Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
File: Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft (raw, json)
Hash identifier: D5SxGCuUBmcZ3OniFGMSOLm344b/slUHEhjez2Zaa24=
Subject key identifier: 73:A3:EC:BE:99:EF:5B:6C:E5:8C:85:78:DF:C3:75:73:76:D7:28:71
Authority key identifier: 67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64
Certificate issuer: /CN=67d6cd6477f846bf170508ff1ac38994877d3064
Certificate serial: 01A12B7B27FC03F165A95576996C14CF2030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
Manifest number: 0141
Signing time: Sun 11 Oct 2026 15:00:53 +0000
Manifest this update: Sun 11 Oct 2026 15:00:53 +0000
Manifest next update: Mon 12 Oct 2026 15:00:53 +0000
Files and hashes: 1: Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl (hash: dz9FiOGDa3/kncxUHJnQhRqHoBWuYFtLiJ1Z1N5IDPM=)
2: s5JRW3dxCG3iSbG4YoeXwLVuI28.roa (hash: 6zxuS5n39EUMCOA6BmiDNejkEzaS6JegPxfxplNxV0w=)
3: w8zh1viLCameZBKyxiERXyJUv6g.asa (hash: +trZ6/UyyOJ0HhjRujxJ5kbX2C1OMx0w/MD/s7o7PO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:7b:27:fc:03:f1:65:a9:55:76:99:6c:14:cf:20:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d6cd6477f846bf170508ff1ac38994877d3064
Validity
Not Before: Oct 11 15:00:53 2026 GMT
Not After : Oct 12 15:00:53 2026 GMT
Subject: CN=73a3ecbe99ef5b6ce58c8578dfc3757376d72871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:1f:71:62:82:c2:ee:f2:ed:bb:16:f5:a3:
4e:79:23:e5:72:83:57:ee:49:1a:bc:8b:ea:aa:22:
a0:cd:d9:92:8d:3f:1b:db:13:5b:f4:dc:be:1e:ca:
15:f7:f2:98:a9:4d:db:fe:e7:b6:ac:f6:7e:68:90:
71:44:b3:a5:b1:6c:49:4b:51:98:a0:91:6e:9d:3d:
11:c3:cd:c8:c8:a0:60:fd:3b:0e:0c:83:e6:13:ba:
e9:a3:13:64:88:24:24:1c:98:39:47:41:15:bf:41:
b4:ac:9c:70:61:e8:17:ce:c9:df:b0:48:a0:54:ec:
03:74:9d:66:dd:f7:5a:d0:ad:62:9a:aa:12:d8:f6:
f0:08:e4:b1:09:6b:59:f6:8d:d3:38:49:e5:00:e9:
9a:44:0e:f4:87:59:b5:49:5d:db:a1:88:bf:32:30:
0a:6b:f5:84:3f:d6:29:87:94:1d:30:44:1a:bc:c3:
dd:80:9e:d0:7e:a9:18:89:2f:81:f0:21:73:a1:60:
da:49:b7:a3:33:38:77:07:88:ec:87:76:40:e9:95:
f7:b2:c6:5c:a4:e4:75:19:19:c9:07:0c:82:2f:e8:
4a:17:86:ef:ef:81:00:84:f3:78:a3:a5:eb:ac:73:
ef:7e:24:55:8e:65:f8:d6:d8:82:08:cc:df:e7:1b:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:EC:BE:99:EF:5B:6C:E5:8C:85:78:DF:C3:75:73:76:D7:28:71
X509v3 Authority Key Identifier:
keyid:67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f9:2f:6c:44:7c:b6:f9:45:5d:dc:d6:ca:61:f6:ba:8d:ce:
a9:2c:f6:8a:4f:e0:ac:5d:fd:93:16:07:68:f4:f7:88:2d:4b:
0f:ce:32:75:08:28:e8:4f:ce:a1:c9:84:7d:1b:35:96:e8:45:
e6:7a:00:e8:aa:7e:75:c1:c6:67:f0:20:30:37:f0:d5:dd:5e:
c3:69:2e:0e:38:d2:6d:c6:13:0c:60:23:3c:1c:5b:ec:25:ea:
b0:34:a8:27:24:d5:53:44:be:84:97:3d:48:c2:ec:2e:5f:6b:
46:b6:3d:96:8b:18:e3:ba:7d:ed:59:6d:bb:f8:1e:6b:0b:4e:
5e:ce:8c:d9:9c:15:fd:f7:c6:f4:f9:74:a3:36:fa:1e:8b:4e:
5b:c9:af:fd:05:05:33:d4:7a:a0:d8:97:eb:31:68:ee:41:d1:
c5:8d:79:11:1b:00:34:63:8b:b4:a5:4a:6f:20:3e:e9:8d:0c:
9e:79:c1:18:5a:47:29:90:a9:5a:fe:dc:ee:93:b4:c0:83:cd:
3b:b7:3c:62:f6:73:cd:5d:44:45:ff:c1:ef:2e:ba:2e:d8:b7:
20:63:10:21:43:f3:b8:14:35:32:fe:e4:09:51:2e:13:b6:b9:
11:32:03:d5:c3:ad:7b:d2:6e:df:76:ab:8e:1b:ae:c7:c7:c9:
81:d0:17:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:37:15 2026 by rpki-client