Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
File: z9tEWe8iRa2EkR7v4IdafZM1xdg.mft (raw, json)
Hash identifier: tKJKIbppnVbAQr8vFF5OUvfu4I4C7nd7QH2J7hpjLvg=
Subject key identifier: DA:60:D9:B4:DD:D6:02:9E:AB:39:17:B0:51:78:14:DB:DB:AE:74:3B
Authority key identifier: CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8
Certificate issuer: /CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
Certificate serial: 01A0ED0BCB9A777389BE0A09192731485B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 12:02:48 +0000
Manifest this update: Tue 29 Sep 2026 12:02:48 +0000
Manifest next update: Wed 30 Sep 2026 12:02:48 +0000
Files and hashes: 1: 5Ne0J2AnsBb3KqrsSaZmYRS_sJ8.asa (hash: tSOxg/159dhYNU00jXQeCM0SgZ81uaakuIVv4gHhNvQ=)
2: z9tEWe8iRa2EkR7v4IdafZM1xdg.crl (hash: 5c4PMW2gylu9dPCQmJkyFDjZ27WsQ5XJ9j0H99nni7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:cb:9a:77:73:89:be:0a:09:19:27:31:48:5b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
Validity
Not Before: Sep 29 12:02:48 2026 GMT
Not After : Sep 30 12:02:48 2026 GMT
Subject: CN=da60d9b4ddd6029eab3917b0517814dbdbae743b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:87:60:39:fb:1c:b4:f0:10:dc:34:ea:6f:
5f:cc:ae:56:5e:b0:19:f1:e6:9e:31:08:f7:c7:1a:
8e:3a:19:67:c1:43:27:b1:ee:fc:5a:65:64:3e:11:
6b:9b:75:09:b1:f5:7b:af:e5:3a:26:93:98:01:b1:
fd:52:b1:29:1d:0f:51:8b:1e:a7:55:f2:90:bf:b7:
e0:65:08:25:1d:1f:11:05:9c:97:f5:a9:cd:7b:a3:
7b:1c:06:b5:9d:6d:88:85:2a:80:46:77:e7:37:7d:
3b:a8:06:64:e7:7f:cf:87:79:cb:17:60:07:07:e0:
1a:1b:21:ef:54:74:56:ce:7a:db:94:37:40:76:97:
71:36:5a:e9:0e:dd:01:22:f7:29:6d:19:80:6d:90:
ff:19:6e:e4:97:e9:5f:43:88:0b:d4:48:2d:17:76:
f4:fd:e7:c9:5b:77:f7:ab:60:d9:5e:d6:6f:7c:60:
d4:41:e9:78:00:02:c7:e2:c3:03:c1:bf:1d:4f:64:
d3:14:f6:28:b0:41:06:37:ed:c1:ae:ef:a0:d7:65:
f1:8a:35:25:8f:31:20:21:8e:d8:62:79:c0:1c:2a:
09:96:21:99:8a:7a:8d:eb:04:d0:59:0e:a1:34:fd:
d6:34:4a:b7:cc:15:3d:53:9c:e4:f0:83:aa:1c:5d:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:60:D9:B4:DD:D6:02:9E:AB:39:17:B0:51:78:14:DB:DB:AE:74:3B
X509v3 Authority Key Identifier:
keyid:CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:05:68:e1:ed:ad:47:26:a5:83:f5:e6:19:f2:eb:27:56:a0:
32:28:ac:a6:c9:3f:d1:8f:03:30:e8:ba:36:d9:65:b2:70:18:
9c:40:9a:9b:b7:41:3f:8e:48:98:98:45:8d:64:b6:ad:70:6c:
b2:c9:57:47:2c:52:c1:1f:ea:56:35:d8:82:50:a7:c0:67:6d:
a5:b8:5e:c7:6f:63:b4:73:0a:fc:1b:9e:05:de:b4:3a:4c:6b:
00:48:2c:bb:59:e5:33:84:1f:42:1f:c5:bd:7c:25:88:bb:03:
86:de:5a:9c:e3:95:c8:b1:9c:2c:60:3f:25:86:9e:9b:4d:b0:
02:b3:2e:8e:04:bb:b8:a8:39:a7:e4:0f:cb:46:81:44:fd:03:
1d:09:a2:17:51:f2:11:7f:0f:74:ae:4c:e4:ce:b7:ef:ca:39:
31:96:b6:1d:62:79:ed:ac:ab:96:07:e5:b2:63:38:fd:37:37:
6a:42:30:7b:55:b0:b8:f1:36:5e:a0:65:fc:81:18:f8:70:5c:
22:ef:3e:b4:a8:74:70:ad:5a:08:36:1d:9c:3e:cb:f1:34:31:
70:79:75:fd:88:5f:5b:f4:13:10:1a:12:83:90:9b:d3:a6:4a:
07:b8:f1:df:65:02:68:f7:49:f1:5d:2f:5f:99:82:06:d2:de:
ca:43:62:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:38:12 2026 by rpki-client