Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
File: Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft (raw, json)
Hash identifier: 34GX3RMYK154nj4/HJVwrVRXwMVecl8Uziz5lebO+Yk=
Subject key identifier: 0E:4A:A2:ED:F0:D7:99:20:7B:BA:4B:F3:2D:F5:E8:21:2C:D7:F7:A2
Authority key identifier: 67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
Certificate issuer: /CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Certificate serial: 01A1DC826479914C0943416E8CE69B113E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
Manifest number: 0170
Signing time: Sun 15 Nov 2026 00:01:35 +0000
Manifest this update: Sun 15 Nov 2026 00:01:35 +0000
Manifest next update: Mon 16 Nov 2026 00:01:35 +0000
Files and hashes: 1: Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl (hash: 2bT534HUCHFHpv8AWONMAZNyVxfkys5kDs5hh5ioDaY=)
2: _99RUrGdci44Oq4_4xcT9uSL-jY.roa (hash: YvmqrGHSZPjUN26szsH0GLTZcYZv0BvXR40esmV5asY=)
3: h658PKckKesTLernUES_denhymQ.roa (hash: TondVlbf8pLFUhLFF4XczbxXR4UNpHDTwhjMbduJWEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:64:79:91:4c:09:43:41:6e:8c:e6:9b:11:3e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Validity
Not Before: Nov 15 00:01:35 2026 GMT
Not After : Nov 16 00:01:35 2026 GMT
Subject: CN=0e4aa2edf0d799207bba4bf32df5e8212cd7f7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:2e:1a:a2:4f:7a:1b:3c:30:87:21:8d:43:
76:35:d1:4c:cd:a1:d7:b3:5c:4b:1f:d9:04:e3:bb:
6a:57:b5:57:78:97:19:65:7f:f5:62:16:10:f7:6a:
1d:2b:91:42:cf:ca:90:f7:50:32:5f:ce:1d:40:0e:
10:90:77:a8:21:4e:2d:a5:bd:fb:85:65:96:7c:ba:
3d:5a:00:ed:32:1b:2e:12:55:39:1e:33:21:82:bd:
ac:6f:67:73:74:19:f3:f6:29:b0:6a:92:04:da:41:
4c:21:e7:df:fe:00:6b:b0:cc:31:4b:94:47:3d:6d:
b9:b6:d9:35:eb:e4:10:14:b8:ba:05:f6:5a:a4:4e:
a3:62:66:5d:33:43:08:1a:61:0d:17:e1:7f:83:ce:
a7:15:bf:73:33:20:65:69:0c:f6:3a:b3:8a:d5:78:
2d:5e:c9:e2:90:33:36:c5:dd:21:93:b6:b2:ec:89:
86:da:4d:22:03:cd:63:77:c4:3e:50:4b:1f:de:78:
0a:05:95:59:78:b0:e2:f8:d2:8d:f6:f4:04:23:78:
bc:32:f1:a3:cd:7a:af:d4:21:f5:c5:19:a3:e3:83:
71:88:8d:4d:da:be:1e:3b:fb:29:7b:f6:b2:89:9b:
c3:d4:d3:c8:2c:c4:5f:6c:1a:a7:2a:55:8f:a5:a6:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4A:A2:ED:F0:D7:99:20:7B:BA:4B:F3:2D:F5:E8:21:2C:D7:F7:A2
X509v3 Authority Key Identifier:
keyid:67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5f:1d:72:23:b4:c5:a3:75:f7:1f:0c:20:22:a0:b3:02:67:
42:a9:78:cf:e6:2e:67:94:83:1a:92:c6:a4:78:95:57:82:b0:
5e:13:57:70:ec:67:52:c3:1f:5d:40:f4:04:6a:2d:51:a2:b4:
85:00:22:31:88:4e:3b:e5:2b:b5:41:da:ce:ac:08:32:be:9c:
4b:cb:33:b8:58:dc:1a:d2:95:e8:d5:12:4b:2f:11:21:36:2a:
c1:9a:74:23:81:91:8f:6c:3b:2e:81:e7:f8:e0:ae:3e:1a:a1:
0b:f8:20:87:d1:25:f5:9a:c8:2b:12:b0:1d:f5:cc:fd:28:2d:
0c:d1:13:4f:4a:46:ad:34:92:9e:01:ea:1c:db:32:77:60:96:
f4:62:a0:2a:08:97:f0:76:51:ae:b6:a4:ee:ae:e8:35:18:6a:
bd:98:a7:12:8c:e4:99:c0:81:1b:89:89:a0:0d:5a:19:5b:44:
9c:98:3f:6b:4d:cc:bf:b2:83:ab:a1:e4:0f:a1:33:a0:37:50:
cd:23:61:9b:00:35:05:d1:ff:be:7e:dc:19:6c:54:f7:22:5c:
4b:df:c7:c2:1a:34:5c:24:a9:9b:97:d6:8d:90:5b:78:bd:79:
98:10:13:33:f4:4b:8f:fc:50:15:21:b8:ca:65:b1:f3:96:69:
64:e5:94:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 05:08:31 2026 by rpki-client