Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
File: Z8ooyF9TcJI3VX3talTbfEODj98.mft (raw, json)
Hash identifier: cjkYVHQ8p8uZo1qqyvh4sgVW8Wh1LlkObkB+0nbIsXc=
Subject key identifier: B1:BB:21:42:B6:E4:F6:82:36:E2:03:F6:20:AA:C8:42:09:B4:DE:36
Authority key identifier: 67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
Certificate issuer: /CN=67ca28c85f53709237557ded6a54db7c43838fdf
Certificate serial: 01A0D012125F6859043F45A89B89F8C4725C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:40 +0000
Manifest this update: Wed 23 Sep 2026 21:00:40 +0000
Manifest next update: Thu 24 Sep 2026 21:00:40 +0000
Files and hashes: 1: 0n7BjsuUtMK9eux3ZPIRhUmMWKU.roa (hash: mtRTQIogdYCGX/FRYcEHTrpW3dJUutGmmUeZceCASwo=)
2: Z8ooyF9TcJI3VX3talTbfEODj98.crl (hash: aTSELv4B4ol9+9IrT4Ya88mMn90Bv0pTsaRPoDYy2yk=)
3: tVnRYYZjjcF8Zb90VZauoKBz0VM.asa (hash: js5NtSgPh808PFkiRkghv7MP7EdL9RD16y2VNGbfdfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:12:5f:68:59:04:3f:45:a8:9b:89:f8:c4:72:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ca28c85f53709237557ded6a54db7c43838fdf
Validity
Not Before: Sep 23 21:00:40 2026 GMT
Not After : Sep 24 21:00:40 2026 GMT
Subject: CN=b1bb2142b6e4f68236e203f620aac84209b4de36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:62:78:4a:ef:b7:84:c2:0e:73:f5:a7:06:
23:36:51:8f:45:d1:df:bf:1e:2d:42:74:2e:c3:ad:
04:a2:82:0c:ba:dc:b6:15:20:8d:03:57:fe:05:ad:
f8:5f:21:1d:56:d4:87:c8:7f:0f:e7:c7:e2:e8:4d:
72:6e:a8:18:60:d9:09:5a:10:8a:4d:0f:12:72:26:
63:05:8a:0b:c0:48:d4:a1:a7:bc:61:c4:ff:cf:2f:
eb:c3:f0:0d:df:63:5c:51:ec:00:39:cc:8a:f0:3d:
96:76:b4:9c:cc:46:37:a6:8a:f9:88:9a:38:8f:e6:
7d:23:4e:a9:27:66:25:83:62:af:bd:15:6b:0e:80:
a8:86:29:15:62:64:b2:d0:6a:a1:e7:42:23:2d:49:
05:cf:c2:bc:23:fe:ec:20:a7:59:9d:db:94:59:0a:
89:43:25:e2:5e:65:58:50:c6:14:63:a1:28:70:e0:
24:75:4f:35:e1:d8:47:4e:48:9a:65:bc:b6:3c:ee:
3b:8c:49:05:8e:55:4e:d8:f1:b2:db:65:5e:50:36:
16:f7:5f:36:ce:a5:7d:3f:29:7f:b2:39:d4:00:f0:
96:e6:d7:93:8a:fe:02:0d:c5:f4:25:16:74:4c:72:
35:8f:13:cd:68:0d:4a:68:0b:50:22:1b:c3:09:ba:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BB:21:42:B6:E4:F6:82:36:E2:03:F6:20:AA:C8:42:09:B4:DE:36
X509v3 Authority Key Identifier:
keyid:67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a7:c4:2b:15:d2:a8:dc:d9:32:53:b2:0b:4f:f9:6b:65:69:
70:2e:15:73:68:58:ba:91:c5:be:d1:14:b4:b5:b1:77:99:28:
00:67:2b:fb:ff:75:63:33:ff:8f:57:08:07:2c:1d:4c:7a:23:
a2:a1:5c:0f:14:18:fb:81:6e:d9:45:fa:f8:2d:88:26:01:c2:
ae:81:bf:1a:63:96:d9:ed:19:86:a2:a7:3f:0f:ed:b5:2b:e0:
24:7b:f3:ae:17:c1:a7:7f:a5:4c:01:40:da:cf:7a:bb:e8:63:
25:cd:3a:05:ff:07:1d:38:96:1d:01:cb:6c:87:3d:0c:94:aa:
98:aa:5d:ef:2e:e8:12:3d:f2:22:00:8d:ea:d8:b2:22:ad:6e:
68:c4:92:8c:79:ea:65:d9:8a:fc:25:65:05:42:c3:88:db:af:
86:97:6c:47:e0:b1:37:5a:cb:f1:ca:96:54:78:3c:ce:4a:9e:
55:20:1d:44:ab:c1:4f:de:d6:e0:17:ac:d8:dc:b9:5b:d4:d8:
2e:02:aa:9e:d2:88:3c:59:3d:44:78:e2:0e:e2:3d:56:27:a6:
e1:72:33:d6:f4:ec:74:7c:a7:d4:4d:61:ad:d3:c2:b5:9f:f1:
30:4c:75:0f:0e:cc:8c:c8:51:48:a7:cd:a8:5d:77:55:66:22:
7d:30:db:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:12:42 2026 by rpki-client