Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier: 3hpLxgRM8H3gZdDB1Xfz7bhPf9T6qctpxvoltoMYBCI=
Subject key identifier: 7A:5F:A8:C7:7B:04:D8:03:7E:4A:A1:2E:1D:2F:07:D4:B0:36:A3:D6
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 01A121D3BADF1D7D671CD798DCCE5CA4C447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number: 1679
Signing time: Fri 09 Oct 2026 18:01:26 +0000
Manifest this update: Fri 09 Oct 2026 18:01:26 +0000
Manifest next update: Sat 10 Oct 2026 18:01:26 +0000
Files and hashes: 1: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: Y53kAsp01FNQVrFFg7zlEZJnDnc4dhbAXfVUXqrCvfY=)
2: uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa (hash: fAkGAUFUUGm9PtxJMnL3fGCs6QplpIcm9Vtk+9FgVDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:d3:ba:df:1d:7d:67:1c:d7:98:dc:ce:5c:a4:c4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: Oct 9 18:01:26 2026 GMT
Not After : Oct 10 18:01:26 2026 GMT
Subject: CN=7a5fa8c77b04d8037e4aa12e1d2f07d4b036a3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:0c:75:a3:2f:23:c0:01:54:92:4d:2e:e0:
ed:cd:3d:bb:fd:75:15:4d:0c:71:74:8b:df:0b:72:
dc:df:38:a0:78:a5:92:24:be:d3:0f:75:d4:4e:1d:
4c:8b:3e:da:55:c0:09:6d:ac:74:45:0c:26:19:5a:
81:d4:01:a8:07:29:f6:0b:62:7e:80:11:5f:2c:a0:
db:9b:69:ed:c6:6c:18:4d:85:19:0e:59:04:4f:9d:
a8:9d:9f:27:0e:17:43:31:3e:7d:66:a1:0c:be:62:
f9:22:62:f6:e5:03:5a:12:ea:51:0a:5b:67:40:ba:
22:d7:4f:db:62:9e:89:13:5d:75:1e:bd:e6:2c:2b:
a5:49:0a:57:db:51:00:98:69:59:1c:0d:16:8f:d3:
6a:b3:86:25:bf:59:4e:81:20:85:7e:ef:49:2f:8a:
66:29:a6:e7:83:e2:8d:5c:24:45:e0:20:10:b3:7d:
f5:90:24:76:94:cf:be:e5:ce:f0:63:b8:7c:2d:2f:
a4:d4:92:c0:d5:3a:19:0f:ed:37:6b:85:a1:9e:d5:
37:22:19:3f:f2:54:9a:68:ae:9f:13:42:19:eb:41:
d4:32:f4:f9:35:25:15:61:53:8e:01:fa:86:1a:a4:
cf:fd:a2:cd:7e:18:8b:ec:9b:84:6b:a6:5e:82:23:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5F:A8:C7:7B:04:D8:03:7E:4A:A1:2E:1D:2F:07:D4:B0:36:A3:D6
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7c:8e:c7:74:1d:10:08:c8:6a:7c:a2:c3:ef:c8:a7:cd:a1:
9a:eb:a0:74:70:f9:8e:a2:e3:5b:c4:05:81:40:b8:aa:9d:88:
ce:f7:a7:d0:8a:e8:b6:01:bc:21:a2:6c:37:34:3c:3e:d0:9d:
3e:da:3d:e7:02:26:44:b2:bf:c9:c8:4f:dc:95:40:1a:4f:6d:
15:23:19:42:2b:51:5a:6f:5f:4b:2f:4b:a3:db:b7:62:10:2e:
68:16:f9:67:31:ec:ff:c6:6b:d7:13:a5:40:88:a8:21:cf:18:
c5:3b:e8:ed:34:a6:29:3a:4e:52:17:f9:e6:4c:2a:11:71:49:
6f:bf:2a:f6:4c:49:9b:3a:d0:8a:79:00:8f:39:f9:fe:a4:09:
02:f0:55:d3:ca:22:a7:0e:1b:cf:0c:ab:bd:0d:6f:93:ae:06:
e7:f7:7e:64:39:65:f0:d3:ce:3d:86:c5:48:bb:ac:56:8c:40:
a8:fe:97:6d:c2:dd:1e:10:e8:ed:5d:53:9b:36:50:4a:df:9f:
84:42:a2:c1:4e:9e:7d:eb:83:0a:bf:23:ea:d8:e4:ea:73:cf:
2c:0a:d2:85:8e:cc:da:41:3e:dd:2f:98:e1:50:89:df:97:2c:
23:44:fc:2f:e4:70:41:d5:83:63:b0:14:bf:00:3f:22:a8:ef:
88:d5:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:08:18 2026 by rpki-client