
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier: npRttJV02i8LaURsjP6FDsn/i68vvLPvSDrTQTkje48=
Subject key identifier: 11:77:EB:F4:27:F0:5E:36:E4:37:4D:4D:9E:0B:BB:DE:40:AB:43:34
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 01A0EBF94D1906539846604C91D52A8A95D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number: 1A8D
Signing time: Tue 29 Sep 2026 07:02:58 +0000
Manifest this update: Tue 29 Sep 2026 07:02:58 +0000
Manifest next update: Wed 30 Sep 2026 07:02:58 +0000
Files and hashes: 1: Yo2OMvKcfdcYupX4YzMuNg6YOoU.roa (hash: m4lMqUG0bdl6WZJBNR/JE1WP+BWFScOk7QdsyR0VQzU=)
2: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: 8uZ3JW/gQ+4yi+Td+J9TjU+WvrPBgXIUx284Q53uYQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:4d:19:06:53:98:46:60:4c:91:d5:2a:8a:95:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Sep 29 07:02:58 2026 GMT
Not After : Sep 30 07:02:58 2026 GMT
Subject: CN=1177ebf427f05e36e4374d4d9e0bbbde40ab4334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:3c:66:76:5b:61:41:75:0f:78:3d:53:08:
33:a4:c9:19:4f:2d:cc:99:53:85:e1:f2:ff:cd:e9:
51:48:57:dc:95:30:b6:e0:68:a3:ee:30:d4:df:b0:
a0:c4:ff:d0:f9:5b:78:82:85:27:99:b9:af:43:06:
56:f5:14:2b:44:a1:76:11:75:be:7b:55:5b:ce:f4:
4a:28:98:9e:b7:69:02:3f:57:b4:cd:19:68:be:45:
71:85:89:b5:3a:10:a4:22:c6:da:6c:c1:f4:96:3f:
76:a7:4a:fb:1a:8b:54:d9:73:db:72:c8:1b:1c:78:
7a:69:f7:3f:30:1e:a5:ce:25:37:26:46:34:9e:cc:
8c:70:cd:39:a5:47:6f:e5:95:23:ec:88:4e:fa:7a:
b1:96:4f:35:31:17:c5:b6:e1:35:a8:59:70:6c:1a:
7d:46:3a:b9:92:39:6d:22:46:33:42:d7:f3:ba:ef:
5c:f7:6d:28:28:bc:cb:77:6f:51:15:7e:ac:4e:d4:
2f:fe:ba:c0:5d:ff:4b:36:fc:5f:71:68:06:13:39:
cd:b4:85:50:f3:85:3e:1e:0c:28:90:e7:bf:52:6b:
5e:42:26:4a:a3:57:56:f5:07:ca:6a:88:66:3c:82:
bb:30:fc:e7:56:af:e9:8c:41:86:c3:56:b0:c4:8b:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:77:EB:F4:27:F0:5E:36:E4:37:4D:4D:9E:0B:BB:DE:40:AB:43:34
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ee:aa:93:9c:d3:9c:b7:1b:23:f1:44:cd:78:0d:65:25:ed:
db:87:ac:b9:78:9d:da:a1:9e:9e:00:29:97:13:07:bf:23:ff:
1e:c7:28:5e:70:b6:06:8d:36:2d:f8:9c:75:81:30:e4:60:fe:
ff:0a:31:1e:68:92:d2:dd:c8:05:a5:4a:4a:3b:de:12:0a:9a:
c2:4f:b5:5a:16:02:15:02:5f:e7:ee:f9:f5:c6:ff:c2:df:84:
8f:f1:f7:0f:6f:89:22:03:ac:96:c1:5f:0a:02:56:96:3d:63:
e1:43:4e:16:54:fd:67:27:a1:63:29:00:16:7b:05:39:d9:91:
1e:7a:f6:72:9b:2b:1b:db:fd:a8:dd:7b:8f:b8:e9:6d:64:d8:
ac:f5:d9:e8:f2:04:f8:d6:61:40:03:0a:1a:6b:8c:36:37:d5:
54:f2:21:c1:0e:c3:8b:e7:f9:2a:61:7c:1a:0f:96:7b:7b:33:
ee:a9:85:de:64:74:34:e5:cd:52:38:9e:87:bb:9e:63:9e:af:
d6:62:20:f7:85:40:f5:55:41:70:e2:c2:a5:d4:9f:28:1d:ef:
81:c6:da:87:71:08:a1:4d:db:1d:ba:05:eb:a7:58:9f:58:90:
2a:c6:78:a4:08:cd:00:89:ab:be:d5:67:93:86:62:2a:90:73:
1b:92:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:19:47 2026 by rpki-client