Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json)
Hash identifier: St5Il3y0MQDSBDkryuUdTkab0JWYfZoEcOaEOiKanG0=
Subject key identifier: EC:88:7E:A2:15:AC:D9:BD:3B:09:1A:3A:A2:3C:18:48:22:11:FB:9A
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial: 01A0D6B9C2C7C3F442734F10F5AE636A669E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
Manifest number: 121E
Signing time: Fri 25 Sep 2026 04:01:33 +0000
Manifest this update: Fri 25 Sep 2026 04:01:33 +0000
Manifest next update: Sat 26 Sep 2026 04:01:33 +0000
Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: n8TqjwaOh/bnwkzi/+zU948+HF5z57PJjJgAUTAJ6Y8=)
2: zY7N7I-0j2wyToIYtsy8gjVgKFc.roa (hash: eG6Aql8AjY8k7IpGUPh2hREkMKRNs6mKuXLIFh3G5Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:c2:c7:c3:f4:42:73:4f:10:f5:ae:63:6a:66:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Validity
Not Before: Sep 25 04:01:33 2026 GMT
Not After : Sep 26 04:01:33 2026 GMT
Subject: CN=ec887ea215acd9bd3b091a3aa23c18482211fb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:02:61:76:79:8a:26:5f:f5:e2:a7:18:bf:
63:b6:3e:06:c6:94:4a:8e:20:c7:f6:6f:0c:3d:63:
ff:ff:d2:c7:3e:91:21:ea:33:85:49:33:59:65:b0:
57:fb:47:34:1b:43:f6:be:32:87:56:24:2d:01:ac:
e0:16:3d:a7:5c:ee:8f:d2:38:79:e3:ad:5d:c8:43:
de:b6:4f:12:54:ee:a2:b9:87:9c:ac:b1:aa:9e:92:
71:70:49:6c:6e:b2:a5:f8:bf:37:c2:39:10:96:3f:
ba:66:60:c3:17:db:e1:20:7f:91:8e:59:dd:0f:cd:
63:49:57:5a:34:1a:52:03:71:f7:41:2c:e0:03:de:
d7:7f:0e:a8:4d:58:63:b1:6f:80:c6:fd:89:22:d2:
42:fe:00:fb:a3:a5:d5:18:fd:12:cc:de:19:1a:56:
4d:d5:fb:8e:55:5d:42:27:44:4a:28:49:0e:8c:22:
e5:df:5c:d0:75:24:25:63:93:db:36:47:49:10:a0:
2d:03:4c:a8:46:61:fa:39:74:dc:96:c1:56:ed:1a:
8f:0a:44:f5:9a:33:11:11:96:e5:8c:6d:3c:81:8c:
01:45:a3:b4:0d:60:78:09:73:27:56:1f:84:7b:52:
b5:80:76:b4:f6:72:0e:81:15:e0:eb:c4:31:cf:bd:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:88:7E:A2:15:AC:D9:BD:3B:09:1A:3A:A2:3C:18:48:22:11:FB:9A
X509v3 Authority Key Identifier:
keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0e:38:5b:bb:7e:b8:ba:81:58:c3:89:f8:15:c0:13:e0:11:
49:d5:6a:2c:9e:e5:54:67:60:d2:09:1d:99:a4:f0:13:41:72:
37:fe:8f:77:fb:a1:4a:f4:54:57:3c:dc:a4:97:f5:c7:e3:63:
04:1d:aa:63:b9:15:6c:0c:8a:de:93:ab:7c:c3:3f:a9:6d:f9:
23:1b:59:12:ba:b1:36:0f:cb:6e:2d:50:57:ee:8c:4a:89:93:
ef:1b:58:fd:dd:79:d5:38:e3:d2:40:cc:fe:50:c2:25:59:09:
9e:02:df:36:c0:5e:cc:19:b0:33:2c:e8:de:ae:2d:a8:0e:f8:
c4:89:13:f3:e8:48:38:fc:5c:8e:6b:df:95:58:35:46:f5:c4:
32:f8:6c:25:5e:47:66:5d:fd:cd:3f:38:40:a6:0a:85:e3:84:
62:a5:e1:2f:28:31:47:53:d9:5b:a6:f3:91:ec:b7:25:b2:4c:
de:25:46:63:39:f4:a7:eb:d0:05:77:3b:a4:b6:83:3f:fa:90:
0f:6c:f9:9f:31:25:c7:0f:54:85:37:79:77:b0:10:e7:21:db:
a8:ce:cf:c2:cc:b3:8b:13:ec:6e:fb:cf:1b:81:f9:55:c9:4f:
2b:a3:30:8a:b9:43:26:fc:f0:7d:37:ad:d7:0f:35:1a:16:8f:
52:c3:0a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:44:21 2026 by rpki-client