Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
File: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft (raw, json)
Hash identifier: GNrAenLS98a8H+upfC7EhMHwhj+JdIrAw6/dkv1S/2k=
Subject key identifier: F8:95:3E:B9:93:BD:7A:CF:B3:1A:A5:9E:FC:6E:5D:AC:61:56:3C:BC
Authority key identifier: 67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
Certificate issuer: /CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Certificate serial: 01A0CEC8CDBDA52D8714214C72B2775DEB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
Manifest number: 0200
Signing time: Wed 23 Sep 2026 15:01:01 +0000
Manifest this update: Wed 23 Sep 2026 15:01:01 +0000
Manifest next update: Thu 24 Sep 2026 15:01:01 +0000
Files and hashes: 1: CuP-Ha4tOWBJT0pI4E4cOyq4rrs.roa (hash: PnhyGfN8Xq/cQidLwJYXET+Yc1KaRnRUtuvyvf2jYVs=)
2: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl (hash: Xuqxau7oJXh6eAVRPpbQmXZn6Yt2bg+1iXxJQTZzJC4=)
3: Z_qYOE4e2l4gEvD0IWAegIDMPig.asa (hash: eWA5Ad2XFQpR/DOWcwIfkGbSUhBVracuKwSeTKFgw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:cd:bd:a5:2d:87:14:21:4c:72:b2:77:5d:eb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Validity
Not Before: Sep 23 15:01:01 2026 GMT
Not After : Sep 24 15:01:01 2026 GMT
Subject: CN=f8953eb993bd7acfb31aa59efc6e5dac61563cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:d9:24:ce:44:33:46:a7:94:7b:f3:22:6f:
f1:55:21:72:d4:36:0e:43:02:1b:01:81:f6:e6:ef:
85:a0:eb:01:18:2b:cd:51:e5:cd:71:1b:0c:1f:25:
c4:c7:e6:7f:9d:5f:97:8f:32:53:09:98:73:7b:0a:
0d:92:b4:11:fd:ad:39:b0:1e:bb:8a:49:39:a9:f1:
17:1c:03:85:43:97:b4:c8:03:84:8f:b4:81:9e:b9:
c5:a3:99:cc:69:b9:6f:35:5e:ae:ba:1a:0c:bf:63:
6f:77:e7:f8:7b:3c:8e:49:bd:6e:75:4f:4a:13:0c:
49:7b:21:d9:82:6d:ea:93:e0:42:46:11:7a:b1:53:
12:d9:79:5e:d8:89:66:a6:e8:3d:b2:d0:e9:cb:d3:
93:f4:e5:2a:ce:4f:bb:bf:4a:5c:a8:1e:4e:64:ea:
e5:38:2a:6b:ea:f8:f5:de:fb:1e:07:8d:1f:c9:b9:
2c:ba:dd:2f:27:63:e7:c8:85:d2:7e:b8:c1:4d:97:
28:8d:97:56:1c:37:b3:0c:38:9b:e6:fe:f6:92:28:
4f:08:f7:51:07:4f:1b:5e:5e:bb:f1:05:7b:fe:fc:
b1:10:59:f2:28:d8:84:3e:a3:b7:6f:8b:b0:27:bb:
4a:81:3c:ad:14:d7:6b:01:d0:97:d1:45:4a:65:86:
1c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:95:3E:B9:93:BD:7A:CF:B3:1A:A5:9E:FC:6E:5D:AC:61:56:3C:BC
X509v3 Authority Key Identifier:
keyid:67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f3:b0:2d:85:73:d6:1d:ec:f9:32:59:ec:eb:03:60:6c:ef:
f8:96:fd:82:c5:de:fc:1c:3a:be:2c:52:8c:b4:01:c1:1a:47:
1a:66:b1:d2:e1:dc:58:be:37:44:89:e2:0f:97:d3:ea:b2:7c:
88:29:0f:11:61:fb:f2:66:66:62:66:d3:43:f9:0e:9c:66:95:
2f:1f:dd:61:98:74:8d:03:b3:b0:7f:17:a2:f3:06:d8:91:14:
0e:a9:0d:e8:4b:6c:bc:36:88:7a:8b:35:e6:ae:5a:78:1c:99:
8f:da:f6:c7:4c:4d:f9:12:08:26:30:f2:0c:db:a8:c3:5d:05:
25:c9:a4:05:38:13:30:79:b2:d9:80:8a:ab:92:ea:43:a1:c7:
b8:1d:52:d9:49:63:f7:f9:d3:8a:20:b2:30:a6:6e:f8:61:25:
3a:f8:4a:0c:a5:fd:1b:be:90:af:59:e0:d2:d3:8e:8d:e5:6c:
82:c7:b8:38:a1:56:cc:8f:2c:f8:0f:fe:5d:06:9d:a8:e7:8c:
02:b5:72:90:8e:46:c1:f2:d1:fd:3a:f4:69:44:37:b9:c1:51:
9c:28:85:17:0f:09:0b:30:46:c0:a9:30:f5:07:8f:99:cc:43:
e4:fd:8d:8a:32:fb:b5:8b:99:bd:82:a7:48:9a:96:44:17:46:
21:4f:ad:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:09:42 2026 by rpki-client