Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
File: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json)
Hash identifier: KKEbd6r2hoxx1tP41KNExh68WWRoJz0W3Pwg01rFiSQ=
Subject key identifier: A1:64:90:A9:6B:9A:7A:7B:50:CE:84:D1:72:29:C9:70:C9:4D:92:21
Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
Certificate issuer: /CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Certificate serial: 01A0DD2A3C49454D3AF75F649EE96AFD6009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
Manifest number: 09CE
Signing time: Sat 26 Sep 2026 10:02:07 +0000
Manifest this update: Sat 26 Sep 2026 10:02:07 +0000
Manifest next update: Sun 27 Sep 2026 10:02:07 +0000
Files and hashes: 1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: xLfuGrfMKpot0JxnZqGsfcFdEKGTWKFbIzSsSJko8Ac=)
2: lD0Wwhw0gpihU_arbUQK_IQqs4c.roa (hash: 6HIhfJOZXKPxqB9WM2oez5Dgrzz0kzJpo4+10uPExmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:2a:3c:49:45:4d:3a:f7:5f:64:9e:e9:6a:fd:60:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Validity
Not Before: Sep 26 10:02:07 2026 GMT
Not After : Sep 27 10:02:07 2026 GMT
Subject: CN=a16490a96b9a7a7b50ce84d17229c970c94d9221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:fa:71:e1:20:c1:d2:de:73:2d:9a:8a:3f:
a2:df:b2:ef:ae:9d:01:b9:7c:d2:4a:ed:eb:41:d1:
79:65:2c:5e:9d:ac:0d:ba:f4:ee:a6:1d:42:32:0b:
30:6b:1f:2a:2a:30:af:4d:bd:8a:05:4b:38:d6:b6:
13:72:2c:54:23:77:ca:05:0f:41:3f:7a:4f:4a:3e:
41:19:76:c9:0a:d7:2f:f7:a9:25:86:3b:df:7d:05:
09:6e:c8:17:8f:a9:5d:7d:08:f5:23:6a:58:f9:2c:
f7:46:84:fc:3f:b6:d1:2e:c3:22:d8:82:fc:c7:b3:
90:87:b2:0f:c6:0b:3a:58:a2:5d:25:f3:c1:db:1e:
66:95:10:90:56:ad:26:89:ed:3f:ef:14:50:a8:d7:
51:ef:92:33:27:92:a0:5f:2f:c0:fe:05:ae:b9:58:
16:37:0f:4d:5f:4e:5e:08:4e:d7:6f:0a:d0:28:65:
ba:38:c9:da:37:e8:bb:b9:23:3f:36:c3:42:02:b4:
c3:7d:9c:25:42:7e:9c:69:1c:49:55:34:5e:92:5e:
5d:f4:24:ea:6c:3b:71:9d:79:ea:72:0b:f2:dc:8d:
06:88:29:dd:e8:3b:04:7e:f3:60:f4:dd:b2:be:fd:
7a:54:0a:5f:d7:30:e0:d1:ec:68:3c:c9:25:26:34:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:64:90:A9:6B:9A:7A:7B:50:CE:84:D1:72:29:C9:70:C9:4D:92:21
X509v3 Authority Key Identifier:
keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:eb:51:d0:79:8b:9e:f6:b4:89:b8:e8:81:93:13:92:8d:2c:
70:4d:6a:8f:4d:68:04:51:dd:e0:75:fc:d4:a8:f4:aa:c7:12:
43:a1:7c:dd:e9:da:77:4e:f0:ce:96:d2:50:e1:d7:b8:c7:10:
f4:00:b2:d8:bd:86:82:0d:cb:c2:60:95:b9:08:8a:7a:3c:2c:
11:b6:29:1a:9a:52:72:5a:16:55:64:6c:98:f5:43:0a:e0:37:
ab:9a:44:9f:5f:10:8d:ad:d4:f1:ae:41:77:49:28:93:91:48:
30:da:00:c2:5e:3d:6c:7e:c6:69:10:9e:98:25:14:fe:2c:98:
8d:19:35:d7:f5:14:73:2a:6c:a2:70:86:36:26:2f:eb:63:75:
61:03:73:9d:6d:ec:f5:3d:80:c9:38:75:35:98:47:3f:ba:cd:
34:47:11:b6:12:d7:72:75:df:1c:1e:d8:9c:7f:09:be:6d:f6:
f8:be:24:ee:3e:86:cd:c2:40:f2:02:b5:b0:ee:86:da:c3:52:
89:4c:b0:90:79:46:8e:cb:8a:7f:ba:f9:fc:4c:af:75:4e:cb:
60:1d:b0:87:03:d2:e6:81:e7:9b:7f:41:8a:6b:b3:3f:5e:66:
20:73:4c:33:6c:e6:3a:31:14:b5:58:ae:b3:51:f5:d9:01:13:
9e:ba:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:08:38 2026 by rpki-client