Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: nRiIeJ7IrXAy/SKRLmuyqiDZC8KvW4aw9PEq5TDiG2g=
Subject key identifier: EA:07:05:94:76:1A:74:A6:54:B4:14:4D:40:0E:6F:C6:20:99:A0:8A
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 01A0E0612088CB69C109691C974666BB9470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 094A
Signing time: Sun 27 Sep 2026 01:00:56 +0000
Manifest this update: Sun 27 Sep 2026 01:00:56 +0000
Manifest next update: Mon 28 Sep 2026 01:00:56 +0000
Files and hashes: 1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: WJADPt8RdYnDaccHDfe8oW2ZmBrZd1ul/0Tqb5D7b8U=)
2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:20:88:cb:69:c1:09:69:1c:97:46:66:bb:94:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Sep 27 01:00:56 2026 GMT
Not After : Sep 28 01:00:56 2026 GMT
Subject: CN=ea070594761a74a654b4144d400e6fc62099a08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:ec:a9:e3:46:1f:2e:f6:dd:42:cd:6a:b0:
06:67:8f:d8:37:ad:b0:2e:52:a8:bc:ac:0e:96:16:
24:fa:7d:83:6c:bd:bc:26:50:f1:72:55:a9:d3:02:
4b:bf:e5:d4:97:45:fe:11:ec:ee:31:4c:95:28:12:
6a:41:ce:1b:7f:de:9f:f6:0a:60:11:6b:43:8c:cd:
ed:0a:69:51:39:52:ff:a2:2a:45:25:dc:0f:37:f1:
79:4d:09:fc:04:95:82:be:e5:5e:62:89:31:bb:af:
4b:f7:3b:a8:81:70:d2:06:7c:f7:ee:bd:29:ae:81:
82:a3:95:fd:c5:8e:c4:ac:44:b4:1e:3c:4d:f4:fd:
fe:df:dc:af:15:e8:3b:11:74:68:65:3c:85:0a:e8:
9b:dd:96:aa:88:6d:90:ec:57:e0:a6:d0:c8:1d:19:
9b:9e:58:60:41:90:3a:fa:d1:b0:b1:b6:8d:d9:99:
a6:20:7e:d2:93:fb:6c:b4:97:17:3c:35:c9:6b:58:
24:60:2c:b6:ae:03:77:ac:9f:ac:b7:36:86:2c:3a:
ed:8d:6a:5c:12:94:58:8b:f4:fe:00:3b:27:0c:03:
b3:9b:1c:b6:92:f8:a9:88:eb:a7:c7:d4:32:1c:be:
7d:54:81:ce:47:96:67:73:77:27:9d:11:f7:48:c5:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:07:05:94:76:1A:74:A6:54:B4:14:4D:40:0E:6F:C6:20:99:A0:8A
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c8:70:f3:80:14:d3:5e:af:a1:59:75:b3:77:5e:e4:37:1b:
37:1b:ef:14:5e:70:6f:10:f5:12:92:0b:1c:45:d8:6f:89:05:
e7:b0:90:4c:db:b1:4c:df:13:a2:fb:1c:c6:a0:3a:ee:e7:e1:
41:59:46:6c:8c:e2:fb:0a:cb:02:d7:ac:72:bc:35:39:7c:de:
b7:5d:95:38:76:55:41:44:52:72:3f:ab:e3:f1:39:cf:ca:e9:
89:d3:8d:b8:28:96:06:88:d5:52:ee:d1:95:56:25:39:a7:fb:
ed:a1:69:35:58:da:4d:a7:8e:8c:33:7a:14:00:29:33:56:c3:
f8:f9:ba:79:40:83:f5:2a:ff:a3:87:97:a7:a1:a6:9f:09:4b:
08:33:81:ba:bc:6a:49:93:cd:7b:6c:d0:e2:70:4b:e3:87:24:
0c:df:ba:65:6a:0a:12:e6:a3:90:78:92:15:35:1e:09:15:d7:
72:9b:f2:2c:81:5a:4b:30:87:4a:c9:41:6b:83:bc:15:d2:a3:
9b:48:e7:bb:fa:56:f6:b6:47:d0:ee:55:3f:0c:af:9a:2a:f9:
16:72:97:bc:22:fe:17:34:62:ce:2b:9d:0c:f0:69:87:ec:b0:
c6:80:16:68:06:b9:c9:39:99:ff:8b:68:21:62:1a:7c:6a:1f:
fa:03:7b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:26:12 2026 by rpki-client