Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
File: Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft (raw, json)
Hash identifier: Ruf6vLBRinPiDBMbqwjbdeK+mw1VZjaw09FERiSRYBM=
Subject key identifier: 70:72:DD:23:B4:6E:BA:B9:89:BF:7A:4A:4F:72:26:0C:EF:68:5D:89
Authority key identifier: 67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64
Certificate issuer: /CN=67d6cd6477f846bf170508ff1ac38994877d3064
Certificate serial: 019FA74FD7D634CA35BC9B237ED16FC2FC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
Manifest number: 78
Signing time: Tue 28 Jul 2026 06:00:55 +0000
Manifest this update: Tue 28 Jul 2026 06:00:55 +0000
Manifest next update: Wed 29 Jul 2026 06:00:55 +0000
Files and hashes: 1: Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl (hash: hHeXbOcKy/Xbw9aoIGZc5ZwkbjzAhqx20kX2pZ+EBs0=)
2: s5JRW3dxCG3iSbG4YoeXwLVuI28.roa (hash: 6zxuS5n39EUMCOA6BmiDNejkEzaS6JegPxfxplNxV0w=)
3: w8zh1viLCameZBKyxiERXyJUv6g.asa (hash: +trZ6/UyyOJ0HhjRujxJ5kbX2C1OMx0w/MD/s7o7PO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:d7:d6:34:ca:35:bc:9b:23:7e:d1:6f:c2:fc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d6cd6477f846bf170508ff1ac38994877d3064
Validity
Not Before: Jul 28 06:00:55 2026 GMT
Not After : Jul 29 06:00:55 2026 GMT
Subject: CN=7072dd23b46ebab989bf7a4a4f72260cef685d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:b1:53:9c:0c:e0:bb:c9:8c:35:57:c8:1e:
7e:39:6b:a6:c1:4a:68:f5:7f:6c:bf:b2:80:ac:97:
c8:27:f3:ab:aa:e8:62:ea:61:47:fd:5c:d7:42:9f:
74:0b:a4:8c:86:e2:11:c4:64:b9:85:89:af:38:64:
a2:5e:bd:3e:dc:2a:93:de:d6:7e:78:54:3a:3c:2c:
18:33:ef:a8:32:49:b7:5c:82:f9:a4:61:97:82:1c:
e5:c5:19:4f:72:79:86:9d:a7:e7:fb:40:55:ab:f0:
25:17:be:6a:ae:ef:6b:65:13:d4:a1:7d:2e:d5:11:
95:59:45:34:cc:8d:bf:80:9f:c2:4a:c8:31:e6:79:
37:08:15:22:8b:1d:dd:98:70:58:a9:1f:03:70:8b:
0d:51:bb:30:96:fb:1a:c0:5c:e4:23:b9:1c:44:45:
f3:56:3d:1e:0d:3e:d8:a8:86:78:fb:a8:2b:3f:1f:
07:a5:68:8b:00:32:99:a4:c9:ea:b5:53:2a:cc:84:
7f:f7:d2:24:a1:b2:a3:c4:81:a7:1b:f9:9c:70:00:
70:e0:1a:ce:6e:81:71:6d:97:7f:1a:e0:7a:47:0b:
a7:03:ab:03:4b:ba:e0:f8:4e:47:6c:d9:9f:19:8a:
c4:ca:ca:1f:79:40:b9:f7:b5:5e:a4:e7:2f:5b:de:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:72:DD:23:B4:6E:BA:B9:89:BF:7A:4A:4F:72:26:0C:EF:68:5D:89
X509v3 Authority Key Identifier:
keyid:67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:85:f8:16:ac:02:0f:47:71:92:ff:24:12:81:a7:5b:39:f7:
cc:cd:99:7d:c1:c5:e0:eb:b8:e9:35:3b:d9:00:20:b8:22:22:
84:4c:6d:65:5e:4f:93:c0:78:b1:dd:4f:9f:97:9a:b4:70:04:
8e:a9:8b:aa:23:86:42:d7:bb:0b:17:88:e6:c3:98:5f:fe:d3:
08:6c:9c:6a:f1:3c:32:4e:ec:da:76:35:7c:ab:9c:07:a1:e9:
ba:c6:d0:7f:dc:48:fc:9b:ae:56:95:99:d3:55:31:77:a5:8a:
34:6e:88:23:55:f7:9f:5c:d3:31:ff:be:5c:96:37:97:32:d3:
7a:e0:29:14:4b:b4:03:38:ba:a4:c9:58:19:8e:e8:ea:76:71:
a3:5a:7c:ae:92:06:eb:57:e9:b7:28:aa:b5:60:10:84:c4:58:
f1:e6:b3:44:bd:f5:aa:70:c9:60:de:2e:90:f6:fe:bf:5e:35:
b4:79:c7:00:fd:fc:d8:1e:ff:b8:16:41:12:99:59:91:ca:d9:
66:9e:24:41:c0:b2:38:8a:a5:51:49:e1:71:b5:f3:26:c6:a3:
68:a2:24:95:36:69:d3:e4:8e:8d:83:6f:77:2d:1f:7a:58:28:
cc:de:55:ef:5c:25:11:ab:e5:27:ca:b5:b3:a2:59:a5:82:6a:
19:26:9f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:43:07 2026 by rpki-client