Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier: P46v/g3gy+ECc95lciK7xk9c2huEDo+t3cJ2/mOkXZY=
Subject key identifier: 7C:57:82:78:91:A3:63:A1:2E:73:FA:45:77:2F:3D:25:1B:BD:C2:7F
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial: 01A12AD6AD055ED46EDAD029A7862916BA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number: 1A9E
Signing time: Sun 11 Oct 2026 12:01:14 +0000
Manifest this update: Sun 11 Oct 2026 12:01:14 +0000
Manifest next update: Mon 12 Oct 2026 12:01:14 +0000
Files and hashes: 1: Z7YKoT2uZ4toIphTGHeS29211HY.roa (hash: IVtzdq6W6e4HPrHbXyquHCQIRite7QNBD3zP/ThGue4=)
2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: XBF29XKC5U66LyBOZ3B3Z8nMojOpKEbkyT9Ss4RHK84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:ad:05:5e:d4:6e:da:d0:29:a7:86:29:16:ba:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Validity
Not Before: Oct 11 12:01:14 2026 GMT
Not After : Oct 12 12:01:14 2026 GMT
Subject: CN=7c57827891a363a12e73fa45772f3d251bbdc27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:6a:d2:d8:0a:df:84:31:0d:af:3d:ac:fe:
4a:74:65:cf:34:ca:13:de:8c:54:86:7d:91:40:8a:
5a:a8:0b:6d:56:9c:76:d0:58:a0:bc:a5:d6:0c:53:
e9:ed:08:f3:a4:3b:d1:fe:41:1b:20:20:2a:83:76:
33:75:17:88:24:a6:40:49:f8:ef:37:ba:16:f9:ef:
9e:aa:ca:a3:1f:9b:77:44:60:e1:c2:33:79:e8:50:
70:26:83:7a:8f:c6:56:95:7d:9e:09:52:3a:09:90:
d0:ac:1b:77:75:fb:a3:f3:ae:c3:43:d4:4b:47:9f:
d6:01:d9:56:8b:21:f1:a1:9b:95:a9:81:03:2d:fe:
95:19:a0:37:2a:dc:18:c5:bf:ce:b4:43:af:db:66:
50:e3:08:d9:1a:12:2a:b6:31:11:93:20:ab:ad:e1:
fa:d0:65:a3:0c:e5:47:9e:02:6f:78:f3:32:66:dc:
c7:86:36:6d:0b:7c:27:56:7a:47:c0:51:92:bd:21:
87:86:c0:a0:00:b5:71:75:3a:05:d6:c7:a7:fc:73:
72:75:6a:85:97:65:da:6c:18:25:05:40:67:58:5b:
21:47:c3:93:e1:e4:2b:dd:63:fd:1d:1b:31:1f:80:
33:8a:03:9c:6c:d9:7b:42:0d:71:6b:87:ef:54:26:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:57:82:78:91:A3:63:A1:2E:73:FA:45:77:2F:3D:25:1B:BD:C2:7F
X509v3 Authority Key Identifier:
keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3b:6a:37:95:5e:07:02:e6:99:d2:eb:65:3a:fa:09:88:4c:
88:ea:d3:d6:53:31:ac:29:83:74:25:8d:01:28:3e:09:e2:8b:
c9:cb:af:ff:79:83:c8:0a:29:25:7b:aa:eb:1b:60:18:63:5f:
22:5c:dc:38:6f:c8:47:71:33:ce:f7:dd:fb:e5:12:5a:6d:f4:
34:7c:1a:b7:72:db:c7:0f:b9:24:ec:36:df:37:66:82:47:9b:
49:c3:0d:19:ca:58:4c:e3:fe:bd:01:b2:c6:aa:8b:df:82:67:
c5:fc:c0:cd:c6:68:59:e1:3e:4c:34:b1:c1:4f:c3:c1:14:bb:
53:76:4b:bd:22:a5:d8:79:f4:98:1d:49:10:ba:4b:1c:29:57:
43:32:d3:f8:44:29:11:b0:86:7d:24:0f:cb:e7:19:62:00:be:
73:6b:d3:93:42:3e:8c:fa:57:f5:08:08:0f:3c:b3:f0:0f:14:
38:1a:5d:d3:b9:34:0d:c0:53:03:ad:26:7f:2b:d5:42:3c:c3:
79:3b:8e:f5:4c:4f:52:cb:0d:97:8b:ab:e0:ae:42:1a:11:9a:
81:7b:f3:01:05:db:fa:18:8b:aa:f3:6c:10:99:2b:3e:c0:c4:
8e:d8:41:58:58:58:24:9a:05:f1:84:32:7f:e2:f0:c4:1d:d0:
70:1a:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:37:54 2026 by rpki-client