Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: aqvl9SDnXBzJPi6Na8IpqQb/Ms2nPE6A2+Pqts0OV30=
Subject key identifier: F8:F5:74:07:51:92:08:DB:F9:77:FD:43:AE:B8:03:03:59:78:2B:C0
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 01A13635E3D548775F65462C2E613C6E9587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 05E2
Signing time: Tue 13 Oct 2026 17:01:03 +0000
Manifest this update: Tue 13 Oct 2026 17:01:03 +0000
Manifest next update: Wed 14 Oct 2026 17:01:03 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: Iddeio3QIshuvg40O2hW815MRTD9BwNaLXJMrOZMVI8=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:35:e3:d5:48:77:5f:65:46:2c:2e:61:3c:6e:95:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Oct 13 17:01:03 2026 GMT
Not After : Oct 14 17:01:03 2026 GMT
Subject: CN=f8f57407519208dbf977fd43aeb8030359782bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:d9:e4:bb:f3:73:e3:f2:98:41:39:c5:62:
14:05:14:c6:86:d7:98:4c:6c:5d:a3:04:e0:22:77:
df:f7:40:83:4d:4c:70:b9:91:57:51:24:c8:0f:4c:
08:1d:80:17:96:ec:ae:66:06:85:ea:dc:a9:8c:a9:
54:22:2a:d9:87:66:5d:aa:4a:6d:e2:2a:13:33:39:
88:b4:ad:a5:bd:fc:9e:a2:42:d1:b3:29:a8:24:bc:
7c:5d:c3:c5:52:b0:2e:61:fd:b4:40:06:86:db:d8:
59:69:f1:71:80:31:72:7f:53:22:40:65:f9:3c:fb:
4f:80:db:d6:ad:41:eb:b6:cd:51:cc:bc:a2:a7:b5:
e1:db:8a:7f:2f:e7:31:75:8d:93:7f:f6:b6:ef:9e:
0e:5a:63:2e:f4:c2:f8:3a:94:de:7d:e1:c7:d3:a9:
5b:a5:15:a1:27:fc:34:c9:4f:0b:fd:1f:12:3c:76:
9c:79:01:56:dc:bb:90:89:9d:56:97:4e:92:e9:14:
3c:c7:92:32:28:fe:b8:e8:fa:25:25:c8:db:c9:af:
a3:09:7d:d2:2b:b4:80:1e:79:f5:64:2c:0f:dd:d3:
6f:a8:86:a0:38:d7:20:bc:8b:6f:5f:33:54:5b:16:
c4:be:74:df:66:84:8f:6d:1e:04:a5:34:81:36:0c:
33:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F5:74:07:51:92:08:DB:F9:77:FD:43:AE:B8:03:03:59:78:2B:C0
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:86:01:2e:31:be:da:52:92:82:37:9d:96:a4:4f:17:46:e3:
39:63:bd:05:b2:ff:e9:70:81:fe:74:c4:65:16:9c:fb:2a:58:
e2:0a:b1:9a:f8:c9:f0:0a:6c:8d:93:09:c2:9f:53:67:96:46:
fc:f7:23:b1:70:54:52:d8:24:01:fb:05:b1:ab:53:46:f7:df:
ce:09:17:92:70:d7:8b:9d:22:de:4f:96:ab:b7:fa:12:75:7f:
1a:d4:74:a0:a5:4d:00:65:a2:eb:df:98:55:97:21:80:e5:0c:
c7:27:28:1b:8e:b5:26:ec:04:bd:d1:25:4f:b9:89:7f:9b:7e:
db:7f:ed:0c:15:1a:f4:fa:7a:52:22:57:61:d1:7a:86:0c:93:
f8:8c:f8:ff:9b:da:fb:06:6e:9a:b2:9b:b6:80:4a:df:bb:4a:
81:97:eb:ed:48:99:51:d8:89:c4:16:36:e5:d8:74:d5:e8:d7:
f8:21:ba:a5:4a:e1:67:02:37:b5:4b:c8:5d:91:1a:69:73:9b:
76:82:bc:45:72:eb:1b:8a:d0:16:0d:3e:f7:df:f4:9e:5b:29:
71:4d:9a:c7:85:e4:da:26:bd:4d:54:b9:e9:7d:0a:a8:c7:a4:
38:9f:0b:88:d7:77:24:63:16:61:44:d1:50:28:ba:42:6b:63:
a0:87:5e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:23:18 2026 by rpki-client