Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: awwB/ELgbs/j6LiVOpuvYN9wQhHxSt8oixnL2GzeAF0=
Subject key identifier: 85:A8:EC:4E:05:51:94:F3:62:43:8D:D0:82:23:BD:1B:3D:CB:DE:C4
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 019F94DBFFCD6E78110249FC65B2B3718B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 08C3
Signing time: Fri 24 Jul 2026 16:01:13 +0000
Manifest this update: Fri 24 Jul 2026 16:01:13 +0000
Manifest next update: Sat 25 Jul 2026 16:01:13 +0000
Files and hashes: 1: 6kFMzdPUiPyPGezO_LNVEuK0DIM.roa (hash: WJQe2ZZPHaA7iIzboHAZGY2K/WcsjYy2+zN7bgpDUoI=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: RNs5PtFPTBce9OtEPBCaOHByy5f+G1WvBwrdOpedcKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:ff:cd:6e:78:11:02:49:fc:65:b2:b3:71:8b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Jul 24 16:01:13 2026 GMT
Not After : Jul 25 16:01:13 2026 GMT
Subject: CN=85a8ec4e055194f362438dd08223bd1b3dcbdec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:ed:70:c1:61:d7:3e:b4:f6:49:ea:86:b4:
f5:63:7a:de:a3:9e:41:46:c3:9b:fc:29:c6:b4:b4:
88:bd:96:5f:22:92:14:98:ed:b2:46:9d:f1:82:fe:
70:8c:71:12:74:ab:b4:18:95:00:23:b3:12:aa:83:
1b:3e:cd:1b:45:db:19:ad:1e:ff:e4:a2:22:a6:74:
4d:df:89:4a:e5:59:b6:18:e7:a7:ac:0f:05:ed:27:
be:24:e3:e4:59:e0:91:40:7d:8a:48:54:e1:76:cb:
39:25:ab:2f:49:2c:a0:5f:34:65:50:5c:89:5e:b0:
62:82:4a:d6:b8:59:ed:43:6c:aa:79:c9:c9:19:d9:
5c:84:81:e7:ce:a4:c3:a3:d4:a0:d1:d8:61:11:7c:
3f:74:87:ae:23:40:64:69:c0:80:95:3f:47:e4:94:
cf:e3:c0:53:01:97:9a:da:90:70:bb:87:ec:2f:e5:
4b:3f:2a:4a:ca:dc:24:ee:cd:8c:d9:a2:24:be:75:
12:96:84:88:e4:c8:13:14:c9:59:4b:aa:45:b0:7e:
b1:26:2e:9f:ba:22:22:f4:29:3f:c5:5d:c7:f8:60:
a2:f2:93:dc:67:b7:9d:6d:1c:ad:f7:f7:57:65:bc:
c9:da:25:a4:a5:46:9b:2c:1c:00:b4:bd:87:8c:87:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A8:EC:4E:05:51:94:F3:62:43:8D:D0:82:23:BD:1B:3D:CB:DE:C4
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d4:77:fd:86:05:71:a8:1a:35:e0:9a:e5:cc:79:cd:79:2c:
bd:79:ef:d7:ac:5c:6f:59:b1:61:e3:42:90:5d:9c:75:74:75:
29:57:0f:14:9e:f4:22:2b:5f:fc:ac:34:05:8a:ac:14:51:3b:
b4:af:0c:01:88:1d:6e:9a:27:70:27:ed:88:a7:a5:9f:d0:28:
6d:a5:03:f7:6e:d2:49:07:ca:0a:d2:b6:67:ab:3f:2b:31:b3:
14:57:b6:51:fb:13:72:eb:53:b6:d6:63:be:57:6e:f1:8d:fc:
e3:0b:92:a9:b6:57:f6:2f:cb:90:4c:aa:74:0d:03:12:b1:d2:
d9:30:69:4b:b8:d1:f6:2e:06:de:00:66:c5:87:ce:3a:e4:8b:
fd:14:6a:bd:fe:e1:b2:1c:a9:54:81:87:58:fb:96:61:1e:45:
e9:43:46:ce:d4:f0:60:ff:76:64:c7:9f:57:0d:4c:7c:1c:e5:
c8:74:69:72:12:99:ed:ba:8b:07:81:b8:62:fa:82:30:56:66:
43:3b:f9:76:2f:2f:7e:1b:59:ce:eb:7e:2e:32:d3:4a:7c:a4:
fd:30:e8:22:00:a0:99:f1:ce:5e:bd:72:16:20:f8:1a:b3:dc:
d4:ae:24:6e:1f:8f:eb:01:78:27:69:b3:35:1c:37:3a:da:7b:
9f:7e:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:12:21 2026 by rpki-client