Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File: ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier: NKptLjth8r+fd5k4olm/MbDyq/DJB8Wu5uXSR8BfLdo=
Subject key identifier: 92:DD:16:EF:9E:8D:09:BF:3E:28:6D:5D:27:CA:70:EC:4F:D9:18:87
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 01A0F18BF343F614EDB312306A0A4A2E2C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number: 1161
Signing time: Wed 30 Sep 2026 09:01:15 +0000
Manifest this update: Wed 30 Sep 2026 09:01:15 +0000
Manifest next update: Thu 01 Oct 2026 09:01:15 +0000
Files and hashes: 1: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: vtv372bvUvtRxUzWKbUje7ZhH8ZSu450DMeixWf1J+k=)
2: kO3ikc55etvofjUz54lkxBw2Zts.roa (hash: FQtm/UjIvg0izBKVwcfTdDDZlcQWbE25eid7tWcMESM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:f3:43:f6:14:ed:b3:12:30:6a:0a:4a:2e:2c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: Sep 30 09:01:15 2026 GMT
Not After : Oct 1 09:01:15 2026 GMT
Subject: CN=92dd16ef9e8d09bf3e286d5d27ca70ec4fd91887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d2:9c:9b:8e:9d:9b:0b:e6:d1:58:50:9d:00:
cf:08:af:35:78:42:7f:00:34:7d:37:42:59:fa:73:
e4:8b:ac:2b:e3:4a:91:1a:3b:aa:6d:9e:e6:1a:f6:
39:1e:ec:69:fe:e4:be:13:a3:bf:e4:8b:90:2e:ca:
3f:78:66:99:62:3c:f7:90:52:43:9e:75:a2:ba:7c:
07:87:ca:89:06:a7:f3:82:2c:1d:19:20:0b:87:4f:
9d:e5:20:0a:9f:7e:79:1b:d0:59:6f:24:2d:2c:85:
9f:f7:b7:07:e8:16:b6:ea:40:61:d5:43:2c:49:38:
ec:0c:6c:76:31:92:e3:9f:72:f2:ca:4d:c2:bb:d6:
d1:7c:94:e4:e9:2f:29:9e:72:2f:c1:76:da:78:95:
e3:6c:27:6e:21:a9:df:cc:55:20:6c:29:05:22:dd:
1b:f4:3e:65:3b:18:16:c5:9d:7b:59:18:75:db:05:
c4:5a:21:a8:bd:89:f2:57:e5:a6:09:68:3c:2e:66:
90:4e:5f:24:83:6e:4a:94:75:63:1d:73:05:38:50:
0a:fc:ba:e4:b3:16:cf:dd:19:0d:35:f3:b9:a9:da:
a4:e4:6e:e3:e5:a2:f1:29:d1:20:a4:b9:75:c9:c5:
d0:19:4b:af:fb:98:77:af:31:a6:41:41:94:28:7e:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DD:16:EF:9E:8D:09:BF:3E:28:6D:5D:27:CA:70:EC:4F:D9:18:87
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8b:4c:6e:88:f9:65:29:9b:68:a8:ff:05:c0:74:d4:e5:d6:
36:c9:f4:74:75:b3:66:32:ad:3a:e7:cd:51:fc:69:eb:48:10:
4e:92:3c:cf:e0:c2:af:98:b6:3b:70:23:6e:b0:ad:ae:dc:c2:
c1:3b:10:6d:7e:67:e2:e2:8b:3b:2e:3a:14:92:b9:dd:f6:84:
a8:a7:5c:45:70:5d:42:d1:9d:41:8b:ab:2b:17:7f:ef:91:d6:
7b:53:a0:ca:cc:c4:df:43:99:9c:97:72:d0:1c:0d:72:03:04:
d8:4b:6f:77:bd:fb:9a:0c:bd:e0:a4:f4:5a:2f:9d:14:bf:4c:
ad:41:5e:de:94:7b:2d:8b:ca:0a:64:97:46:a1:dc:36:0d:6b:
2f:71:32:91:9c:f4:f7:fa:f7:5b:f8:4d:30:a7:68:e3:6e:e6:
29:27:f0:b8:cc:29:1e:ff:a1:6e:f7:93:68:b0:9e:42:69:bf:
f0:5f:a8:8e:74:21:54:0f:e5:be:a5:14:1d:e1:61:06:ed:28:
20:02:ec:95:56:f0:0e:e1:49:a4:91:0e:c8:84:f1:9d:11:d9:
3e:45:c4:86:71:a3:c5:39:11:57:28:11:1e:94:d2:13:f9:cb:
de:72:d8:12:b9:e6:b0:5f:22:36:10:03:5f:4f:48:83:67:0c:
5d:cf:ec:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:15:25 2026 by rpki-client