Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier: S5fcpRdhpXE7fMfXA5BL83X41b9BXJYkRYg2vtm9xfE=
Subject key identifier: 29:EC:4C:BA:1C:7A:48:6A:19:77:A9:A6:08:A7:18:68:DD:4C:C1:E3
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 01A13CDCCA257685A6CF0359D3494EA4F85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number: 1687
Signing time: Thu 15 Oct 2026 00:01:04 +0000
Manifest this update: Thu 15 Oct 2026 00:01:04 +0000
Manifest next update: Fri 16 Oct 2026 00:01:04 +0000
Files and hashes: 1: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: i8532Wvcz+5yDF8F7njfrrnHI9hXDrSRBX7f82pX/20=)
2: uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa (hash: fAkGAUFUUGm9PtxJMnL3fGCs6QplpIcm9Vtk+9FgVDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:ca:25:76:85:a6:cf:03:59:d3:49:4e:a4:f8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: Oct 15 00:01:04 2026 GMT
Not After : Oct 16 00:01:04 2026 GMT
Subject: CN=29ec4cba1c7a486a1977a9a608a71868dd4cc1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:09:db:fb:35:cc:c5:c4:ac:98:8f:a2:9a:
09:31:09:b6:94:b7:8d:11:3f:d4:bf:e7:d3:10:b3:
60:f5:c7:b9:57:62:64:dd:4e:f1:ee:54:b2:9a:43:
2f:5e:4c:39:fa:a4:39:34:42:f5:5a:05:cc:16:8f:
a3:47:6e:d5:e1:d0:e4:41:bb:12:91:9a:4e:5b:95:
fe:50:39:b5:9c:18:dd:b4:4f:66:2d:b1:70:ab:ff:
36:cc:36:3f:b6:f6:5f:23:32:a6:d3:3a:68:c2:45:
8a:9f:9a:20:b0:ef:4b:bf:09:65:38:a5:1b:2e:7b:
40:23:ca:de:01:2f:46:cb:5d:b6:a8:cd:f3:44:d7:
63:0d:59:c4:d0:a3:c5:ff:83:94:3c:c1:0a:95:93:
d8:f2:16:7d:1c:b2:8f:78:df:ff:e6:b0:2d:b9:7a:
36:4f:f6:52:d4:bc:4d:f3:4b:e0:f7:3c:fe:36:85:
15:f7:3f:7e:64:12:16:8e:c3:ed:a2:55:c0:4d:fd:
79:e5:a1:c8:32:f1:4f:b3:10:0e:82:14:3e:3d:1a:
92:06:b4:f7:39:2b:fa:79:8b:a5:a7:05:7e:62:8e:
84:81:98:d3:63:e7:e3:76:53:a2:a0:b0:07:06:38:
b2:eb:8a:d6:56:ed:b3:f2:f9:1e:02:c9:9c:0e:cb:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EC:4C:BA:1C:7A:48:6A:19:77:A9:A6:08:A7:18:68:DD:4C:C1:E3
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:99:62:93:ec:0d:28:20:1b:e2:5e:83:96:d1:91:51:e6:2a:
9f:db:98:f8:08:36:d6:c4:e4:fe:a4:b6:d5:5f:e1:65:78:31:
60:04:ae:fe:cb:5f:81:d3:9f:83:b1:ce:50:e5:a8:42:a5:d6:
7f:fb:e3:0e:9b:14:1c:25:ce:4b:a9:7e:08:56:d6:e7:eb:3d:
d8:49:7b:93:60:6a:39:2c:3c:ca:cd:bb:0e:7a:f4:ad:6e:c0:
90:84:3e:e0:7a:b2:f7:be:40:b8:f6:e7:e1:e6:11:9b:aa:8e:
ec:fb:71:be:2c:ad:8c:4a:ee:06:32:47:89:cc:a3:9b:9a:35:
a2:27:bc:3f:2a:8e:1c:fb:d5:9c:cf:96:44:cc:fc:27:fc:ae:
e1:13:ea:7a:76:07:ad:1c:bd:d9:11:70:12:2c:69:79:4b:d0:
92:aa:7f:6d:a2:83:53:8b:c5:3c:a8:45:f9:f4:59:09:4d:16:
52:4d:e3:a4:3d:04:a1:1c:24:71:7f:61:76:e9:50:37:86:34:
69:39:69:85:34:78:95:b7:1d:84:e6:61:a2:94:6e:f1:4e:f6:
30:f6:83:e5:ed:8d:76:d4:24:18:3c:cc:ce:9c:09:d2:9f:d0:
32:bf:d1:f4:ee:11:37:02:5b:c3:bb:43:63:b8:07:d3:02:8c:
de:cb:b9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:30:43 2026 by rpki-client