Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: HE20TJAprzuml0vDqSSneKcx9fFhizK/x/Dz3E8Ruh0=
Subject key identifier: 13:4E:8E:E8:28:0D:87:3A:76:A9:40:84:99:6A:6A:88:9D:B4:E5:08
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 01A104DC10199D66A4E6CA40F3A8FC3E6956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 17A4
Signing time: Sun 04 Oct 2026 03:01:33 +0000
Manifest this update: Sun 04 Oct 2026 03:01:33 +0000
Manifest next update: Mon 05 Oct 2026 03:01:33 +0000
Files and hashes: 1: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: CNZcvJEXVblTfqulgtKDWiocotxqIhCMe3dOn8f7BjE=)
2: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:dc:10:19:9d:66:a4:e6:ca:40:f3:a8:fc:3e:69:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Oct 4 03:01:33 2026 GMT
Not After : Oct 5 03:01:33 2026 GMT
Subject: CN=134e8ee8280d873a76a94084996a6a889db4e508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:3d:1b:11:a5:58:33:d0:f7:91:34:e8:1f:
2f:0e:60:cb:cb:18:6f:33:40:a4:3c:7b:86:05:6a:
8f:a5:30:aa:e4:79:1a:19:c4:4f:60:6d:82:d8:11:
dc:bc:28:2c:ab:1d:14:14:50:f6:8a:0f:5f:19:1d:
be:ca:e5:c5:ba:34:ef:bc:08:55:23:fb:d7:f8:29:
c5:4c:83:69:b2:8e:92:6a:5c:4f:76:51:fa:38:ef:
b3:c4:ce:f7:77:a2:1a:e3:bd:b5:b7:7e:04:0f:20:
a1:17:29:3f:f3:d6:e4:4d:96:0f:61:ff:7f:9b:45:
35:d9:3c:ec:b1:9d:ba:f8:57:ef:eb:7d:27:d4:28:
da:43:4e:f5:f8:07:d0:2a:f0:02:c5:b9:65:a9:63:
5e:b6:48:6f:77:ba:17:37:d1:68:b3:6a:53:89:4a:
e6:e0:16:9a:6b:b8:56:04:f8:8b:30:0e:18:c1:d7:
e8:ec:8d:e7:30:9e:b2:0e:91:1d:e1:2e:85:e6:c4:
0a:04:a1:41:da:55:6d:db:39:24:08:81:f2:fc:ad:
40:5b:03:74:87:eb:6e:be:d2:76:27:68:25:c6:55:
a8:f5:f1:4e:da:44:4b:00:61:91:a2:e2:8f:e9:41:
d4:70:48:83:db:fd:db:d0:eb:0e:12:8e:4e:80:3a:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4E:8E:E8:28:0D:87:3A:76:A9:40:84:99:6A:6A:88:9D:B4:E5:08
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c7:35:19:df:8c:28:15:72:88:db:2f:ca:1c:60:55:4d:55:
07:4e:cd:fc:ff:49:ab:41:7a:de:66:a2:98:74:b6:e8:ba:c7:
f9:fb:3a:e7:d1:ee:b8:e9:b9:b5:26:1a:a7:36:e0:6f:58:bf:
5c:4b:7c:c5:e1:84:a2:c8:ae:c1:c8:51:5e:1c:36:b5:64:0a:
63:6d:d9:95:60:99:f1:51:2f:81:7f:f1:f9:7c:6f:b5:1f:f2:
b4:14:15:2f:38:cc:35:de:fb:9a:9f:d7:d0:9e:04:a1:c2:c6:
e4:39:a0:d6:78:f5:e6:05:ff:b4:e3:54:56:10:af:91:e8:8e:
26:af:4c:b8:f6:8a:fd:f6:65:88:1a:4b:5e:0a:e8:5c:55:c7:
d2:66:b7:a9:48:aa:dc:d7:6d:3c:42:bf:7e:a2:5f:df:e1:db:
05:14:ec:b4:c0:ca:34:c4:9f:85:65:f2:5a:c1:47:5a:5a:a6:
41:77:57:1e:e1:ef:7e:49:2b:e2:96:d0:9e:1d:c6:c2:dc:7a:
e9:19:d4:ba:a3:08:77:04:31:5c:32:26:fb:b9:32:39:77:05:
65:9c:c7:4a:0c:eb:e0:87:3f:3d:23:80:bb:44:41:ed:c4:dd:
e1:72:0c:1b:82:6e:32:2c:eb:a0:86:53:21:57:06:74:e9:35:
e6:6f:39:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:13:25 2026 by rpki-client