Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File: Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier: x64utd+lFUSmLf88ZKCjZMoR1s0SD75KX2eBI1lQHQs=
Subject key identifier: 6A:26:84:BE:6E:AE:E1:9C:ED:DC:AC:BD:E0:F6:19:87:37:40:A1:8E
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial: 01A0DD60343EBB21B62A018B07CDA6BDB657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number: 1A79
Signing time: Sat 26 Sep 2026 11:01:04 +0000
Manifest this update: Sat 26 Sep 2026 11:01:04 +0000
Manifest next update: Sun 27 Sep 2026 11:01:04 +0000
Files and hashes: 1: 9_ZPXDi15fm1zzx9GsCu0r8cLwA.roa (hash: h9CqZh0rb7DZM2DSkg1oUJ5C5eMZCB3Ebd3JWwXuuXI=)
2: Z2S57soliueMTVEyGovf75orajw.crl (hash: gPPCRIiFiDxsXy0EOByW4nAcRjcld/z9/pvtwKuEag4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:34:3e:bb:21:b6:2a:01:8b:07:cd:a6:bd:b6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Validity
Not Before: Sep 26 11:01:04 2026 GMT
Not After : Sep 27 11:01:04 2026 GMT
Subject: CN=6a2684be6eaee19ceddcacbde0f619873740a18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:ab:8d:91:11:7a:7e:f5:dd:05:99:28:e9:
90:37:63:3e:0f:75:39:30:64:e8:8c:c7:02:52:bb:
13:4a:25:29:d3:c2:a6:ed:43:56:d8:92:c8:ec:cd:
73:cc:09:84:41:77:bc:28:73:d1:5e:8a:31:0f:0b:
26:b6:fa:39:6f:7f:21:fa:67:97:eb:d8:4a:02:b8:
b1:8b:a7:01:8d:48:fa:2d:18:58:3c:13:2b:c1:2a:
c3:79:7f:e2:a3:9a:f0:73:5c:82:7a:d8:96:84:47:
14:18:d6:8f:cc:3c:95:47:60:3c:32:0a:a2:81:53:
d9:18:f5:9a:8f:6d:2f:c2:e0:63:6d:04:73:f3:1d:
7a:b5:7b:e5:60:52:d0:95:8a:68:d6:2a:a3:19:bf:
a2:64:30:bd:54:2b:59:13:82:d9:ae:84:79:58:05:
41:f0:df:6c:d3:c5:2e:1d:b5:34:1c:b8:35:d2:f3:
ff:8e:c6:d8:56:43:6f:dc:4b:be:66:73:7c:fa:b0:
8d:62:d5:45:7b:11:3c:fa:aa:9a:1a:94:91:7c:8b:
94:79:22:eb:f1:de:90:3c:86:58:86:8e:79:94:c8:
38:9b:a3:01:0e:ba:bb:53:88:62:55:c5:2c:2f:5a:
df:96:2b:92:8f:27:9e:f9:c4:ed:f0:6d:e7:88:42:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:26:84:BE:6E:AE:E1:9C:ED:DC:AC:BD:E0:F6:19:87:37:40:A1:8E
X509v3 Authority Key Identifier:
keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:24:d0:43:e1:4c:ab:38:c5:2a:e9:ba:0f:80:43:e1:d4:2e:
84:8c:8a:b6:70:d5:93:fd:52:3c:52:54:20:78:ee:48:9e:42:
fe:8b:ce:c7:45:ee:a4:fe:3e:ad:62:df:b9:63:bd:67:8e:0b:
20:6b:8f:9c:d2:87:0c:f3:19:12:59:c6:53:28:a4:27:92:48:
96:74:78:bd:f0:09:8f:b9:26:01:36:93:32:19:50:1d:8a:94:
4b:bd:4a:9c:d9:1d:91:51:ed:2c:db:c5:27:15:99:a8:47:31:
d9:b9:8f:b8:e7:31:70:6c:94:71:76:ce:a0:d0:81:e1:db:a0:
11:d1:85:2f:ec:da:92:18:77:90:64:d7:a6:e3:01:0a:51:8b:
12:30:6d:38:5d:4c:00:48:03:f6:af:e0:ce:06:61:d7:74:30:
80:18:a8:c0:b8:ca:2c:98:18:8a:00:d5:76:04:4d:cc:d5:68:
a4:0c:a1:e3:8f:5e:a5:3f:c6:3e:a2:74:53:28:94:9d:ea:88:
04:f0:cf:85:ad:63:90:8e:c0:3b:4e:41:b4:53:b1:b3:a5:93:
8e:aa:55:5e:82:f8:30:f6:7c:c5:ee:c0:cf:be:8d:43:7a:dc:
66:1f:ba:2c:00:4f:a5:09:e9:5f:90:4e:02:41:e2:49:64:7d:
55:4d:04:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:43:38 2026 by rpki-client