Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: y74GGCaUoS/cNeZVvv99asHWIfUYyg/N4eahTTNhey8=
Subject key identifier: 2E:0A:14:7C:A4:34:28:DB:FE:55:D4:2A:0D:74:26:66:13:79:E2:50
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 01A1298CB22FC14B0D9E36E855CEE2F2F3BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 17B7
Signing time: Sun 11 Oct 2026 06:00:48 +0000
Manifest this update: Sun 11 Oct 2026 06:00:48 +0000
Manifest next update: Mon 12 Oct 2026 06:00:48 +0000
Files and hashes: 1: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: Ti5WO0/Oew9/fNq7lgoMJdKdzPiyAfxWjdw1tVJUtfk=)
2: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:8c:b2:2f:c1:4b:0d:9e:36:e8:55:ce:e2:f2:f3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Oct 11 06:00:48 2026 GMT
Not After : Oct 12 06:00:48 2026 GMT
Subject: CN=2e0a147ca43428dbfe55d42a0d7426661379e250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:51:8b:c4:4e:e8:d8:33:6b:48:da:63:79:
67:a9:93:ce:2d:92:51:32:95:3b:9a:c0:db:c1:0c:
61:6d:7c:62:48:8f:6a:c8:f3:b9:2d:b2:6b:74:cd:
15:ba:98:94:b0:ae:3d:4d:e8:75:4c:de:89:0e:ea:
37:66:6c:85:b1:fc:95:f1:1b:6c:ec:ab:c9:91:0e:
ca:4f:a6:e3:7b:2b:92:04:c7:53:1d:1e:27:4d:0a:
ad:90:2c:2f:39:9b:97:7b:9a:b3:6d:9d:21:b8:53:
8f:63:4c:e5:9e:db:0d:e7:21:aa:b0:66:91:c3:f5:
40:cd:bf:8d:be:8b:b1:0b:ba:a8:30:81:0d:ba:b3:
cd:55:1d:55:a8:8c:50:3a:8d:85:90:f6:ec:66:b9:
77:15:57:d4:50:78:01:b0:ae:0b:c9:0f:08:e2:c4:
e6:d0:b6:9d:af:08:a2:1b:9b:b6:91:49:81:3b:a1:
01:38:27:83:6f:d8:f2:31:74:94:b3:25:a1:b8:0c:
0f:45:3c:02:3b:33:b0:19:08:05:bb:fb:e2:d6:5d:
9c:94:bc:99:a2:9b:54:63:29:47:53:cb:77:48:80:
23:84:44:d3:31:8b:15:40:e3:8e:0d:71:49:0c:48:
c2:b6:66:c6:17:06:8c:d9:d8:93:5a:d4:1c:1c:12:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0A:14:7C:A4:34:28:DB:FE:55:D4:2A:0D:74:26:66:13:79:E2:50
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:db:2a:49:32:44:84:c4:de:43:34:38:29:e8:86:7c:87:9b:
dc:0c:44:4a:12:15:19:88:a9:96:61:99:f3:d2:8c:4e:76:19:
9f:e3:3d:60:e0:5f:7a:e9:c1:7c:ab:72:7f:9c:2b:d8:fc:53:
57:9e:5a:02:8d:2c:37:e9:dd:3d:b5:71:d1:79:b1:c9:f4:ed:
ba:e6:e2:42:04:38:d1:5b:69:78:7e:dc:f1:52:68:4d:db:17:
0c:16:e3:9d:58:bc:75:c5:78:81:e6:57:0d:27:15:17:69:56:
ff:dc:c8:df:30:f1:d3:f5:d4:24:08:47:22:de:75:60:b4:dd:
c1:a8:73:68:d8:c5:fb:50:bb:59:9b:99:77:6d:5c:f2:e0:98:
8e:d2:7f:93:56:83:34:b6:6e:c9:14:fb:bd:33:7c:21:15:84:
1c:83:e0:a6:e4:e9:f6:9a:a9:a5:90:c1:95:a4:50:66:be:e4:
32:d7:89:f3:fd:1b:7b:2c:2f:40:e4:f3:ea:7a:d8:52:97:cf:
77:8d:58:c8:59:bd:e8:1e:c9:e7:9d:83:14:73:9e:60:f4:05:
1e:95:48:b0:83:9c:b6:90:7e:da:4c:1c:74:09:d9:ad:03:22:
8b:69:e5:48:ac:31:3e:3d:71:6d:1d:7a:0a:5b:60:e9:8f:3d:
8e:7d:4f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:03:50 2026 by rpki-client