Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: FGY/6RJU7q/ZQ6P7gKKHOowsH1YkQwr9q26XGt+oktA=
Subject key identifier: DC:68:29:B1:B2:BF:0F:08:71:F7:9D:52:F7:38:B1:02:B6:A8:4A:4D
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 01A119751183B07A2A8FCE891FA85FDCFF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 1665
Signing time: Thu 08 Oct 2026 03:01:04 +0000
Manifest this update: Thu 08 Oct 2026 03:01:04 +0000
Manifest next update: Fri 09 Oct 2026 03:01:04 +0000
Files and hashes: 1: LKFdqAxekSyGKQc0Md8_7Xelo-E.roa (hash: hzROPb2XKPcBYg2mXSPUmlxSomnvcQdFm4oNZy6YiVs=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: W20GYU9M4NlRONnSwLTCRykJiFfgyXRNLuSsxaB11nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:75:11:83:b0:7a:2a:8f:ce:89:1f:a8:5f:dc:ff:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Oct 8 03:01:04 2026 GMT
Not After : Oct 9 03:01:04 2026 GMT
Subject: CN=dc6829b1b2bf0f0871f79d52f738b102b6a84a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:2a:af:be:c2:31:c7:73:2b:bf:e0:41:bb:
7b:21:7f:11:a3:20:9c:d4:fd:01:d2:cd:47:5d:88:
f2:87:d4:35:a2:73:7f:4e:fb:fa:4f:14:a6:57:fd:
2a:07:cc:41:ab:6e:06:18:4a:e2:43:e5:ba:db:34:
9f:f2:65:03:58:01:be:ef:d5:67:0c:bf:5d:50:7b:
4c:3f:0e:9a:22:36:08:31:aa:c9:f9:7d:d7:b3:7a:
a8:b7:a9:10:2f:7a:52:ca:a7:bf:46:3e:2b:6b:30:
f9:03:a6:3b:71:84:23:97:bd:54:fc:ba:7c:c8:07:
f4:74:92:b7:e1:c4:52:4c:46:a1:2b:16:2d:82:a2:
70:82:c2:50:c6:bd:07:cd:99:b8:80:c1:4d:db:68:
53:40:bb:4b:f2:19:55:a8:cc:e4:39:fc:b3:d7:30:
b8:0a:c1:74:90:6b:11:34:4c:51:c3:66:8e:50:f1:
57:18:7e:46:26:b0:12:64:c0:61:69:f2:1b:96:65:
50:1a:c7:b6:e7:17:2e:87:67:8c:16:6c:a0:bc:fe:
3b:81:f4:eb:61:46:21:c0:99:97:44:f0:1d:b3:7f:
3d:fa:a5:57:a9:ce:96:92:d5:bd:7c:af:12:bb:5b:
11:d5:9a:ef:5f:64:dd:85:50:a5:98:74:3c:6b:f9:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:68:29:B1:B2:BF:0F:08:71:F7:9D:52:F7:38:B1:02:B6:A8:4A:4D
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ec:33:29:79:a9:d8:b9:b6:91:d8:91:af:ce:d1:6c:09:b3:
54:c1:ef:ac:47:e7:96:30:fd:9e:3c:43:b4:84:4b:8f:86:aa:
be:ec:5a:c3:70:05:4e:e6:68:29:a1:ff:2d:d0:78:40:21:a0:
b6:41:f3:b8:23:9f:22:d1:52:f3:02:55:e5:94:b2:cc:58:ac:
08:fb:6f:2e:a5:1b:4c:22:55:fa:88:b6:c5:d5:19:72:6d:d0:
21:55:38:15:d6:6e:ac:d2:ad:0d:0d:87:c9:c5:1c:7f:82:88:
02:9c:5c:91:9d:a5:ac:47:fd:3a:f6:44:dd:db:06:63:bf:e4:
52:30:8d:67:5c:fb:95:ab:f7:82:85:88:af:ce:9d:1e:cb:80:
c9:ff:23:3c:4a:88:c9:69:92:4e:2e:27:89:b3:c6:0a:c7:8e:
51:0d:65:cf:72:32:6a:cc:bf:07:5c:af:cf:2d:15:36:0e:7f:
09:eb:a5:51:06:15:5b:9a:3a:91:ec:d0:08:46:19:d4:a5:74:
de:7d:94:0e:86:70:7a:50:10:c0:e7:b3:20:44:21:68:d4:40:
c4:3c:f4:74:8b:8c:97:ed:4a:de:bd:d6:23:7d:cd:50:0a:ab:
7f:69:1a:82:74:10:5b:bc:7e:44:02:fb:b9:c7:24:35:f6:fe:
c2:2b:97:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:04:48 2026 by rpki-client