Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
File: 421ZT1_jgr7Czo46Majyjm2XwB4.mft (raw, json)
Hash identifier: Z7rAhFJJY/++fvoqEQo847YLN1AhXgvMJRw/3iomVrw=
Subject key identifier: 5C:6A:87:E0:C6:34:34:43:9D:0D:95:5F:E7:C0:95:45:D1:DF:AD:F5
Authority key identifier: E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
Certificate issuer: /CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Certificate serial: 01A0D68272B1A0BDB734A8868AC6A6E187C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
Manifest number: 0110
Signing time: Fri 25 Sep 2026 03:01:08 +0000
Manifest this update: Fri 25 Sep 2026 03:01:08 +0000
Manifest next update: Sat 26 Sep 2026 03:01:08 +0000
Files and hashes: 1: 421ZT1_jgr7Czo46Majyjm2XwB4.crl (hash: zGbtGH/UMTbpQBOioJ9lbI4BD22557r4RLeih+D3dtA=)
2: 4kp9Gd2mxG804RIdTKshm3Dwmdo.asa (hash: eGP/nycwexU78v/Fn01o7w+Fu0NVubrmTB5+YYDpoOY=)
3: rlTxV9_AZMvvIYIdP4ZkM9OxPzQ.roa (hash: gCYbQwWeJazWuKam4wgBrsfYsq8VV5PKDsC6OZTN4xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:72:b1:a0:bd:b7:34:a8:86:8a:c6:a6:e1:87:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Validity
Not Before: Sep 25 03:01:08 2026 GMT
Not After : Sep 26 03:01:08 2026 GMT
Subject: CN=5c6a87e0c63434439d0d955fe7c09545d1dfadf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:42:d3:8f:b7:16:8c:5d:64:df:a7:3c:59:
2c:c0:f1:0e:b9:41:aa:31:6f:cf:6c:47:ff:4e:9a:
37:ae:64:51:74:38:ec:bc:17:72:ef:db:4c:a2:4b:
82:10:da:9e:4a:8d:c1:8e:10:8d:cc:72:e5:2e:8a:
d2:7d:5e:c1:ac:ff:7a:33:cf:c4:0e:d3:4a:f1:e6:
b8:b6:9f:40:0f:4b:d8:33:76:5d:af:d5:7c:e0:d6:
74:5f:48:4e:47:8b:a9:a8:39:5a:c4:3f:d5:13:58:
f4:29:06:4d:a6:bb:b1:4f:88:f2:88:72:8e:57:24:
3e:ca:03:b2:54:51:9e:8f:af:86:c4:9c:60:5e:a9:
f7:22:66:a7:1a:b1:da:70:ca:48:7b:bc:a6:5e:fd:
b0:b6:5a:8f:3b:46:f2:1a:bc:61:79:ca:02:41:3f:
e0:b4:e1:87:ea:1f:fa:14:e5:69:01:02:15:80:ca:
68:05:70:15:b0:96:5e:cf:06:64:52:10:65:e9:2f:
2a:ef:b9:5b:14:fb:35:fa:ed:00:92:d6:e1:36:22:
dc:da:99:f9:53:86:52:a2:5a:ce:5f:0e:75:fe:b2:
ed:cd:8b:60:e6:1e:f3:0d:39:9d:cb:05:49:bc:07:
ae:62:78:48:16:a8:97:21:a0:cc:32:42:68:b4:a0:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6A:87:E0:C6:34:34:43:9D:0D:95:5F:E7:C0:95:45:D1:DF:AD:F5
X509v3 Authority Key Identifier:
keyid:E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1d:f7:f8:18:6d:2d:03:6d:bc:ff:88:fd:a9:63:ed:1d:74:
5d:90:9d:36:38:65:dd:63:83:5c:51:91:75:2b:24:c6:69:63:
53:7e:39:58:4a:36:49:73:65:ff:b0:c8:5b:40:a4:5b:92:a0:
c1:e7:d2:81:04:ca:a8:93:81:a2:5a:e0:34:e0:f3:7b:4e:38:
55:73:f2:50:ec:cb:6f:52:5e:08:2a:59:a0:15:5e:36:44:d6:
4e:ce:a8:e2:af:20:0c:f0:d0:ef:71:e1:9c:75:be:38:4f:c6:
00:7f:ca:0a:2e:6e:6a:23:34:4b:d9:ac:8e:33:4c:2c:43:72:
2f:6a:ed:22:83:92:65:6c:fc:c1:7d:72:3b:91:f9:e4:bc:82:
10:df:35:9a:cd:20:d5:b8:c3:6d:ed:84:55:4b:c0:ae:64:e6:
e2:c6:87:50:0a:7e:c6:e2:3e:dd:19:54:e6:88:8a:9b:52:0b:
43:7a:9d:d3:f5:dc:e3:b5:aa:a0:46:5c:fd:d3:77:dc:35:52:
9f:a0:81:11:8f:98:e0:18:f4:bc:5f:c7:a0:b5:b4:fe:0e:7e:
32:89:c5:bc:3b:09:79:f2:06:cc:cc:a1:45:49:04:67:26:3c:
7d:3a:a2:b3:e9:64:f1:94:36:d1:03:c7:0f:8b:e4:8d:e3:a6:
4a:05:d4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:56:48 2026 by rpki-client