Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: Ho1hDaJ4i2P9MW95FV/3ColtHi7U8cMzVqg+q+VdKaQ=
Subject key identifier: F3:35:78:89:27:45:ED:C6:96:A7:BC:BF:F8:23:80:E0:02:A5:23:56
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 01A102116AC4FF9D2ADC1B3E90000359CFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 05C7
Signing time: Sat 03 Oct 2026 14:00:58 +0000
Manifest this update: Sat 03 Oct 2026 14:00:58 +0000
Manifest next update: Sun 04 Oct 2026 14:00:58 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: SieRrDxVYSrrltjWihVz0dW+SFbPsMMgVlBkKNExS0c=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:11:6a:c4:ff:9d:2a:dc:1b:3e:90:00:03:59:cf:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Oct 3 14:00:58 2026 GMT
Not After : Oct 4 14:00:58 2026 GMT
Subject: CN=f33578892745edc696a7bcbff82380e002a52356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c7:84:e4:e2:98:84:cc:31:9e:ad:14:10:07:
7e:07:f2:5d:1c:dc:8c:d2:9a:a5:d3:ae:b8:7e:da:
7b:af:1a:cd:57:90:22:b3:8e:4a:ca:f0:43:b3:5e:
c3:77:b1:22:dc:86:2a:ef:a8:15:d3:27:6f:fb:16:
69:db:ed:8b:f2:4c:f0:f6:78:25:ac:16:ce:52:bb:
50:18:bc:12:b7:29:70:dc:50:df:6a:8c:e4:6f:9a:
62:83:6d:6c:8b:4e:3a:c6:d6:3e:59:89:eb:16:96:
a0:01:be:1f:dc:1a:95:75:cd:98:87:11:f9:2f:8b:
4b:db:6f:b6:5b:c6:2a:2e:57:28:4f:53:4d:49:0e:
18:f5:a9:ba:9b:02:5b:fc:6c:94:94:1d:09:3a:f5:
81:40:cf:d6:95:6b:03:62:05:c2:d2:99:6d:03:db:
5b:5b:43:aa:d8:44:dd:f2:0c:cd:68:d2:d5:a5:66:
69:5b:51:2a:3d:24:ba:81:26:e8:26:c8:16:59:0b:
10:33:93:c6:e1:de:58:ad:8a:0b:0c:29:a9:fe:75:
d0:3f:ff:34:17:f4:c8:d1:4e:e1:8a:99:c3:84:95:
38:1f:91:71:45:a1:2c:a0:0d:60:a6:ac:16:eb:b0:
1f:34:ac:5e:58:f3:76:33:71:6e:87:ce:37:59:f5:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:35:78:89:27:45:ED:C6:96:A7:BC:BF:F8:23:80:E0:02:A5:23:56
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f4:4b:0f:dd:45:df:0c:1d:75:73:56:4f:99:10:f6:e2:9e:
16:21:48:e6:45:c1:a4:18:ff:26:ae:15:67:76:77:67:e1:ab:
de:0c:e7:7c:74:35:59:86:78:cd:b4:88:df:68:b9:19:65:b9:
24:27:88:0c:27:38:1e:c0:a4:fa:8b:04:40:e3:fc:c2:eb:fe:
d7:76:ce:49:6b:79:16:19:52:e7:22:6c:2b:e9:e4:5e:28:f7:
b2:02:d4:cb:49:98:7b:eb:1a:18:10:42:99:4d:e7:f2:5a:79:
f7:90:d0:d7:f7:6b:2d:7c:b4:a9:54:f5:e8:0d:f2:0f:35:41:
8e:03:26:7c:e9:dd:aa:e2:8a:6f:61:dc:12:2d:63:bb:83:f3:
27:1d:5c:c7:df:50:91:ed:79:8f:a9:25:5a:ad:c5:20:d8:36:
6b:9a:da:61:e4:24:70:56:bc:c2:13:88:84:34:50:6d:84:fe:
bc:ab:4f:fa:8f:d3:eb:55:41:ef:8b:54:c6:ad:34:f3:97:f5:
cd:93:66:8d:19:28:89:f1:91:17:f5:59:0a:f3:36:39:5c:f4:
03:8b:ab:50:9d:20:69:e4:27:5c:3a:3c:93:43:c6:b8:76:ca:
d2:5c:23:2a:cc:a1:5c:e8:25:51:1e:e2:21:44:2a:63:8b:88:
9f:48:30:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:08:37 2026 by rpki-client