Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
File: Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft (raw, json)
Hash identifier: gIbLNAgMBym7ZEsi/7Zu+vTw3QY0N4xvNbhRydtA2OQ=
Subject key identifier: AF:81:16:83:55:BA:B0:60:5D:23:17:F6:4A:9E:CF:69:2D:5A:EF:B2
Authority key identifier: 67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64
Certificate issuer: /CN=67d6cd6477f846bf170508ff1ac38994877d3064
Certificate serial: 01A0BD66F8813BFF0E9613F0F5D373744F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
Manifest number: 0108
Signing time: Sun 20 Sep 2026 06:00:37 +0000
Manifest this update: Sun 20 Sep 2026 06:00:37 +0000
Manifest next update: Mon 21 Sep 2026 06:00:37 +0000
Files and hashes: 1: Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl (hash: hr2Ck6IIvGHcImTptb4jUhKU3u8wKaCokvWpzN4aMDc=)
2: s5JRW3dxCG3iSbG4YoeXwLVuI28.roa (hash: 6zxuS5n39EUMCOA6BmiDNejkEzaS6JegPxfxplNxV0w=)
3: w8zh1viLCameZBKyxiERXyJUv6g.asa (hash: +trZ6/UyyOJ0HhjRujxJ5kbX2C1OMx0w/MD/s7o7PO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:66:f8:81:3b:ff:0e:96:13:f0:f5:d3:73:74:4f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d6cd6477f846bf170508ff1ac38994877d3064
Validity
Not Before: Sep 20 06:00:37 2026 GMT
Not After : Sep 21 06:00:37 2026 GMT
Subject: CN=af81168355bab0605d2317f64a9ecf692d5aefb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:bf:79:44:96:ad:08:49:1c:08:8a:c6:e1:
c3:e7:d4:98:c0:05:16:38:4d:be:d8:b4:6b:f7:a6:
eb:46:66:a7:89:5e:85:ac:62:0e:d1:15:93:ee:7e:
45:f8:ae:47:28:bb:6d:19:60:9e:21:ba:d7:5f:04:
54:d2:7c:02:ba:e7:a2:61:69:be:d1:d5:c9:05:e5:
b0:a8:d7:f5:66:86:f7:5e:23:5b:f8:f6:74:46:f3:
c8:de:a9:c1:90:62:f1:e6:e8:9c:8d:80:5f:9b:46:
f1:94:3a:b4:e0:02:42:c3:68:67:7d:a1:98:63:7a:
2c:90:e9:7d:e4:fe:55:eb:35:df:31:9f:83:67:89:
1b:e8:9e:6f:7a:77:7f:26:83:25:fb:3e:0c:0f:f3:
21:1f:0f:5c:e5:96:cc:5f:55:8d:ab:a5:3c:82:13:
c3:a8:ae:c2:05:e3:40:d8:99:01:c0:1d:00:94:6a:
9f:7e:a4:e7:08:70:6d:26:e6:dd:f2:ec:5a:1d:6a:
11:d4:5a:7c:3c:92:ca:15:87:5c:63:19:aa:2b:2b:
46:84:03:c6:f7:2c:fa:48:fd:c9:79:cc:0e:ae:1c:
2d:56:7d:c4:d4:78:28:15:16:fd:38:dc:4b:76:97:
3d:e0:7d:a9:81:ef:09:4a:39:1a:70:41:be:ec:82:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:81:16:83:55:BA:B0:60:5D:23:17:F6:4A:9E:CF:69:2D:5A:EF:B2
X509v3 Authority Key Identifier:
keyid:67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e3:27:ea:87:5c:62:4a:e6:9a:e2:48:aa:93:44:c9:a3:92:
7c:9e:d6:4e:f4:a9:0f:e4:90:c7:34:f9:c5:94:08:0c:58:1b:
40:e0:cb:2c:04:bb:35:de:6b:16:88:3c:98:e6:09:96:dd:d7:
21:3f:28:01:16:94:ec:0d:43:86:b0:1f:8e:de:96:ad:5b:33:
b9:3c:41:b2:88:24:b5:17:c5:a7:0b:3d:d1:89:7a:ca:6f:19:
89:f0:df:df:0f:c1:c4:05:c7:1d:b0:f4:e7:86:a1:63:0c:ef:
e1:e1:88:75:98:fc:0b:a3:e6:1c:55:29:87:0f:d8:47:33:9b:
5b:15:db:f7:4e:ee:03:2a:fd:dd:dd:aa:69:80:df:dc:70:26:
da:69:61:90:9b:32:c2:5a:ac:d0:91:48:8f:04:bf:7f:e6:1a:
4d:ad:b3:32:5d:9f:49:f5:d9:63:ee:fd:1f:e4:93:55:e1:28:
4b:7f:79:e8:af:49:28:98:cb:3e:c5:5a:b3:d6:bd:0b:25:09:
3b:55:30:68:ea:cc:e9:df:7a:f2:e8:7b:0f:4e:1d:5b:eb:42:
52:2c:36:cc:15:10:04:56:3c:d4:e4:a8:8e:76:73:c1:a1:5a:
d6:62:a2:ff:26:66:6f:fd:ef:86:da:79:06:61:ed:99:7c:e4:
55:95:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:07:00 2026 by rpki-client