Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: 4iFRJK9/unjw76k7bbpgjWQ/ZsbBhLucKEKrTGAxmsI=
Subject key identifier: 8E:67:57:8B:AC:CA:1A:9A:61:B1:17:AC:44:BF:B0:9D:78:7A:F6:EA
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 01A139DB1788E386B3AC06FD5517ECB746DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 17EA
Signing time: Wed 14 Oct 2026 10:00:22 +0000
Manifest this update: Wed 14 Oct 2026 10:00:22 +0000
Manifest next update: Thu 15 Oct 2026 10:00:22 +0000
Files and hashes: 1: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: arGgQLRKcn3kidaiHono+/nOeO8E97j3wbd+ezahJdw=)
2: fSMYxOKrzkeoTqHTQXJBBkwJ19s.roa (hash: Ury55OlRGKlB+9SNwqIm4SCt+37rVBDsol33MQoHp1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:db:17:88:e3:86:b3:ac:06:fd:55:17:ec:b7:46:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Oct 14 10:00:22 2026 GMT
Not After : Oct 15 10:00:22 2026 GMT
Subject: CN=8e67578bacca1a9a61b117ac44bfb09d787af6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:3f:46:95:f7:3c:1e:3a:39:01:96:41:a6:
58:5f:4b:8d:ac:a4:28:45:2f:6c:1b:8c:4b:57:5d:
d3:db:79:8d:e3:12:95:b6:59:7b:1c:30:12:42:cf:
15:64:dd:ed:7d:5b:d7:fe:83:d4:56:23:a1:9a:45:
32:91:d1:2f:92:dc:6e:81:31:4d:d5:cb:60:ee:87:
ab:5f:a7:e2:ab:4b:5e:a1:ac:a9:5c:c3:29:44:2a:
80:0e:b6:e7:8d:b2:0b:f9:a3:f6:98:93:4a:ad:04:
d7:c5:ef:d4:1c:17:71:2f:20:ef:c3:a1:7d:67:5f:
17:7d:0f:07:85:07:04:1d:9a:64:40:15:c9:7c:d1:
c8:d1:90:fe:5f:0f:ec:f0:ab:7e:39:4a:c7:96:7e:
88:e6:cb:75:13:a1:bc:e8:5e:c8:b0:b0:d4:5e:74:
72:2f:61:62:df:7d:96:8d:ff:ea:10:bd:29:8d:62:
4d:03:91:a2:73:1e:59:71:62:fc:34:6b:3c:e9:99:
58:e1:f5:64:29:04:5f:b1:40:f5:7e:a7:70:90:a0:
f6:47:e8:95:df:fa:da:4c:a2:f4:7f:21:6a:6e:9f:
86:12:1f:e3:e6:60:f8:c3:0a:85:8d:99:50:ac:90:
71:e8:e1:24:aa:fd:a4:88:4f:5b:81:7e:80:94:ef:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:67:57:8B:AC:CA:1A:9A:61:B1:17:AC:44:BF:B0:9D:78:7A:F6:EA
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:41:83:e3:a7:1d:5f:5f:04:32:eb:c6:91:27:9b:0d:57:d1:
0b:72:9b:38:61:fa:cd:d3:a3:ca:f2:08:82:c5:c8:27:15:e0:
13:c0:5a:6d:6a:14:c5:e7:f1:01:0e:79:c0:fc:b7:0b:6c:fe:
d8:8a:96:ec:17:4f:d3:50:90:f6:0a:2a:68:fe:77:1f:10:8e:
a6:6a:7d:79:93:d9:8b:b5:a0:2d:54:81:7a:70:a0:f5:7b:b4:
4f:05:cd:53:0a:64:70:f6:0a:4c:05:d2:27:5e:d8:1d:24:a9:
68:0d:fb:8a:d2:62:2f:ba:a0:87:29:f8:d3:de:b6:f3:0b:20:
b5:be:cd:f8:05:80:b0:7e:9f:c0:e4:5a:ea:cb:0e:2e:f1:2a:
9d:39:44:28:af:fc:af:d6:eb:52:ef:42:45:8f:7e:d4:ca:3f:
ae:f2:7c:d8:00:a8:88:7c:55:2d:77:e2:00:b8:b0:c8:db:4d:
7b:f6:13:42:b7:f4:b0:3e:31:47:ae:dc:8f:12:d2:62:b2:c8:
7d:84:f2:48:f7:b9:ba:df:95:1e:fe:6d:48:50:a7:ce:61:33:
a1:57:7f:3b:a0:9f:ac:1c:45:0c:36:fa:48:95:ce:78:35:85:
67:81:8a:b5:e6:42:be:f8:16:90:5b:9c:da:a9:9d:13:12:c2:
c8:64:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:11:52 2026 by rpki-client