Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
File: z9LUeU5busDjTJ0BibJu8UcViiM.mft (raw, json)
Hash identifier: aRv41L2gyAWGFG6CBH1hHJyzRRVzAcmCgx2dYKPl6ng=
Subject key identifier: D2:73:EE:37:50:63:0C:35:4B:87:1F:2A:CD:4B:3D:AB:6A:E0:47:D1
Authority key identifier: CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
Certificate issuer: /CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Certificate serial: 01A0D91707FF1066431DD42E3EEFA979D5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
Manifest number: 0243
Signing time: Fri 25 Sep 2026 15:02:40 +0000
Manifest this update: Fri 25 Sep 2026 15:02:40 +0000
Manifest next update: Sat 26 Sep 2026 15:02:40 +0000
Files and hashes: 1: e9ESBbCpXLampxKyfROKHhSNrlQ.roa (hash: tD7v+u/DQGlM+A9s6n4BBi5LAYT9sFcm9HvPxsWUOOU=)
2: pUcV2CDMwVfdHgvxvC-AB5Vhfog.asa (hash: /YYL6jpXO8Tk4JIAMqivU9OX7v7luqvFgZ3LC4roaSQ=)
3: z9LUeU5busDjTJ0BibJu8UcViiM.crl (hash: eSdrAH3ZJq2D/uxPr7pAZ4AT902s+WB3PgioUHhxO2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:07:ff:10:66:43:1d:d4:2e:3e:ef:a9:79:d5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Validity
Not Before: Sep 25 15:02:40 2026 GMT
Not After : Sep 26 15:02:40 2026 GMT
Subject: CN=d273ee3750630c354b871f2acd4b3dab6ae047d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:58:22:55:f8:75:3b:32:f0:02:3c:37:d2:
c1:d1:5a:32:b3:de:8c:c1:55:63:7c:3b:9d:ba:b0:
df:7f:c4:26:a9:94:61:fe:0f:cc:d9:66:03:45:c7:
6d:50:f3:10:aa:ab:a5:da:2b:e7:10:af:25:ce:01:
f8:40:52:03:03:8a:1f:0b:6f:c1:22:fe:bf:ca:5a:
90:c1:dc:4f:e5:43:e4:58:fb:70:c4:28:58:25:fa:
29:ed:f4:33:08:09:f7:fd:0f:2a:cb:be:2e:77:1b:
86:17:04:22:c9:5c:06:31:94:5e:ab:e9:01:03:d7:
8b:d9:6e:68:fc:d7:b6:61:75:26:18:40:ff:c2:e7:
51:d2:17:b7:65:ec:09:e5:96:50:c2:db:53:4a:93:
5d:9a:b7:c2:86:21:89:d3:14:67:22:06:6b:0f:0a:
c6:4b:2b:e2:5f:53:a6:96:b8:f3:7f:2e:b0:cb:db:
5a:7b:54:20:a5:98:4a:28:c9:14:92:5c:a9:63:71:
5a:78:17:78:cf:b7:a8:17:be:b7:97:ac:27:67:ba:
e3:62:8b:6a:58:0c:da:42:f1:d7:ff:d9:45:5d:a8:
7e:45:47:70:f7:e1:4e:6e:89:e1:ff:81:c0:72:97:
d3:71:64:79:d6:c8:73:81:3b:6d:ba:f1:a3:7d:3a:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:73:EE:37:50:63:0C:35:4B:87:1F:2A:CD:4B:3D:AB:6A:E0:47:D1
X509v3 Authority Key Identifier:
keyid:CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bd:46:95:44:ec:b1:09:b0:50:a7:ff:9e:e1:79:fd:69:49:
e0:0c:46:f2:06:20:fc:56:d9:62:23:d5:25:22:c5:15:a2:47:
69:d2:1b:88:04:5e:4f:13:9b:b1:eb:fc:da:6b:a0:9d:d5:01:
3f:83:6e:dc:f3:4c:73:90:09:03:0b:a6:8e:4c:40:1a:6d:04:
6d:5e:f4:34:4e:aa:a2:4e:a4:4c:c5:17:fd:3b:b9:52:2d:3e:
b8:8d:87:b6:93:b5:e9:b1:b5:80:87:f7:5a:f3:15:a1:4c:90:
4c:2d:81:fd:71:e9:f0:b7:42:ce:5d:96:02:87:3d:5f:de:d2:
7f:0f:8e:9f:0c:41:2d:f1:79:c2:6a:2d:df:dc:17:16:e4:ad:
06:65:64:17:08:8a:10:ef:ca:03:11:b6:86:f8:c9:db:ba:93:
e0:6c:79:11:50:a6:90:a4:c9:cf:42:68:c8:b6:9f:20:72:c1:
af:a4:ef:f2:17:03:26:f7:8e:84:37:c2:38:05:93:22:9c:6e:
6f:53:ec:7b:82:55:f0:30:e4:20:af:a3:c2:f6:8e:ae:c8:c7:
8a:00:c1:e0:6e:e8:1b:d7:c2:1f:a9:95:d8:3d:07:e7:1b:9b:
3f:c5:58:18:ad:87:66:23:30:41:16:76:8a:3c:17:98:eb:5f:
46:24:a5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:39:16 2026 by rpki-client