Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: 3KgOK2L9ohe55Jdq3ehTfIBSjDGlUfAXG2Y4c2/4cNM=
Subject key identifier: 44:DC:18:67:42:CD:24:99:3C:7F:0B:43:71:02:53:7C:4E:24:AC:8A
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 01A0F6E92D532444C5BEA1913D5081677FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 13C2
Signing time: Thu 01 Oct 2026 10:01:11 +0000
Manifest this update: Thu 01 Oct 2026 10:01:11 +0000
Manifest next update: Fri 02 Oct 2026 10:01:11 +0000
Files and hashes: 1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: 4zFpdYwCKTEdJndStOOHhKv+sTzhMfDPcmfNmsTqbRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e9:2d:53:24:44:c5:be:a1:91:3d:50:81:67:7f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Oct 1 10:01:11 2026 GMT
Not After : Oct 2 10:01:11 2026 GMT
Subject: CN=44dc186742cd24993c7f0b437102537c4e24ac8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:8d:0c:29:0d:b8:08:08:e7:af:f9:38:46:
30:07:96:40:e7:70:6e:9a:7a:cb:65:80:e5:1e:cd:
9d:2a:07:54:f3:6c:08:47:93:8e:7b:53:4f:3b:e2:
bc:88:bf:9d:69:2e:2f:4e:a4:c1:2b:01:e2:28:ea:
0c:f2:2b:e9:9e:e1:d6:a1:8e:21:45:b0:04:cd:47:
f7:2e:48:44:13:7c:44:fa:18:9b:51:74:b8:0d:48:
9b:84:25:6d:a9:e4:37:3c:a6:51:d3:7e:0c:60:db:
23:aa:27:3b:5e:9a:65:ef:22:c2:15:c3:1b:fa:70:
fd:98:9a:51:3c:5b:26:eb:da:b2:ee:8b:ff:bc:94:
98:56:70:0d:67:7c:38:68:77:ee:31:85:c0:0e:64:
85:a5:5e:bf:79:90:9a:af:d7:d4:f6:96:f6:d0:46:
f9:e8:1c:9c:e5:f7:cd:ea:bf:73:0b:ac:bc:fb:49:
ee:68:d6:dc:da:af:d8:57:e6:7c:d3:a3:82:d7:fd:
c9:12:b7:2d:f7:c6:9a:e6:e0:bb:26:0c:90:13:bb:
f0:13:55:a4:41:d5:f2:a2:65:7d:23:b8:a2:3d:aa:
b1:2f:7f:38:14:bb:57:6b:6d:e4:de:74:42:d3:93:
df:c9:5b:36:97:45:ee:96:ca:59:2c:29:00:21:3c:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DC:18:67:42:CD:24:99:3C:7F:0B:43:71:02:53:7C:4E:24:AC:8A
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:91:62:42:19:f8:60:e3:3f:09:5a:26:37:dd:5b:33:75:69:
8e:72:0e:00:33:2e:db:2f:95:c5:a7:f5:32:e3:fe:bb:34:39:
ee:94:1e:16:5f:93:b2:ff:94:38:cb:78:b9:72:df:54:56:4c:
c6:3e:0f:c4:42:53:04:1f:e6:ba:b5:ce:98:90:55:86:98:97:
12:5c:51:c1:3d:ef:11:08:8f:c0:06:31:12:cb:d3:c3:ca:7d:
70:dd:a6:0e:67:4a:06:56:7c:d6:4d:a7:be:22:4d:47:05:8b:
db:20:5f:79:7a:7e:1e:e8:19:76:cb:36:48:38:f6:af:5d:56:
cf:68:b6:ea:01:70:2c:06:83:da:fc:38:dc:d6:f2:55:c1:3b:
34:d5:fa:c1:a4:93:d4:c0:07:78:c3:bd:fb:93:20:48:be:1f:
dc:c6:a6:f9:48:bd:cf:35:de:c2:60:d2:4a:6c:f8:4b:2e:c9:
cf:42:df:9c:79:89:61:54:4b:f5:22:69:07:b8:6b:89:ce:7a:
45:27:f5:7c:29:1d:6a:89:9c:c0:eb:51:d7:1b:5a:ab:b7:ec:
5d:32:79:ec:3d:dd:74:d5:07:b3:08:4d:49:36:dc:e6:c2:12:
3e:cb:7c:ad:20:21:60:34:79:12:fb:b5:33:14:66:0f:ed:08:
33:46:2f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:14:31 2026 by rpki-client