Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
File: ZiEKIeTkbpksh_aziCYLb8xi77c.mft (raw, json)
Hash identifier: ouu3nmm5It3cbtoI6q2OB1v+TDbDu40iX7PDM1r8bPA=
Subject key identifier: B2:60:31:B4:DF:1F:D4:C8:E1:D7:BA:32:45:B3:33:47:F4:83:FF:E3
Authority key identifier: 66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
Certificate issuer: /CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Certificate serial: 01A0EB1BC7E5F83FDC9524A753F5857E14D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:01:01 +0000
Manifest this update: Tue 29 Sep 2026 03:01:01 +0000
Manifest next update: Wed 30 Sep 2026 03:01:01 +0000
Files and hashes: 1: 7hxycR97F6II7DC0Vj37aerZ5oQ.roa (hash: KZSoHAwVwfiAoSXeYAVjqNq4+GGagnZ4C5DwWpPA1wQ=)
2: ZiEKIeTkbpksh_aziCYLb8xi77c.crl (hash: vtWhiaQNerWL80dEwajGodMNZnF58l2ICUNRFiB//Es=)
3: qxo3ePZzVemzYTrsxmbd-aDG0xQ.roa (hash: Ts2ye0fisSWfvRXQ8xO3p21sDayxpAX1ycZX2DBkKX8=)
4: uYVzId5kHuAZNJSNCwDKcMz7_xY.roa (hash: c9bVVqZsVrLii9K2d4d5uBshO4e4alJujzyjDVg0Pr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1b:c7:e5:f8:3f:dc:95:24:a7:53:f5:85:7e:14:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Validity
Not Before: Sep 29 03:01:01 2026 GMT
Not After : Sep 30 03:01:01 2026 GMT
Subject: CN=b26031b4df1fd4c8e1d7ba3245b33347f483ffe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:2b:92:5e:4d:d2:7e:d8:96:74:f8:e2:a1:
a3:b3:bf:6b:d9:b5:b0:8a:3e:05:6b:24:93:cc:17:
fe:ac:fa:b6:f2:8f:60:d8:5e:61:63:89:25:c1:a8:
f2:b0:eb:12:df:04:6e:b5:53:62:e0:87:8b:30:6a:
4b:ce:81:70:27:5b:43:d9:d3:52:cb:b3:c2:8a:57:
c4:42:c1:c6:38:bd:91:9e:4e:69:bb:34:a9:f4:8a:
58:01:58:37:13:65:26:63:42:56:22:ca:f5:eb:be:
5c:f7:c2:ea:c9:8c:ac:46:ba:17:1f:82:76:12:41:
bc:5e:35:a5:3f:b8:ab:89:0d:dd:35:94:be:05:8f:
7c:91:a8:31:97:33:c6:e9:b8:52:5d:23:33:2d:ec:
23:5d:bf:2f:f5:83:e2:0a:de:b8:b7:25:fc:28:a7:
29:ff:64:b9:ec:50:62:57:47:bc:62:7b:20:f4:32:
b9:a7:7b:26:a0:35:58:71:e3:ba:d9:fe:fd:b9:14:
93:79:b9:b5:ee:02:e3:c9:b4:48:ee:bf:02:92:b1:
03:12:37:08:3f:ca:5f:36:86:84:a6:b9:d3:f2:f2:
47:09:1b:71:6b:d1:68:d2:2b:75:48:25:6a:92:1b:
9a:ca:4d:c0:36:03:98:43:32:10:e1:43:a0:da:97:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:60:31:B4:DF:1F:D4:C8:E1:D7:BA:32:45:B3:33:47:F4:83:FF:E3
X509v3 Authority Key Identifier:
keyid:66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c7:55:a4:83:f3:e1:49:86:13:f3:58:4c:92:9e:59:0a:4b:
a2:29:99:d7:61:eb:76:72:1c:50:ba:9f:91:d4:ca:24:81:c1:
f1:e0:ac:98:b3:f7:48:fb:58:f2:37:39:db:d2:33:03:39:67:
59:99:65:6d:9e:96:b8:92:35:53:8d:56:3b:e5:3b:89:ce:ae:
63:e1:bf:d2:c9:71:1c:d3:db:19:d4:e9:21:1e:16:00:fa:6b:
af:95:f0:21:59:aa:d7:f3:3a:26:a2:a7:dd:c6:11:d6:b0:4e:
ce:0b:33:75:93:f8:94:4f:fa:1e:9f:a2:8f:06:d0:c7:f5:06:
92:85:be:b0:17:84:03:db:34:59:cf:f2:4b:7b:9f:24:15:b6:
7f:cb:b5:99:18:c4:ee:e3:be:8b:15:f9:7d:67:06:d5:2b:9a:
82:8d:17:a3:57:9e:27:59:aa:6b:8f:58:66:f3:bc:6c:cf:5d:
00:df:31:a3:4e:07:d0:a4:b0:af:c4:67:51:47:d1:fd:2b:c3:
0f:91:f8:55:c1:88:d2:99:d5:6a:78:9c:f3:83:90:90:db:ff:
b7:61:13:f3:d4:f3:5c:fe:5b:c3:b1:05:da:73:1c:64:23:e4:
c1:c3:e5:3d:89:8d:5d:c4:a3:77:05:73:3a:71:1a:cd:24:bc:
f7:30:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:16:33 2026 by rpki-client