Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/z4bF9V3osGJjxzFZc0qQ9Ana_qM.mft
File: z4bF9V3osGJjxzFZc0qQ9Ana_qM.mft (raw, json)
Hash identifier: HfTr8UI/4hyb7IBDgyXFSRO2QZ17dkKFbNhH3Ap9cCM=
Subject key identifier: 02:59:4B:14:C9:53:75:2F:B1:29:CE:52:66:57:A6:F2:05:4A:96:96
Authority key identifier: CF:86:C5:F5:5D:E8:B0:62:63:C7:31:59:73:4A:90:F4:09:DA:FE:A3
Certificate issuer: /CN=cf86c5f55de8b06263c73159734a90f409dafea3
Certificate serial: 01A0D2379DB3F115D8BD29584FC103F573CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4bF9V3osGJjxzFZc0qQ9Ana_qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/z4bF9V3osGJjxzFZc0qQ9Ana_qM.mft
Manifest number: 44
Signing time: Thu 24 Sep 2026 07:00:55 +0000
Manifest this update: Thu 24 Sep 2026 07:00:55 +0000
Manifest next update: Fri 25 Sep 2026 07:00:55 +0000
Files and hashes: 1: ojp5-HwQMF1HXCk7sSxScc3H8b4.roa (hash: 8kwA2+tIyr7WfG/j5TTud5fWfFsITm50RXSoMpWLbas=)
2: weNO45GUCwTuBMl02Hs7MGyLIDA.roa (hash: UHoWgJ77ysJuzj53yeCGNQqXD5+nHW0LaScWNZEdWvc=)
3: z4bF9V3osGJjxzFZc0qQ9Ana_qM.crl (hash: 6gX+EUZ/BwMbPR547iRtxIgq2iAv00dPkvuCsFSVnlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/z4bF9V3osGJjxzFZc0qQ9Ana_qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/z4bF9V3osGJjxzFZc0qQ9Ana_qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4bF9V3osGJjxzFZc0qQ9Ana_qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:9d:b3:f1:15:d8:bd:29:58:4f:c1:03:f5:73:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf86c5f55de8b06263c73159734a90f409dafea3
Validity
Not Before: Sep 24 07:00:55 2026 GMT
Not After : Sep 25 07:00:55 2026 GMT
Subject: CN=02594b14c953752fb129ce526657a6f2054a9696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:36:5d:ae:2d:d4:3c:38:9f:9c:3b:b2:8d:
c6:99:99:ff:63:b7:76:7d:67:e0:42:7e:8f:3d:cb:
30:6e:99:f5:8c:9a:a2:40:8c:31:da:a8:2d:75:61:
9c:b0:6c:3d:7c:3a:4e:57:4c:0c:4a:48:e5:d7:b4:
ee:3c:24:91:9d:b8:65:2d:fa:07:ca:67:96:ba:c9:
e8:84:69:fc:8d:d4:5f:3d:65:b9:70:a4:d2:d5:1b:
9a:72:e1:d8:49:3e:b9:51:88:2f:8b:f6:35:fe:23:
df:0f:4e:fe:af:21:0f:a1:96:7c:ed:b6:99:20:8c:
be:c4:9d:da:84:80:a0:03:44:66:db:ce:a6:37:43:
f2:eb:2b:94:04:a4:10:93:34:a6:8b:5a:32:d3:ac:
60:59:a8:44:af:fb:e7:a7:7b:d4:ff:a0:41:c3:cc:
c2:d1:a7:97:2b:83:f5:41:77:7e:a5:6d:d2:a0:23:
1b:eb:a9:1f:40:80:23:a0:6c:eb:18:f6:15:f2:92:
54:4c:f4:3f:21:f5:21:c4:3c:e5:d3:ce:0d:4c:e7:
91:cd:19:8c:6a:3c:12:5b:15:8d:35:0e:16:f9:a2:
52:56:a3:1f:f3:8c:7b:a3:a4:7c:b3:39:22:74:91:
25:db:62:a9:35:34:dd:a0:43:47:7b:61:ba:11:16:
77:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:59:4B:14:C9:53:75:2F:B1:29:CE:52:66:57:A6:F2:05:4A:96:96
X509v3 Authority Key Identifier:
keyid:CF:86:C5:F5:5D:E8:B0:62:63:C7:31:59:73:4A:90:F4:09:DA:FE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4bF9V3osGJjxzFZc0qQ9Ana_qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/z4bF9V3osGJjxzFZc0qQ9Ana_qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/z4bF9V3osGJjxzFZc0qQ9Ana_qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7f:e7:a4:65:f4:c8:58:c2:37:3d:57:5b:89:f7:3f:38:89:
d4:30:79:e0:94:ca:1d:fe:89:32:38:81:8b:e3:d8:98:78:0b:
3d:0f:f0:e2:46:a5:18:aa:83:cc:6e:f5:b2:92:d1:7a:96:02:
c8:18:8a:40:82:16:5c:ae:4e:d0:5a:21:48:e2:cd:a9:5a:bc:
46:5f:9f:21:ad:38:11:d4:79:86:a3:7e:16:f2:d6:f4:49:4e:
da:c2:50:9d:69:8c:cd:f2:19:a1:96:e6:dd:a0:98:cd:b4:8b:
4e:6e:75:93:73:de:83:62:4d:74:3b:27:c7:9a:21:22:b3:2e:
68:ee:5a:d4:41:9c:76:aa:5e:2b:b1:44:1c:f8:5b:24:e5:58:
cd:d0:05:1e:c1:8d:1b:f3:0b:b6:45:9c:d1:f2:22:ae:4b:53:
48:bf:fa:82:23:94:f7:ba:22:b8:88:70:6f:aa:a7:ed:21:85:
5e:f3:3c:4a:ae:f1:65:50:af:b6:f7:ab:85:02:99:24:28:d5:
4e:af:ce:ad:d7:a5:28:08:6d:50:ff:5d:c0:b4:bf:74:13:6c:
c2:54:d0:a2:1c:e7:26:33:55:3a:b1:b0:20:db:79:99:e9:48:
ee:ce:46:f8:98:03:cc:40:95:63:c6:7e:2f:87:8a:a7:54:ee:
49:29:59:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:43:56 2026 by rpki-client