Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
File: Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft (raw, json)
Hash identifier: 2EPzIKG+tmPu8jmMP7jLzbdbKO4MH6U7lfHffa5RA3I=
Subject key identifier: 14:47:3E:5B:D0:98:97:79:61:80:47:66:60:FE:B1:37:9A:AB:77:8D
Authority key identifier: 67:5B:51:1B:EA:7F:18:07:0B:1A:77:26:1C:1A:CD:4A:03:C6:1B:77
Certificate issuer: /CN=675b511bea7f18070b1a77261c1acd4a03c61b77
Certificate serial: 01A0D5DE1E7152DA94FA3C27011CD89D42F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:38 +0000
Manifest this update: Fri 25 Sep 2026 00:01:38 +0000
Manifest next update: Sat 26 Sep 2026 00:01:38 +0000
Files and hashes: 1: Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl (hash: 60V+awiVYRj1vvFbmQKpob2wSWjja4LlCePkblAch2U=)
2: _uELF3uAGWWWU-RJRHYGaIoW8U4.roa (hash: U5mRlj1KFH4M3tby5YOjE/zPfPpRLKSqjkUhZ3s2pw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:1e:71:52:da:94:fa:3c:27:01:1c:d8:9d:42:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675b511bea7f18070b1a77261c1acd4a03c61b77
Validity
Not Before: Sep 25 00:01:38 2026 GMT
Not After : Sep 26 00:01:38 2026 GMT
Subject: CN=14473e5bd09897796180476660feb1379aab778d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:02:8d:ba:5e:5c:2a:40:79:66:17:e9:7c:
01:01:c1:ad:b8:69:c0:05:df:92:9a:ec:c1:6a:2e:
92:ca:83:8b:af:fd:e7:d1:53:c7:5c:14:b3:61:dc:
80:b9:4a:b7:43:33:e6:22:43:bb:02:8d:0f:23:1d:
c3:99:ce:a7:d6:bb:4b:7f:d5:0a:7e:db:29:37:a3:
1a:c9:a1:ff:89:a7:28:80:ff:ee:86:84:ae:59:3a:
36:23:a7:10:29:8c:b6:fc:eb:f0:48:17:fc:78:bd:
9c:c8:b2:82:9b:dd:2b:9c:15:07:e8:81:95:21:98:
8d:78:c6:18:a1:9c:77:21:95:db:9e:b7:85:d0:ff:
c5:01:d5:94:fa:6f:89:a3:26:04:23:d9:16:aa:80:
98:69:4c:da:9d:89:ae:13:bd:0c:c5:1d:b9:37:d8:
cf:b4:93:6f:58:90:fa:fe:09:5a:50:39:50:2a:58:
27:7c:eb:64:e7:86:e1:91:ec:c3:0d:32:75:c7:0e:
2a:81:42:ef:67:f5:77:81:9a:8c:13:80:30:53:48:
3d:c4:93:0f:f3:b6:1f:53:1f:62:7f:42:14:44:4b:
7e:e7:1d:e0:3c:b5:05:c6:0b:2b:4f:9e:9d:d1:96:
b7:2c:65:bc:74:59:c9:37:85:28:b3:57:87:d6:9e:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:47:3E:5B:D0:98:97:79:61:80:47:66:60:FE:B1:37:9A:AB:77:8D
X509v3 Authority Key Identifier:
keyid:67:5B:51:1B:EA:7F:18:07:0B:1A:77:26:1C:1A:CD:4A:03:C6:1B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:da:88:42:8e:b5:64:b8:06:4a:18:ed:20:d9:37:1c:99:20:
dd:d5:28:45:60:87:3b:cd:8f:58:a2:ae:80:45:c7:7c:c5:3e:
11:2c:08:db:86:b6:e4:f4:3e:e6:5f:bf:25:61:a3:8d:04:62:
c0:9a:84:f6:95:79:1b:0c:6b:71:dd:7c:36:d8:73:1c:a0:07:
f2:45:42:d8:3c:e4:f0:cd:98:aa:22:df:18:a7:d1:cb:4f:e7:
6f:a6:77:a7:fa:f7:1e:ed:b4:70:6a:25:6a:d8:e5:f3:f2:bc:
87:ee:6d:05:20:63:9c:59:dd:6a:74:8a:9a:a1:94:f9:90:d4:
7b:2b:15:d2:3a:29:ca:d3:75:b5:86:da:36:52:6d:b8:87:a1:
d2:f5:0e:47:14:86:24:07:37:98:80:6d:16:72:6d:55:46:0b:
34:14:42:2a:e6:11:bb:fc:ce:00:38:73:53:a8:9c:16:72:83:
db:35:80:be:2d:fb:2b:12:00:b8:76:9e:74:a7:42:0a:4c:8b:
5e:ec:f2:2a:a9:95:8c:54:7e:82:54:42:b2:3b:a0:4f:ec:7f:
0e:0e:64:0a:94:ba:be:21:d7:29:c4:94:b8:c0:33:8d:21:7b:
3e:db:a6:47:bd:92:23:a3:a1:b2:d4:2c:3c:0f:b3:2f:c5:48:
e5:42:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:12:01 2026 by rpki-client