Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: CslC0w604p8yFTxnD1wjKi0H8owpV68bO01GHrdKfJo=
Subject key identifier: 70:B6:D8:79:F6:E3:9E:17:40:6A:D9:C2:37:D0:9A:AB:7A:C3:A0:B9
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 01A13334F5D2F799E2159E9ADC71BF573D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 0C16
Signing time: Tue 13 Oct 2026 03:01:10 +0000
Manifest this update: Tue 13 Oct 2026 03:01:10 +0000
Manifest next update: Wed 14 Oct 2026 03:01:10 +0000
Files and hashes: 1: 4kNIwYTUrVA18oIc_9jtqMOd7CI.roa (hash: L+g00yM7LCta/KmSbttT3iWTPXIIbIasMm1ZRHqbtYg=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: z0yHBpmtGzaQJ/6zhpBuyZfICEy8+Jz4/vEPPbEz9v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:34:f5:d2:f7:99:e2:15:9e:9a:dc:71:bf:57:3d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Oct 13 03:01:10 2026 GMT
Not After : Oct 14 03:01:10 2026 GMT
Subject: CN=70b6d879f6e39e17406ad9c237d09aab7ac3a0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:06:34:ea:e3:36:49:de:a5:44:34:14:ee:
f7:31:9e:2a:35:d8:ef:5a:37:7b:4a:2a:38:a9:44:
5b:16:7e:b4:69:42:f7:86:53:ce:c7:27:e2:ad:cb:
d3:f0:a9:fb:e4:33:63:a1:b9:a9:f4:9c:7d:79:cb:
0b:cf:fe:f3:80:fc:36:35:0f:cf:eb:e9:95:85:c0:
70:f6:70:4c:07:3c:57:83:a5:aa:ed:9b:68:62:3e:
b8:05:70:39:c5:28:9e:46:65:3f:ae:8a:fe:61:b3:
de:51:34:90:02:ce:c8:07:5a:af:9b:ff:fe:a5:98:
9d:48:e2:6a:7e:e8:08:3a:4c:8c:75:d7:c2:a2:ee:
af:e4:07:13:79:17:12:48:f4:1e:f7:06:9c:eb:42:
8c:4b:9d:46:39:a9:bf:56:b5:27:08:b4:10:40:d4:
c8:86:46:13:77:28:54:97:3e:01:51:55:45:09:4d:
6d:67:58:c9:eb:34:03:f7:54:69:ce:49:34:3c:c2:
dc:da:7e:25:b8:e4:78:5f:d6:7e:36:41:fd:af:80:
14:e0:f3:65:2f:02:b0:75:57:3b:15:9a:bb:30:9d:
bb:08:7d:9d:6f:d9:a9:5c:14:27:74:2b:09:98:c7:
51:2c:59:c0:b5:88:b4:9e:fc:7a:0d:28:6b:8d:30:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B6:D8:79:F6:E3:9E:17:40:6A:D9:C2:37:D0:9A:AB:7A:C3:A0:B9
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:86:dd:07:4b:a6:bc:79:0b:93:f1:50:98:62:dd:ed:f8:33:
54:5f:7b:e3:d8:89:ee:88:79:b7:4e:9b:5e:13:59:c6:e9:04:
af:ac:d9:2b:90:61:4e:df:9d:ba:b0:0f:4c:ea:21:6b:8c:15:
9d:fd:79:ef:a9:ff:0f:3d:1f:d0:55:ee:16:31:5d:13:13:67:
12:aa:54:72:18:2c:92:c9:77:eb:20:54:78:31:22:69:fb:75:
74:c9:66:aa:2a:c0:cd:7b:cc:67:03:92:b5:ca:09:5f:ab:13:
d1:26:b4:7c:9d:10:38:6e:e9:7b:7b:5b:f7:c8:07:0b:5b:bc:
b3:00:e4:42:a8:22:97:a4:fb:35:2a:7b:68:9e:d3:58:b2:a2:
5f:d1:8f:c2:95:c1:f0:a1:a7:e1:47:ef:a0:f1:f2:0d:f9:eb:
02:e6:c2:f4:92:61:72:30:44:ef:a6:1d:81:e0:a4:5e:61:9d:
6b:c8:cc:f1:18:b7:7a:f0:a7:83:c1:57:4f:97:36:37:f5:ed:
06:24:64:fc:3d:19:1d:17:77:5c:2b:66:9e:1a:64:48:b8:52:
c6:de:20:e3:d2:9b:3b:bf:8e:c7:48:30:d6:88:67:6c:58:50:
09:0f:6e:da:8c:54:90:5b:b5:f1:b0:9d:bf:87:cf:85:a7:b5:
04:da:54:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:36:42 2026 by rpki-client