Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: GNDl1rafyWtgewFCkkidPlKQuwr4/dRN43AOi8UJ5yA=
Subject key identifier: 4E:AB:76:0C:ED:0E:63:89:58:DF:46:C3:04:97:7B:95:81:16:1A:02
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 01A0D98358275AF202DDF04BD57FBCCB6E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 0666
Signing time: Fri 25 Sep 2026 17:00:58 +0000
Manifest this update: Fri 25 Sep 2026 17:00:58 +0000
Manifest next update: Sat 26 Sep 2026 17:00:58 +0000
Files and hashes: 1: 6q6FFP59V1iZ5mjSs0C-bMaEVi4.roa (hash: 7kD8hB6sSAR0ZTznrHLFw4wEeWx6SBRTYXwBBQFgLak=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: XtUVIJEEHOSvctP6atOBZphHPOD/MNOfk1NAk/y5t3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:58:27:5a:f2:02:dd:f0:4b:d5:7f:bc:cb:6e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Sep 25 17:00:58 2026 GMT
Not After : Sep 26 17:00:58 2026 GMT
Subject: CN=4eab760ced0e638958df46c304977b9581161a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:3b:1f:79:2d:aa:b3:6e:14:c9:66:1a:76:
55:04:9d:45:a3:2f:74:74:6e:61:35:b3:0f:9d:2c:
a6:9d:97:0a:d7:cb:39:fc:9d:04:15:72:22:a3:e0:
52:ec:8a:3e:3f:17:ec:c5:27:ec:b4:d5:76:cd:dc:
85:b9:1f:d7:1c:35:ae:e8:18:60:57:e5:10:b9:09:
69:0e:0b:d4:55:ae:5d:3f:ca:6f:96:3c:83:ea:2f:
46:0d:19:10:30:fc:41:c3:3e:67:71:f4:22:ae:88:
20:12:3c:04:11:30:7f:2e:b1:28:f7:44:db:db:cc:
ec:40:46:e4:ca:c3:9e:b9:46:ea:39:7c:82:18:1c:
3a:86:1e:11:32:dd:2c:71:85:a3:38:3a:25:99:0c:
6f:6c:e7:11:72:b6:74:06:62:cd:30:c6:8d:95:9f:
00:b3:04:f2:a3:97:69:1a:40:75:76:39:0b:3a:04:
1e:57:7a:8c:90:a1:e4:b7:94:5b:dc:07:b3:16:55:
15:ac:ba:11:d5:0c:8e:c6:e5:4b:d0:21:9f:0e:98:
aa:5b:3a:e0:16:4d:f0:d5:7d:49:23:a3:5e:84:9d:
45:44:c0:a3:fa:cc:d4:84:9c:27:c8:23:32:97:06:
ad:71:cc:4c:ac:01:e3:b7:c6:47:6b:a4:24:5b:66:
40:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AB:76:0C:ED:0E:63:89:58:DF:46:C3:04:97:7B:95:81:16:1A:02
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:05:35:a3:51:a8:94:f7:9b:8f:56:a7:06:c9:99:fd:ef:b1:
25:47:fe:82:d3:b9:f2:ee:02:81:c8:80:d2:dc:22:b5:af:37:
e8:ec:47:92:c7:5e:c1:0b:a9:b5:9d:a2:3d:ee:fc:2e:3d:5d:
a8:0c:fd:67:66:7e:e3:82:ec:ff:13:46:08:0d:c0:4d:b8:47:
9f:e2:a5:71:7b:75:d4:5a:1f:00:c4:fc:b5:51:3e:65:15:fc:
0a:40:1d:90:5e:f1:65:f5:b9:d5:a1:ef:3c:10:88:50:6b:8b:
c0:fa:46:a9:68:ec:01:6c:19:a3:cf:5f:39:1b:ae:ae:45:a4:
dc:ae:b6:86:16:52:44:91:0e:09:90:79:fe:da:77:20:9c:6c:
4b:fc:de:2d:dc:c3:ef:1e:1a:0c:0f:57:f2:05:b0:ae:32:47:
9e:c6:5d:63:9a:46:ab:8b:ab:af:d5:44:b5:a8:88:c1:3a:af:
0b:1c:71:5a:f4:d7:9b:e9:58:63:bb:6f:0f:87:b1:e6:e8:82:
d1:db:b9:7b:f3:c4:75:10:69:01:27:43:e5:31:f7:8c:0d:c7:
0d:50:05:f2:68:21:14:75:59:d6:ed:18:04:95:f5:31:50:cd:
62:07:60:47:18:d6:7a:5c:ca:a9:8e:71:f2:05:35:af:ef:1c:
7d:72:c2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:18:50 2026 by rpki-client