Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: 2JX3blVpxFnFbpHbNK8zMdl+LXoQj0Tk0reGJqAx7mQ=
Subject key identifier: C1:3B:73:DD:35:1A:45:67:AD:4E:0F:84:DD:57:2B:94:CF:8C:2A:08
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 01A0D8042DDE483E5B45C99C23EAC357B62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 1AC1
Signing time: Fri 25 Sep 2026 10:02:27 +0000
Manifest this update: Fri 25 Sep 2026 10:02:27 +0000
Manifest next update: Sat 26 Sep 2026 10:02:27 +0000
Files and hashes: 1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
2: 6HFZqocQgM6Tvjt5SVa1d-JKQro.roa (hash: R7CY28+/1QGV8imQwHhXvvPJh8Q9cCcEUd0a8h48WvQ=)
3: 9ZsiVUbUX5W-ZMCVQPzYEB1xBz4.roa (hash: PbpoXyAV/0b2z6QlVsi46fCFIAuuq0DUJ5Bw/Cp89FU=)
4: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
5: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: 2zAo2aV+lwlyCsjt1wIAX86dmSXRiz5dQz5jWPYB434=)
7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
8: inl3oK6KntOVTBjF2QtajgW1paQ.roa (hash: hSh/MkCdcKj7PpJEVgb25px7FEs0jeNWgRrerofSRCY=)
9: kB2FkBaRUfAJi-1yxcUFgqy84f8.roa (hash: EfQ4Aw8Q7Tcem9htNsAj6y3hOE53qNPfdKYIzWgsVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:2d:de:48:3e:5b:45:c9:9c:23:ea:c3:57:b6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Sep 25 10:02:27 2026 GMT
Not After : Sep 26 10:02:27 2026 GMT
Subject: CN=c13b73dd351a4567ad4e0f84dd572b94cf8c2a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:31:df:73:2f:6e:6f:1a:68:0b:11:8a:2c:
01:a2:bf:22:03:fc:d5:a1:5f:45:77:88:a7:50:52:
48:d6:e6:17:fb:b4:80:8f:fc:53:90:8e:dc:89:cb:
1a:6d:24:98:44:1c:9f:c7:fc:d1:8b:f7:6e:53:83:
4f:1e:30:65:02:9d:a5:e8:22:78:ec:0e:76:56:a2:
5c:cf:7e:8e:e4:57:38:b4:cf:57:f0:a8:f6:ae:a2:
3e:f9:e9:d3:34:68:42:6b:91:31:73:f6:49:f7:cf:
19:a0:07:af:46:52:04:56:df:e4:b4:38:69:98:e7:
32:df:c2:8d:c9:81:2f:ef:3a:f9:20:51:45:1e:39:
8f:b1:a3:e7:e7:a4:d1:2c:ce:29:d0:66:f0:d2:e5:
98:6d:1a:4d:08:f6:88:c9:f1:8c:3b:2c:56:6c:c1:
f7:83:6b:8a:b6:70:f3:d0:37:bc:28:07:2e:b8:16:
d9:67:53:5a:fc:a4:50:3d:65:1c:f5:a9:50:c6:66:
a4:76:8f:d2:b4:a9:3e:11:d2:e6:61:f5:7c:11:3d:
29:38:da:86:15:92:3c:fc:f0:07:fa:8e:1a:f5:17:
eb:16:e0:c5:97:10:6b:3b:7a:41:be:ec:94:c1:37:
70:67:9c:a2:66:08:3c:14:69:d9:05:72:6e:5c:48:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3B:73:DD:35:1A:45:67:AD:4E:0F:84:DD:57:2B:94:CF:8C:2A:08
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:19:67:f2:13:c2:35:5e:7a:f9:7d:9f:ad:0e:ed:cd:24:98:
14:f5:b6:98:bd:9b:09:77:d6:f4:03:c0:bc:f6:dc:e9:b9:74:
32:5e:86:6e:d6:9c:5b:61:6e:65:05:df:e7:f9:e0:65:87:f6:
70:4d:95:14:31:4b:a8:7e:37:f4:35:a8:c4:52:70:90:05:4a:
7a:11:3a:be:2d:8d:5b:3c:9a:94:b3:52:bb:5c:80:3a:5c:90:
15:b8:7f:de:82:e0:ac:11:ed:73:6a:de:9b:16:7a:a2:2d:0f:
d1:6f:b0:ca:55:9d:73:23:e8:04:3c:8b:79:ad:c2:d6:88:0e:
d6:f5:f4:01:af:17:54:9c:95:ee:49:da:5f:65:88:af:fb:a9:
f3:3e:41:7b:e9:c5:22:c0:09:8f:32:e3:c4:7d:60:01:ff:1b:
cf:a9:8c:54:77:e3:e1:86:fd:be:0b:c2:02:9b:ce:05:6e:89:
12:2c:1a:a2:07:a6:9f:c5:d3:78:87:c9:af:9e:c2:3d:c1:94:
6c:0b:71:fc:6b:18:61:47:18:22:c0:f6:b6:74:87:fd:33:03:
46:96:7d:be:59:05:2d:4f:19:80:f8:11:7d:46:20:0e:da:31:
0f:29:60:61:9b:45:7b:ad:6c:2a:8e:8f:41:8c:61:09:0e:7e:
f0:a9:8a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:10:56 2026 by rpki-client