Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File: ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier: ltcTQwU+VYe+cA4eDkI2z4Gp/8al+Byu72aYdE5DINI=
Subject key identifier: 07:B6:89:31:E3:5D:46:91:15:84:51:C7:52:C0:58:6E:AA:52:6A:32
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 01A0EDAF3E5E04292635027994855C766511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number: 115F
Signing time: Tue 29 Sep 2026 15:01:19 +0000
Manifest this update: Tue 29 Sep 2026 15:01:19 +0000
Manifest next update: Wed 30 Sep 2026 15:01:19 +0000
Files and hashes: 1: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: yQHnUC3rfarXJw9o3B+pM+Xw49B59gnRrhMBVgySHbI=)
2: kO3ikc55etvofjUz54lkxBw2Zts.roa (hash: FQtm/UjIvg0izBKVwcfTdDDZlcQWbE25eid7tWcMESM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:3e:5e:04:29:26:35:02:79:94:85:5c:76:65:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: Sep 29 15:01:19 2026 GMT
Not After : Sep 30 15:01:19 2026 GMT
Subject: CN=07b68931e35d4691158451c752c0586eaa526a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:76:60:f8:31:e4:ae:9f:76:88:14:68:3a:
25:41:de:03:3a:7e:52:75:3d:17:4c:52:6b:68:31:
f1:b1:89:8d:3e:dc:4c:05:2e:16:be:b0:c8:6c:9e:
28:e7:69:9d:1a:59:82:bf:e5:28:2b:fb:6d:5e:d2:
b8:97:f7:55:71:bd:eb:62:12:2f:85:a8:14:14:38:
67:37:26:db:e0:13:6d:cc:bc:cc:d6:6a:1a:35:74:
18:55:65:ff:94:8a:83:e6:9b:5c:87:f3:9c:70:be:
27:c0:3d:7a:31:80:1a:d7:82:f2:af:bd:ef:ce:fb:
36:da:e0:d2:d1:af:02:b5:00:38:ff:a4:80:c6:75:
2c:d2:48:bf:f7:e8:1e:67:4c:70:8b:73:ed:12:ff:
5b:a4:5f:8e:88:1e:d5:15:29:1b:a2:43:5b:95:ba:
1b:e7:78:ba:ab:7a:43:6d:e8:35:43:06:dc:fa:94:
c5:0b:bb:e3:d5:e0:e6:bc:b4:2e:9a:42:17:73:ee:
8f:8a:89:a1:88:49:1d:06:10:77:c1:2e:2e:d0:70:
0a:e0:06:5d:b4:90:d7:e3:92:76:34:ac:fd:c9:de:
c6:ba:f1:56:ba:fa:f1:cf:ca:5d:0a:f3:33:66:a0:
8e:fb:73:3f:9a:ec:6f:3a:d0:45:95:0b:9a:cb:06:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B6:89:31:E3:5D:46:91:15:84:51:C7:52:C0:58:6E:AA:52:6A:32
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7f:f1:db:0d:26:ff:fc:f0:76:85:91:eb:62:90:6e:71:fb:
a2:68:09:fd:d5:21:e6:43:2f:08:05:6a:7c:83:f9:44:e3:f5:
fb:8c:99:f3:b3:ef:ec:16:4c:40:df:9c:19:d1:0b:e3:34:82:
e9:47:a8:d3:d1:d7:ec:e6:a4:bc:ba:94:e3:db:f1:9d:7b:5e:
b3:53:5f:bb:07:aa:0b:9e:3b:58:6e:24:86:e2:d8:98:36:58:
1d:60:fe:75:c0:c5:87:76:a5:f0:20:b2:dd:0f:99:a0:24:ea:
d0:d2:ff:45:b8:6a:2d:92:7b:1a:be:4c:0f:81:04:40:5f:1f:
29:bc:8b:8c:0f:fb:11:5b:75:06:e5:47:82:cf:76:08:03:52:
a2:7a:87:c9:53:b4:8d:d0:7c:a9:49:eb:d4:8f:fe:c2:23:4e:
f7:73:e9:0e:7b:3d:28:02:d7:f4:d9:b2:a0:07:da:cc:a2:62:
89:d2:c5:95:22:ae:44:71:28:fa:c5:9e:9b:ff:ed:e3:66:d4:
74:f1:f9:53:67:08:f0:54:94:6e:88:3b:3a:b6:5a:03:73:57:
0e:0f:ee:25:87:0c:8c:5b:48:fe:4e:64:34:75:44:ac:d6:c9:
e7:51:49:29:01:22:b4:b4:a9:46:20:b8:a8:1e:8a:99:71:df:
ff:e0:26:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:15:38 2026 by rpki-client