Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: UByar65JEa/03cjq064hRD+jXNPEe2B5MXENzaYV25o=
Subject key identifier: 65:A1:8A:08:8A:21:A8:77:94:FB:BE:AF:FE:6C:51:D0:0D:CC:0D:A5
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 01A0DBE006DACFF3E920060D291CBA9F4282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 1564
Signing time: Sat 26 Sep 2026 04:01:27 +0000
Manifest this update: Sat 26 Sep 2026 04:01:27 +0000
Manifest next update: Sun 27 Sep 2026 04:01:27 +0000
Files and hashes: 1: TfIi7I3WgDvXNjupkEjxzP8GxkI.roa (hash: Qym68UnT2HiOSpZ3+9brbjDLO7IA/zFl9AhYdT/LiLQ=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: 6gm5JCSpTXYw+8pw4lnxX0Ie3fs+W0QXfET9Qkfejbc=)
3: zBxBTpibLrslxHWch5H0k9kNNd0.roa (hash: kLIKoJKwnkX2C7p3Y1VY7at5dd/MwDeXCZmhRXuoHg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:06:da:cf:f3:e9:20:06:0d:29:1c:ba:9f:42:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Sep 26 04:01:27 2026 GMT
Not After : Sep 27 04:01:27 2026 GMT
Subject: CN=65a18a088a21a87794fbbeaffe6c51d00dcc0da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:f0:32:01:b6:4b:60:62:0d:0e:dc:d5:fe:
01:17:63:54:23:3e:17:d1:1a:14:d5:7b:48:1a:23:
40:3b:64:c2:a0:9b:c9:8b:40:39:fe:59:51:78:b9:
16:f7:a5:17:c9:9d:6b:05:d8:1d:6c:bc:47:18:b0:
27:fb:0c:b4:9f:6e:75:a3:8e:cb:9e:dd:0c:c6:9d:
89:67:ba:5f:88:b1:b4:fb:cb:3c:8d:02:e0:38:e8:
51:dd:1d:08:98:8c:9e:6b:da:6f:9e:ba:6f:5c:4b:
c2:47:7c:1e:dd:22:e2:c6:95:ab:79:92:96:99:31:
b2:38:0a:e1:ed:fb:4e:3b:d6:53:ed:17:f7:36:bb:
f1:08:66:54:12:c2:11:2a:cf:e4:8a:31:03:0d:27:
d6:59:ee:b0:de:e1:36:a8:2c:56:3c:00:b8:c6:5a:
a6:9e:3c:1c:7e:f8:db:9e:58:35:7b:16:78:80:61:
64:09:16:f5:f8:21:4d:a9:0e:1c:57:00:b3:cb:34:
bf:ab:7c:fa:bf:45:18:8a:43:72:01:4b:8e:f3:9e:
f6:12:ad:28:e4:cf:13:61:7b:59:1a:d9:48:0a:b2:
bd:f5:1d:b0:44:e0:ea:0e:34:06:96:5a:b6:be:ad:
bb:cf:e3:ff:a0:91:93:4e:a9:92:35:90:f4:d5:2b:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A1:8A:08:8A:21:A8:77:94:FB:BE:AF:FE:6C:51:D0:0D:CC:0D:A5
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bb:cd:c4:2d:e7:83:1c:b3:8a:8b:64:69:0b:aa:99:84:cb:
83:b4:67:5e:c7:8d:b0:ca:4e:1a:b3:ba:52:ef:9a:51:d4:6a:
70:d9:ef:46:1f:40:3a:28:29:ba:77:2e:7d:0d:8f:d3:4c:23:
f3:39:d9:fc:29:00:ff:85:fc:54:f6:67:92:9f:a5:22:3e:be:
a5:c1:a2:20:4d:62:67:1d:56:4c:19:1c:ab:ff:a6:db:d0:99:
f9:a9:8d:af:8d:af:d2:02:8c:5a:9b:a3:f6:07:b5:56:83:f9:
6f:b9:df:ca:b3:46:73:ba:1e:24:36:b6:98:af:8f:81:37:59:
19:8b:2b:80:79:1b:15:c1:9e:7b:ae:c9:1a:0f:20:3f:d4:ae:
da:78:c8:88:34:09:ea:b2:fc:bf:d7:a8:d8:1e:fd:30:18:9a:
52:43:26:9a:19:0d:a5:ca:88:b5:97:1e:ed:29:19:4f:80:96:
ca:4e:82:ed:25:ba:c2:75:60:bb:0d:3b:03:2e:c9:fa:40:2e:
51:bb:55:4c:21:68:17:8a:ee:da:34:e2:3e:89:9b:60:ce:da:
a3:3c:0f:5d:2f:a1:2e:62:8c:9f:69:9d:5b:6b:62:3a:5c:ce:
28:05:d1:eb:9e:f2:e2:06:39:27:b5:02:13:5a:98:46:8b:40:
13:38:b5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:08:54 2026 by rpki-client