Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: QzjyRsSibaipWuVuk4hI+y6VFRav1hUtnFXvLh/9IfE=
Subject key identifier: BE:B2:D5:12:D6:07:5D:AA:9D:96:EA:4D:3E:71:A5:4A:12:D2:03:4F
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 01A0E13CE8A501B6A340D1E3388F2C8C0112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 0782
Signing time: Sun 27 Sep 2026 05:01:00 +0000
Manifest this update: Sun 27 Sep 2026 05:01:00 +0000
Manifest next update: Mon 28 Sep 2026 05:01:00 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: 0iCW0ciV0REEHYW05mzafeZgrDgpdHUjjXGIY3sSrPw=)
2: aQ9gfy4fYC0VC08rI5UWZXPKETo.roa (hash: 3nT5m1pplYfTGimm9tivPlp5Ti9zXf+dDwmifgJXGYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3c:e8:a5:01:b6:a3:40:d1:e3:38:8f:2c:8c:01:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Sep 27 05:01:00 2026 GMT
Not After : Sep 28 05:01:00 2026 GMT
Subject: CN=beb2d512d6075daa9d96ea4d3e71a54a12d2034f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:1e:af:4e:79:90:a3:31:72:1a:0d:66:b1:
e8:f6:c6:38:41:2d:05:fb:9a:4f:e8:33:eb:82:65:
6e:38:c1:e2:3d:2a:34:83:38:3b:ec:77:10:7b:5e:
ec:17:b9:cf:51:ff:37:78:64:80:31:34:a6:13:92:
7e:36:a4:70:63:be:38:a7:ed:04:bc:69:1b:95:fd:
99:f1:47:52:fb:17:f3:be:cb:85:65:d7:52:9e:43:
eb:d1:eb:d1:b1:ea:0f:ee:2e:b6:01:40:0b:1b:a8:
6d:2f:c8:8f:7d:28:0c:2b:c8:5a:0f:d3:7f:15:ef:
da:c8:0f:5f:0c:b4:44:0a:27:fd:14:5b:1f:a9:a5:
ba:27:89:bf:0b:24:90:ca:05:2e:66:30:c4:8b:c2:
26:d0:69:3d:76:67:47:79:f4:d6:d5:f7:68:6b:10:
a8:09:87:7e:80:6f:c3:03:ce:e9:c7:7c:ba:ee:21:
83:31:6d:22:2d:b9:b7:8f:4e:27:ed:5c:73:2a:8d:
ab:e2:e1:b6:b0:48:e8:47:4e:4c:d7:56:c7:1b:1d:
a0:45:6e:10:6e:04:28:36:63:58:2d:75:fe:cc:13:
8e:dd:42:b1:7e:bb:72:9d:cc:c5:ac:55:2b:5d:ea:
2b:75:e3:95:99:f2:26:de:5c:3c:2b:2c:15:8f:1c:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B2:D5:12:D6:07:5D:AA:9D:96:EA:4D:3E:71:A5:4A:12:D2:03:4F
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1a:a0:13:aa:4b:24:6f:00:02:a9:27:45:58:37:a4:25:dc:
8f:50:6b:99:66:9c:b7:29:d0:5c:56:3c:3a:68:39:18:25:95:
80:53:0e:18:b3:01:2e:41:86:c4:33:40:03:3d:38:be:9f:0f:
7f:bf:ba:1f:88:47:34:af:9f:60:ec:f7:58:0d:f2:6d:ce:bb:
22:f4:d8:08:e1:ca:a2:c7:48:19:f5:f8:97:d3:27:29:2d:f3:
78:e5:32:37:67:46:8c:50:e0:1b:e9:09:97:0d:01:43:6c:ac:
ad:8a:66:7b:b2:4a:78:ef:e8:3f:8d:36:d2:23:ca:57:24:c7:
72:54:f0:90:a5:ab:0a:ef:d1:f4:02:99:ca:02:cf:e1:b8:24:
09:93:c9:de:e3:d6:c7:c0:aa:76:ee:7f:76:40:89:71:98:28:
1a:f8:6a:32:9f:c7:3e:27:0a:7e:b1:3e:e3:cc:f9:8d:0d:1f:
eb:23:15:3b:5d:f2:51:ca:19:04:be:8a:95:49:91:5b:ff:e8:
43:f8:08:c0:fa:a1:f1:7d:93:58:ae:71:24:1b:2c:1f:34:07:
22:10:5a:bc:3c:cf:c7:af:78:54:3b:b0:65:3b:2f:c1:ae:d0:
4f:0a:c8:03:12:e3:c1:0e:5a:2c:93:e0:a5:69:4d:19:f2:10:
e2:3b:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:15:16 2026 by rpki-client