Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
File: Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft (raw, json)
Hash identifier: hAYXczzBZHs2KpSaHZaHXwQEQxPiu0ys2ZMTro+IXWI=
Subject key identifier: C9:E3:69:3A:D3:57:08:74:D7:D2:A4:88:6D:FF:FF:5D:27:AC:FD:33
Authority key identifier: 67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
Certificate issuer: /CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Certificate serial: 01A0D01242683E602E757DD3E0739931315B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:52 +0000
Manifest this update: Wed 23 Sep 2026 21:00:52 +0000
Manifest next update: Thu 24 Sep 2026 21:00:52 +0000
Files and hashes: 1: Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl (hash: fZw4qBYhtI/p2aYWgvKgexZjBlIc6IXv9RSAKp04CSk=)
2: _99RUrGdci44Oq4_4xcT9uSL-jY.roa (hash: YvmqrGHSZPjUN26szsH0GLTZcYZv0BvXR40esmV5asY=)
3: h658PKckKesTLernUES_denhymQ.roa (hash: TondVlbf8pLFUhLFF4XczbxXR4UNpHDTwhjMbduJWEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:42:68:3e:60:2e:75:7d:d3:e0:73:99:31:31:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Validity
Not Before: Sep 23 21:00:52 2026 GMT
Not After : Sep 24 21:00:52 2026 GMT
Subject: CN=c9e3693ad3570874d7d2a4886dffff5d27acfd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:30:e7:7c:a9:bc:eb:08:85:db:88:e0:7d:
27:ac:1c:4f:56:73:0a:46:6f:fc:4e:54:01:e4:38:
cc:a6:ae:37:8d:4e:6e:53:23:9e:33:1f:cd:0e:6d:
64:fd:13:b0:de:c8:d3:7a:a0:f8:eb:19:f1:ac:c8:
81:05:79:64:fc:4d:02:1c:10:df:0b:ea:c5:15:01:
ab:e0:39:cc:0b:3c:c8:99:ba:7c:c1:75:4f:71:1b:
c5:da:64:5f:ea:8a:6d:3a:05:63:81:b1:d4:b6:88:
50:5e:55:40:9f:ab:87:ff:27:67:0c:3f:b2:59:65:
62:5b:dd:a9:74:c9:f3:70:66:fd:98:d3:1b:8b:9c:
e8:67:1d:1d:4a:b5:20:df:87:30:61:91:e6:f4:fa:
ae:d8:b5:16:8f:f5:fb:5f:1d:ea:e0:3d:49:df:1b:
6c:82:63:dc:d3:f2:2f:21:fc:70:3b:08:a6:04:05:
f3:4a:f1:ce:86:b2:0c:ab:81:65:57:7e:a7:e1:7d:
b3:7c:21:72:f1:fc:ed:82:c4:df:a2:da:47:90:0e:
5a:8d:be:27:1d:36:b2:aa:cc:9d:04:0b:4c:35:4d:
3b:0a:d9:e6:60:48:95:2c:8c:1a:1b:d5:a5:cc:07:
23:ac:d1:5d:af:c5:b5:4d:da:b6:ae:1d:f7:cb:fb:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E3:69:3A:D3:57:08:74:D7:D2:A4:88:6D:FF:FF:5D:27:AC:FD:33
X509v3 Authority Key Identifier:
keyid:67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cb:6a:5a:d9:f7:8a:cf:2f:9d:02:71:f8:7f:d7:99:bf:04:
2f:0f:8a:55:80:41:d7:eb:ef:d3:04:05:cd:8a:12:fb:78:cb:
d6:e7:52:d6:8e:43:a7:08:45:dc:93:69:64:fa:86:ba:ca:e6:
77:7b:3b:71:bc:5f:89:71:84:0c:ba:47:5c:79:b1:24:41:1a:
5e:08:19:b8:4f:54:39:c7:1e:86:a6:ff:1c:56:16:fe:9d:8a:
d7:ef:b6:a3:4a:56:dc:c4:45:15:2b:5b:a5:0d:4c:8f:1c:d1:
95:ae:f3:3e:da:65:32:44:a3:92:8c:f6:a6:3b:21:24:14:82:
88:cb:0f:99:c4:17:14:39:42:a6:ec:93:69:f7:d0:85:85:ae:
ce:65:c1:8c:35:4d:ba:52:51:88:c2:50:e5:cc:ba:dd:a1:08:
ce:04:ad:3d:9c:0e:68:1e:b9:f5:4b:c4:1e:0e:4c:af:b5:4d:
8b:3f:f1:87:d1:cb:85:89:dd:5d:9f:ff:52:b7:13:57:16:5d:
d9:c9:29:fa:0d:10:89:57:aa:f0:0e:b8:a5:f7:3d:34:d6:eb:
ba:20:55:14:68:e7:88:e5:e3:73:b5:9c:19:2b:24:8a:64:40:
d1:65:7b:37:bf:5b:8e:0a:ea:86:bd:9c:11:8b:38:20:ea:23:
8b:68:70:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:53:40 2026 by rpki-client