Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: pa57HkI+9qQvQSxrtaLw3Xq5dlYiNfGc5ckK210PM8o=
Subject key identifier: B9:BA:BF:10:8F:DE:6D:C2:1D:56:8A:4A:B0:73:0A:F9:A0:A2:67:1B
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 019F9248DFB0A491467CA40E7744522E1947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 089D
Signing time: Fri 24 Jul 2026 04:01:17 +0000
Manifest this update: Fri 24 Jul 2026 04:01:17 +0000
Manifest next update: Sat 25 Jul 2026 04:01:17 +0000
Files and hashes: 1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: sJz48NxEtEzkpHqmS1w9ZQ74hI41jktb5oEGPNc/Fd8=)
2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:df:b0:a4:91:46:7c:a4:0e:77:44:52:2e:19:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Jul 24 04:01:17 2026 GMT
Not After : Jul 25 04:01:17 2026 GMT
Subject: CN=b9babf108fde6dc21d568a4ab0730af9a0a2671b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:19:b7:e6:f7:4e:e6:de:47:b9:dc:65:fc:
b9:51:51:96:43:cf:7b:db:76:b5:58:20:15:90:48:
c2:53:bd:3b:a9:5b:74:f2:12:54:fd:e8:30:e6:38:
0d:3a:ce:20:a0:b8:da:4f:c0:f3:1e:22:d3:7f:18:
24:da:4f:16:a8:7a:b3:15:1f:6a:71:82:d2:cc:a1:
46:64:62:5b:e4:4a:c6:c3:d4:79:c6:4f:fb:f0:f2:
29:2e:4b:09:95:6e:bb:1f:51:df:7a:76:7b:0d:41:
ec:11:29:58:d0:09:57:6f:50:3e:9a:7d:00:3b:49:
9f:31:34:3b:7b:b9:70:8b:3c:57:56:90:df:d3:b1:
dd:c1:8e:24:e4:99:1d:35:e6:95:12:93:3a:5f:a1:
69:85:39:39:8c:e5:db:45:1e:a0:74:64:d3:c0:b5:
cd:b8:92:a6:cb:2b:10:82:27:fe:88:25:5a:6d:a6:
0a:dc:04:d8:c8:fe:c4:1c:d1:fd:91:d5:c9:a2:ef:
07:bd:ee:f2:a8:2b:00:71:28:25:93:12:37:89:56:
74:3d:7f:5d:a9:42:52:32:2c:12:5c:2f:bf:01:63:
3d:2d:b4:4e:55:77:03:bc:15:c8:7e:89:46:83:7e:
d8:6e:34:e3:86:cc:5d:b4:9c:c8:cc:21:49:dc:0b:
75:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BA:BF:10:8F:DE:6D:C2:1D:56:8A:4A:B0:73:0A:F9:A0:A2:67:1B
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e8:1c:46:74:fb:ae:43:96:8f:6c:81:b6:e0:66:0c:18:a2:
3a:fe:d9:c1:43:95:f7:91:39:1b:f6:ad:e1:f8:ee:37:e8:de:
54:9e:6a:aa:36:37:ba:13:29:76:78:5b:3d:4f:13:29:69:e1:
eb:4e:fd:8d:2c:72:cb:82:80:5a:b8:a1:cd:87:ee:17:45:c4:
63:ec:32:1d:61:ec:74:b2:d5:9f:0d:a8:8a:45:04:1f:7d:38:
b0:fc:e9:6b:20:2b:96:b4:4b:c0:31:46:ec:4e:a2:d1:33:99:
d0:fa:c7:60:73:f8:5a:a3:23:00:b3:4a:a1:28:62:46:b1:2c:
92:75:90:60:0d:65:d9:39:56:7d:24:6e:9d:2c:2b:f3:fe:9c:
bd:6e:bc:27:4c:7e:2b:4b:0e:36:d7:d8:cb:7e:89:c1:aa:7e:
33:a3:50:ad:33:64:e8:ab:af:e1:39:84:c8:e2:e3:c0:ca:82:
d5:6d:43:97:19:13:30:b8:33:5c:53:77:ed:03:1b:ba:de:c5:
71:cc:b9:29:f6:6b:5b:65:d9:1e:90:49:f2:d6:29:6d:0f:76:
c4:87:11:d9:c1:4a:bc:90:a4:1e:d2:c9:28:31:3b:77:f1:26:
2d:b5:84:65:4e:53:08:16:8a:96:c0:e7:4b:87:36:3f:86:91:
6f:f4:6d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSN+wpJFGfKQOd0RSLhlHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzM5ZDM4ZjQ2OGQ5YzEyZDhmZjUwZDViOWY5MjY1YTFl
NWE4ZDAwHhcNMjYwNzI0MDQwMTE3WhcNMjYwNzI1MDQwMTE3WjAzMTEwLwYDVQQD
EyhiOWJhYmYxMDhmZGU2ZGMyMWQ1NjhhNGFiMDczMGFmOWEwYTI2NzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZYZt+b3TubeR7ncZfy5UVGWQ897
23a1WCAVkEjCU707qVt08hJU/egw5jgNOs4goLjaT8DzHiLTfxgk2k8WqHqzFR9q
cYLSzKFGZGJb5ErGw9R5xk/78PIpLksJlW67H1HfenZ7DUHsESlY0AlXb1A+mn0A
O0mfMTQ7e7lwizxXVpDf07HdwY4k5JkdNeaVEpM6X6FphTk5jOXbRR6gdGTTwLXN
uJKmyysQgif+iCVabaYK3ATYyP7EHNH9kdXJou8Hve7yqCsAcSglkxI3iVZ0PX9d
qUJSMiwSXC+/AWM9LbROVXcDvBXIfolGg37YbjTjhsxdtJzIzCFJ3At1FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm6vxCP3m3CHVaKSrBzCvmgomcbMB8GA1UdIwQY
MBaAFGfDnTj0aNnBLY/1DVufkmWh5ajQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2Ut
MjdlOWJlYjMyOTRiLzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2UtMjdlOWJlYjMyOTRi
LzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+gcRnT7
rkOWj2yBtuBmDBiiOv7ZwUOV95E5G/at4fjuN+jeVJ5qqjY3uhMpdnhbPU8TKWnh
6079jSxyy4KAWrihzYfuF0XEY+wyHWHsdLLVnw2oikUEH304sPzpayArlrRLwDFG
7E6i0TOZ0PrHYHP4WqMjALNKoShiRrEsknWQYA1l2TlWfSRunSwr8/6cvW68J0x+
K0sONtfYy36Jwap+M6NQrTNk6Kuv4TmEyOLjwMqC1W1DlxkTMLgzXFN37QMbut7F
ccy5KfZrW2XZHpBJ8tYpbQ92xIcR2cFKvJCkHtLJKDE7d/EmLbWEZU5TCBaKlsDn
S4c2P4aRb/RtjA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:16 2026 by rpki-client