Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
File: Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft (raw, json)
Hash identifier: MyqALz3zKo0g2Y0GBQl+iKPDU9q9EkBeWvfGfoFjAT8=
Subject key identifier: 8F:CD:DE:B7:9C:2B:35:A3:71:A9:87:94:1F:54:C8:B1:B5:A5:6E:EE
Authority key identifier: 67:5B:51:1B:EA:7F:18:07:0B:1A:77:26:1C:1A:CD:4A:03:C6:1B:77
Certificate issuer: /CN=675b511bea7f18070b1a77261c1acd4a03c61b77
Certificate serial: 01A0C8583E93BEA643C4999322133F70473B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:21 +0000
Manifest this update: Tue 22 Sep 2026 09:00:21 +0000
Manifest next update: Wed 23 Sep 2026 09:00:21 +0000
Files and hashes: 1: Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl (hash: QGLpG3tNvDE1uwv5k9V+vqYOouUJtSdkcwulwmTQRtA=)
2: _uELF3uAGWWWU-RJRHYGaIoW8U4.roa (hash: U5mRlj1KFH4M3tby5YOjE/zPfPpRLKSqjkUhZ3s2pw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:3e:93:be:a6:43:c4:99:93:22:13:3f:70:47:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675b511bea7f18070b1a77261c1acd4a03c61b77
Validity
Not Before: Sep 22 09:00:21 2026 GMT
Not After : Sep 23 09:00:21 2026 GMT
Subject: CN=8fcddeb79c2b35a371a987941f54c8b1b5a56eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:c8:cd:ad:41:80:d8:8a:d5:13:f2:e4:29:
cc:4f:51:54:47:13:6c:84:c3:75:95:3a:53:96:be:
32:ab:01:ab:ce:03:37:47:a9:4b:ac:81:08:e6:3f:
4f:17:e2:fe:7a:f8:d4:b0:9e:ae:aa:ca:1a:39:ba:
9f:5c:fd:c6:45:60:9a:20:7b:ee:4e:23:42:38:e6:
80:16:14:c2:00:c2:b6:b4:ff:9a:84:32:30:00:d0:
36:9f:c3:a4:b5:5f:f7:62:2c:bd:40:b6:ea:52:05:
10:27:93:c2:95:ea:e0:0d:6d:85:1b:28:99:cb:ed:
2e:bd:ef:4b:f3:3a:26:0d:ed:6a:f1:8b:86:2b:7a:
62:a3:4f:57:68:db:41:39:b5:b1:dd:fa:31:a8:c0:
06:0e:2a:87:df:7d:63:9f:1b:35:44:6e:6d:f2:81:
e8:9e:f3:a2:15:d4:ef:c7:68:40:49:e9:39:46:eb:
40:4e:1c:e1:50:ff:67:fa:af:47:a9:78:ac:9d:a1:
85:18:c2:20:59:18:9c:c6:82:a3:e3:fd:4b:e6:a0:
71:b4:f5:eb:3c:67:7b:6f:18:f9:4a:7e:38:06:8c:
1d:2e:5f:82:eb:04:be:e1:e8:e2:7d:91:fe:7b:6b:
cd:a5:87:1f:8a:f4:d9:29:e0:7d:7a:16:20:e8:e4:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CD:DE:B7:9C:2B:35:A3:71:A9:87:94:1F:54:C8:B1:B5:A5:6E:EE
X509v3 Authority Key Identifier:
keyid:67:5B:51:1B:EA:7F:18:07:0B:1A:77:26:1C:1A:CD:4A:03:C6:1B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:57:eb:a1:f5:3e:91:37:de:50:77:ef:44:aa:3d:d2:f6:a4:
6c:75:72:f6:18:7e:61:35:1c:8f:8e:c9:05:cd:3d:cc:53:41:
db:c6:ad:2d:ce:b5:5b:9e:3c:7a:a8:82:c1:69:66:4b:a5:b1:
95:a7:0c:ef:87:d8:8a:92:b4:ef:c4:78:4c:85:1b:16:c7:3b:
6f:2b:ef:e2:1f:e9:8b:c2:a7:79:e1:15:b7:52:4f:44:48:4f:
45:3f:e9:e5:c5:6e:cc:ba:c5:66:11:80:d2:99:78:b5:4a:d4:
9b:e9:80:03:81:57:f1:46:04:d9:37:4c:12:39:bc:a7:9e:c9:
a6:15:06:04:41:3e:21:b8:1e:6f:15:ce:ce:da:0a:ad:c9:2c:
22:2c:71:e7:36:a6:d1:7c:f3:6f:a2:06:64:57:4c:0f:e3:3b:
5c:62:ed:71:50:38:ea:a9:16:16:76:2f:6d:e3:26:59:17:b5:
30:04:fe:59:6d:dc:b1:98:d5:41:80:45:9c:8c:74:c9:56:de:
05:86:4e:74:e0:8b:88:01:49:e0:4a:55:0a:ce:e2:9a:9a:18:
02:c9:e2:2e:50:b7:a5:0c:18:63:11:69:3e:c7:99:66:11:4d:
d6:9e:6b:78:fb:9e:a8:41:58:f7:d9:ff:ed:fe:f5:c2:d4:70:
f7:33:ca:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:29:03 2026 by rpki-client