Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: 9OamXN1Nbt2qM/pXWOl6VRqMX4B/BwPzeET5T/1b/0A=
Subject key identifier: DB:B2:63:AA:67:DA:D5:A6:1D:AC:63:10:0F:EA:80:8D:EC:68:68:7C
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 01A0D94D2E9C14956C6F57AEFE1F04A7E209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 1A8A
Signing time: Fri 25 Sep 2026 16:01:49 +0000
Manifest this update: Fri 25 Sep 2026 16:01:49 +0000
Manifest next update: Sat 26 Sep 2026 16:01:49 +0000
Files and hashes: 1: 1rZ9lvq4z5GUrK1ubBuPHqaf3k0.roa (hash: jv0midgpTJeUMCUfbjDUlxTZCO6xs8bC/AB49kze9Rk=)
2: JC6b9AAY2rwkq1FORl5Abxr-m1w.roa (hash: TFvVsSvQ0TaMuOye+x7ZRV34hFmw1XW7pj5/x7K+d10=)
3: Sc1QWh25fZ2WCVxN9P7nXfF4Dbw.roa (hash: AVQZ3170NwpYtqDp6pjYSFTDsaPxlAStWi6EibsrWmc=)
4: c64_xwrokSnmr0o0Rxc1LXbWsks.roa (hash: D7VOIgGxMLMKLMuDjwZq55SJloCAKPMrVwWrZEo0Y/o=)
5: yTBqPRFUVfKdzLterimo113_dkQ.roa (hash: qNzAUGKwPF55HCrIzh2nSa4zmob6mdMkWCPw4jO7Mk4=)
6: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: BAPoMGeHPZLrRzTSfbhGOzbpayH0SXRPey31rF/lcl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:2e:9c:14:95:6c:6f:57:ae:fe:1f:04:a7:e2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Sep 25 16:01:49 2026 GMT
Not After : Sep 26 16:01:49 2026 GMT
Subject: CN=dbb263aa67dad5a61dac63100fea808dec68687c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8c:7c:c1:89:7f:cf:38:ed:ff:e7:dd:03:aa:
98:db:bb:dc:2a:62:42:f5:89:62:84:1d:a4:7b:ed:
9b:f0:47:3e:22:e9:75:a9:f3:9c:f8:c2:92:f9:f5:
8c:42:75:17:b3:8a:ae:e0:86:f2:72:db:2f:6a:23:
85:03:d7:4b:53:fb:0b:3b:b3:8f:91:3f:53:5b:ad:
cf:bc:10:1a:1d:08:2c:1b:3c:96:af:48:af:5f:48:
b4:4f:e1:8d:06:cf:9c:dd:78:86:5c:8b:ed:55:ca:
91:b9:bf:46:ee:71:93:c5:1a:ed:95:20:9d:7f:39:
19:ce:39:e4:4c:a0:82:96:3c:f0:b6:b7:e9:36:bf:
aa:90:78:54:e7:2c:84:38:9f:d6:2f:ba:b3:ae:3a:
81:ca:9d:b7:8e:3a:3f:61:49:c7:3e:2a:59:c0:4e:
6e:3b:2a:99:1d:56:aa:20:5d:67:68:6f:b6:df:ed:
b4:00:e8:de:dd:3a:fb:b0:8c:c5:b5:5d:2d:a3:a9:
54:b7:be:d3:01:f9:85:47:81:2c:24:32:cc:41:e8:
70:56:a5:b9:54:f2:d9:d2:1e:23:f7:6e:14:b7:8a:
e8:63:11:55:d6:7a:11:8b:9c:05:88:9c:9e:1e:f3:
3d:40:8c:89:24:a4:19:bf:71:ce:75:e6:14:84:e7:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B2:63:AA:67:DA:D5:A6:1D:AC:63:10:0F:EA:80:8D:EC:68:68:7C
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b3:95:a3:f9:84:b0:06:94:25:c2:ad:03:52:ab:4a:91:8f:
0c:23:3f:38:de:b7:fb:dd:1f:32:a8:a3:8a:d0:8a:08:55:9f:
30:a6:08:4a:e2:87:86:a9:1e:c7:f7:59:03:78:79:21:aa:1d:
a3:e1:6b:1b:75:53:17:3a:cd:a3:26:e6:ba:df:49:20:85:d2:
c5:d2:ea:87:ec:76:9b:82:ee:a7:34:20:6b:f4:f2:32:9a:ad:
54:a6:50:d9:c3:dd:3d:4d:21:08:23:8b:d7:95:50:fc:59:3a:
c8:d5:2a:87:1e:18:ab:db:3e:cf:45:d3:c4:17:76:35:76:8a:
9c:3f:f8:49:c1:71:d5:71:40:5b:1f:48:b8:e9:6e:6f:19:d0:
b5:11:03:fd:ee:ae:3b:69:4f:2f:d8:f1:ae:1a:88:1e:9e:04:
79:25:64:db:9d:ab:6f:3a:20:8c:6b:0b:22:c4:bb:78:7d:78:
48:0c:4d:50:8c:0f:d4:1d:93:04:3b:26:21:f4:e8:d9:f5:4f:
60:63:d5:89:f8:a9:0b:86:20:37:bd:d0:0a:a2:d7:0c:6a:1c:
fa:72:b4:10:90:86:47:b7:8c:ec:9d:65:41:e0:c6:ac:a8:63:
8b:05:0b:41:bf:54:a8:d8:65:23:b4:a8:67:d2:8a:b4:3d:db:
19:2a:fc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:57:03 2026 by rpki-client