Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: Qu6e8J18pjtc0JMbPs+g5dYkS4sfH75nycCaE2kQAXM=
Subject key identifier: DA:02:47:05:F9:B2:E8:EC:0A:CB:7B:B9:DD:00:2A:D6:AC:10:3F:5B
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 01A12D330B1E03D90B6E0E433A05C0B196C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 23:01:22 +0000
Manifest this update: Sun 11 Oct 2026 23:01:22 +0000
Manifest next update: Mon 12 Oct 2026 23:01:22 +0000
Files and hashes: 1: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: AU+DcF56iaUMewT8NbuzBCsTIXT/9UuQArphZYspONQ=)
2: mjYrOZuE7NERgZ0UM4YBqgcrJ0k.roa (hash: zm8SvAgNh+tsDlRXHMlAw5DptKIdz9z91tV1dCDIl7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:33:0b:1e:03:d9:0b:6e:0e:43:3a:05:c0:b1:96:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Oct 11 23:01:22 2026 GMT
Not After : Oct 12 23:01:22 2026 GMT
Subject: CN=da024705f9b2e8ec0acb7bb9dd002ad6ac103f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:51:22:39:00:21:f9:18:f5:9e:ae:25:a9:ed:
6a:b7:9b:c3:5f:d6:cd:78:a8:b4:f8:ea:2c:56:f4:
6a:4a:8b:6c:cc:0d:02:98:97:e5:a4:37:63:dd:7b:
f0:28:4c:db:d7:15:62:7c:e9:3f:89:e6:8d:bf:ae:
02:94:73:5c:03:6d:ec:dd:8c:f3:c3:6d:e1:12:5c:
43:4a:38:a9:4c:b9:97:34:70:83:b1:db:1c:9e:06:
7f:33:55:a7:84:96:bd:8b:8d:0f:dc:db:97:5c:2b:
4a:90:f0:d9:4f:44:e3:a3:aa:25:40:94:e1:c6:59:
83:ad:7b:fd:bd:49:a4:7c:31:38:ba:32:61:c9:c2:
8d:3f:86:8d:2d:0b:ee:e8:71:b0:a8:48:ca:e8:90:
ba:36:6b:d5:e2:df:eb:5c:8f:58:96:43:4b:da:61:
ee:0c:85:2e:99:c4:9b:63:a9:21:8b:ae:ec:7f:de:
c4:0e:be:7b:cd:a3:2a:a0:a5:12:83:ec:c1:35:b5:
9a:83:b8:19:4a:ff:4f:fd:7f:22:bd:b3:df:dd:ca:
f9:c4:1d:b8:ae:88:bc:d4:fa:06:36:ce:9f:5d:0c:
c6:6a:ac:d4:13:a1:b0:a3:69:f3:6d:22:52:84:07:
c9:09:da:c7:18:41:4f:7a:58:b5:f3:6e:50:a0:78:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:02:47:05:F9:B2:E8:EC:0A:CB:7B:B9:DD:00:2A:D6:AC:10:3F:5B
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:df:e3:33:a4:bc:cd:a9:fc:f9:37:6b:aa:dd:31:4d:b5:53:
bd:7e:cb:53:1f:82:bf:e8:32:6d:e5:72:09:b8:31:47:61:db:
34:a5:b4:65:39:30:1e:95:a9:91:b3:d4:b9:82:0c:70:50:66:
d4:bc:4a:23:35:6d:82:63:97:bd:4a:60:8d:8b:a3:e1:5e:17:
e3:fd:0a:24:e2:ce:ea:fd:47:c8:9f:1b:ec:57:fe:6d:8b:5b:
70:e0:f6:f4:8f:a4:f8:ed:19:72:d8:49:e9:82:6f:06:36:49:
d1:25:e6:a7:17:bc:38:f4:38:07:57:b3:f2:4f:95:ba:68:d1:
a5:33:dc:3a:43:9a:87:d7:87:3f:b8:5b:a5:07:9f:53:c3:62:
78:d6:23:da:38:87:a2:1d:88:d5:8c:c1:83:cf:88:a5:2d:6c:
5a:df:fe:5a:f1:b9:0b:51:d5:a6:09:cc:2f:09:bc:86:3b:b2:
93:c5:bc:26:34:a1:9c:9d:a7:e2:14:b2:72:2c:50:11:20:91:
91:e2:ec:70:18:2a:0b:79:36:d6:01:4e:31:6c:2c:36:f0:d3:
34:29:44:44:fd:d5:aa:94:87:0b:18:b8:c0:9e:a6:7c:b1:4f:
f9:40:75:95:33:03:db:51:0a:55:81:cd:17:c6:87:ea:fa:e0:
5c:ed:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:33:53 2026 by rpki-client