Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: eK7GLfBIPFWlj6i2A3FlFV+brbFFB9OPyEwznEX2MIc=
Subject key identifier: 17:0E:36:2C:48:1F:EC:FA:01:7F:9E:0D:D2:41:0F:DE:BC:14:AA:6D
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 01A0C88F5E7839C752D86800C4FDFAFF817C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 1312
Signing time: Tue 22 Sep 2026 10:00:33 +0000
Manifest this update: Tue 22 Sep 2026 10:00:33 +0000
Manifest next update: Wed 23 Sep 2026 10:00:33 +0000
Files and hashes: 1: 5GenFMQsSYDx9FcfiAXgf9Uomdw.roa (hash: 4H+3cPhJ7oDZNP6D43X5l+hl9KT5PURFIDgzFceABtg=)
2: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (hash: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: +mb1PGJzzuaudWL9Dz5QCoGNAH/henfaV7dWKYfYVrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:5e:78:39:c7:52:d8:68:00:c4:fd:fa:ff:81:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Sep 22 10:00:33 2026 GMT
Not After : Sep 23 10:00:33 2026 GMT
Subject: CN=170e362c481fecfa017f9e0dd2410fdebc14aa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2a:ac:c4:2f:bf:09:b4:a4:a6:4b:2f:d2:1e:
c2:8f:4a:fc:a0:33:90:3e:5e:69:49:c0:e6:bf:96:
1e:ff:f0:cd:a0:3c:4a:4c:a3:c1:5d:73:3b:39:40:
fd:ea:8f:62:29:78:35:6e:4c:e8:3d:ef:ca:45:8c:
87:ad:9e:89:84:57:f8:a8:b8:e7:94:b2:1f:ae:ed:
1f:7e:5d:ff:f9:82:60:0f:71:14:f9:e5:ad:96:5a:
78:eb:52:a3:c9:aa:64:da:69:f7:7e:a6:fa:d4:d8:
09:52:20:ad:cc:5e:25:5b:fd:12:aa:3f:51:d4:f5:
e9:2b:1d:f4:96:c9:f8:00:64:d5:54:f2:80:08:53:
ca:46:16:a9:a4:6a:a8:b0:9e:9f:3f:7e:16:75:34:
34:76:2e:13:25:4b:5f:8a:11:c7:41:d6:a5:02:e9:
1a:73:7b:43:ef:a9:a6:f9:30:65:a8:78:47:c9:c1:
a1:53:1e:9d:77:29:f2:c5:1a:6c:8d:1f:bb:86:e1:
8e:28:f6:25:12:57:e8:1c:43:fb:5f:ec:cf:13:b1:
31:2f:fe:45:5b:9d:8f:1f:4a:55:dd:cd:34:cb:24:
9c:27:c8:9c:d6:79:f4:88:b4:5e:68:a2:fa:66:5b:
a7:5c:66:a5:40:ab:6c:32:ec:6e:7c:39:5a:f2:d6:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:36:2C:48:1F:EC:FA:01:7F:9E:0D:D2:41:0F:DE:BC:14:AA:6D
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8f:ab:87:ab:37:3b:7e:76:87:1f:59:1e:e5:d8:9c:9e:ab:
41:2b:8f:15:40:f4:ee:89:5f:43:55:97:10:dc:57:b8:41:32:
98:8c:eb:7e:31:37:af:d2:6c:1e:36:ca:82:ef:bc:c2:6d:49:
1e:16:fc:b7:1d:3c:07:21:91:db:34:23:ca:48:94:ca:a8:35:
f8:96:8f:e9:d7:06:2c:15:47:d0:50:f5:fb:a7:23:6d:fd:11:
9f:3e:56:cb:fa:07:ba:63:18:60:28:3d:9f:d5:31:76:2e:23:
dc:13:23:e3:92:9f:fa:f7:67:02:1e:e1:df:59:78:0f:bd:25:
41:27:ac:a0:91:96:7a:18:06:fb:81:77:c3:f7:2a:d5:43:5b:
59:cc:e8:8f:ac:12:6b:cd:93:d0:2a:a6:d1:35:aa:e9:a1:2e:
16:de:77:bb:81:6f:79:30:85:72:64:c5:5c:f2:c3:c2:e8:42:
1f:7a:71:65:16:43:5c:4d:fa:82:b0:a3:52:68:25:4d:2c:4a:
6e:4f:ee:be:d9:52:a1:69:03:d7:0f:0c:f2:bd:73:36:aa:74:
6e:6c:2f:1f:00:06:6d:03:c9:40:5a:da:c8:73:a7:8c:ef:33:
17:22:70:a1:29:b1:c1:8f:28:6b:8c:2c:ed:c1:72:09:bf:49:
42:7d:27:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:20:25 2026 by rpki-client