Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: ON9+GGDCErNhLSiWoMKPw7n+jD2MZ9NrYSejJw0ErMA=
Subject key identifier: AC:87:A3:FB:5A:DE:B5:F2:AF:A9:2A:C3:31:68:74:0E:38:35:B2:5F
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 019F92ED042C0C7BA3EC381C102FF401A639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 0592
Signing time: Fri 24 Jul 2026 07:00:34 +0000
Manifest this update: Fri 24 Jul 2026 07:00:34 +0000
Manifest next update: Sat 25 Jul 2026 07:00:34 +0000
Files and hashes: 1: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: W9mLSb11kfqOYyqizP9ll9S4A/4mjqE2pcrfQt+9/TA=)
2: axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa (hash: nE9lYWD+wgHpWX2b2+6stth4mhkUfCemKJyIsoT/t6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:04:2c:0c:7b:a3:ec:38:1c:10:2f:f4:01:a6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Jul 24 07:00:34 2026 GMT
Not After : Jul 25 07:00:34 2026 GMT
Subject: CN=ac87a3fb5adeb5f2afa92ac33168740e3835b25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:c7:b5:a5:7f:38:47:a9:c8:80:d9:07:54:
7d:05:1b:13:a8:ac:f3:7e:e6:3d:e1:56:e6:cb:93:
69:0f:fc:fb:b5:8f:cc:ba:d0:0a:61:c3:41:a2:3f:
08:9e:5d:87:82:e9:a0:8b:b5:21:2c:20:4d:94:29:
7b:23:9b:e8:88:e4:c7:b2:f7:05:e9:6d:f1:e8:8c:
20:a8:d1:38:1a:53:1f:10:f8:1f:f1:fe:85:7e:a9:
ff:a4:a2:46:b6:2e:c6:f2:d0:be:31:38:fd:22:5d:
ca:3e:33:c6:0a:1c:5b:b2:a6:93:74:98:41:c3:8e:
b3:01:41:25:e6:de:db:c1:84:1f:ea:c9:0e:a3:f6:
72:3d:4e:fc:04:8c:a7:57:ec:69:d9:05:f9:b9:c7:
65:80:d9:9f:af:e1:c4:18:54:b6:f8:ed:fc:ed:ff:
92:00:ec:0a:bd:49:a1:ca:9c:5b:b8:d7:4d:6b:48:
0a:0d:79:d3:11:9d:73:e5:8b:77:05:f6:ca:4f:31:
25:95:18:90:e9:f3:df:7d:28:46:c6:43:e1:8b:fc:
91:2f:76:82:78:a9:b7:31:ce:84:98:0f:fb:1d:c9:
2e:41:05:7a:9c:5f:08:2d:17:ad:e1:d2:b4:74:3f:
f5:b1:69:cf:c4:2b:46:ac:15:b7:ed:63:b5:db:43:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:87:A3:FB:5A:DE:B5:F2:AF:A9:2A:C3:31:68:74:0E:38:35:B2:5F
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:85:6e:cb:c4:41:3c:76:0f:75:af:1e:e8:95:eb:8d:a4:38:
4f:5e:84:9c:04:04:d0:89:ab:d8:bc:5a:dc:88:95:b3:74:8e:
2b:25:a0:40:52:91:21:a5:ea:71:ff:f4:85:59:57:82:32:c8:
cc:a0:f9:98:62:c2:76:20:f4:91:79:f6:d4:63:ac:1a:c2:88:
6a:c3:b2:e8:81:38:61:db:bb:19:01:95:a6:7d:b6:cb:3e:6a:
0c:a8:21:e4:7a:13:6b:fb:13:70:48:04:65:88:3a:7b:b1:7d:
9c:df:ca:2e:01:2b:2f:ae:22:e6:90:8b:80:d0:97:a2:13:c0:
92:5c:8e:0a:3a:8f:c2:33:e8:e8:89:c7:1c:92:27:15:bd:0b:
fc:1b:2b:e1:2e:6f:c2:f0:36:36:7a:fc:63:aa:49:3a:e4:a5:
d1:3f:be:ec:86:ee:a4:e2:06:a3:7d:12:08:dc:9a:2e:96:a1:
38:85:49:9f:dd:6b:e8:cb:6d:b8:2b:d4:48:4b:b0:78:e5:92:
be:c2:f5:d6:fd:30:8c:fc:50:1b:ce:d0:65:70:d2:3b:e2:58:
8b:b7:6b:f8:5b:39:3f:4f:64:eb:07:02:9c:34:ae:0e:42:c6:
17:d0:aa:6d:cb:4c:50:c4:a3:f2:18:b8:0d:ba:f2:af:34:8d:
d0:a5:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:00 2026 by rpki-client