0c:03:66:f7:82:d8:
e6:fa:8a:34:dc:3c:dc:89:ab:43:d4:95:2d:e4:88:
ce:ef:50:5a:7d:5d:3f:ed:0a:89:15:c1:0c:11:bd:
32:67:ec:2f:c7:ca:11:c7:9d:d4:e7:f1:28:0a:5b:
f1:46:7f:d0:f3:83:5d:81:91:ea:98:48:f1:9a:78:
38:e8:ea:ab:27:3d:c8:3d:fe:9a:23:ea:53:db:16:
ef:91:1f:29:63:fc:d0:bf:d7:41:a4:94:3c:32:78:
60:57:ca:cf:67:ff:eb:c0:75:d0:b4:79:ad:1e:d6:
1d:78:c8:4c:20:65:5b:a5:88:a2:b7:ca:b4:e4:ed:
94:cd:e6:9f:a5:84:6b:6d:a0:b2:42:31:a9:ac:3f:
64:32:f9:d1:ee:e0:d2:3c:bf:69:7c:57:7e:92:07:
0e:3a:1d:19:3b:e5:59:de:3c:51:43:11:39:0f:aa:
c4:77:e6:78:ed:d2:66:db:4b:f3:9d:56:6d:07:5e:
ca:2a:bc:ce:2a:f6:53:c7:16:d7:58:a4:02:a6:8a:
c1:f2:24:cb:25:0e:d8:64:15:96:0b:e3:e8:5f:4b:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F5:40:DC:C7:5B:AF:22:22:C4:CC:AF:D5:6B:26:1F:ED:3F:06:11
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:19:cc:4d:e5:33:fe:3e:dc:d8:be:cd:3f:e6:6a:22:46:97:
78:4e:c6:b9:4e:89:69:29:7c:90:07:cc:78:f2:49:92:14:52:
d9:58:9b:75:27:27:c0:d5:5b:86:70:1b:05:d8:98:71:54:4d:
e8:02:64:4c:ad:a1:da:40:e9:31:e0:69:af:4b:56:d1:df:26:
28:f0:86:04:e0:20:49:fb:bc:b0:4a:22:ee:09:75:6a:2b:ab:
bb:a4:c3:b9:9e:6b:30:f9:cf:ca:67:e0:68:c3:5f:34:2e:9d:
2c:9b:e0:b7:5d:e5:c3:39:4c:16:6d:39:30:ae:b0:2b:2a:f7:
85:e8:f3:18:7e:fc:d8:37:f0:59:61:49:b3:01:02:18:8e:bd:
6d:21:7a:c8:28:4f:6e:76:dc:90:d3:03:2e:55:9b:b2:af:ba:
7b:27:81:23:a1:5e:3c:86:cd:12:fd:31:60:d3:43:4b:46:58:
a5:d8:36:04:16:3f:c0:2a:35:41:0f:6e:2a:94:d1:8a:4e:fc:
a7:7d:e3:93:3b:c1:f4:cc:f2:53:dd:7d:30:74:f4:35:15:4c:
68:11:40:76:26:57:48:8e:84:b3:86:ca:bc:68:63:6d:02:5d:
c8:ca:67:f3:4e:94:90:d3:e3:d1:77:c1:6e:09:75:1c:4c:f8:
97:88:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:32:16 2026 by rpki-client