Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
File: Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft (raw, json)
Hash identifier: vQFzxVXzhjXrHPjMDi7CSG+0x8cgE7yteeNnbXF5tvk=
Subject key identifier: C8:A7:28:43:62:99:58:B5:D5:00:9B:51:01:A4:71:3A:3B:8C:17:DD
Authority key identifier: 67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64
Certificate issuer: /CN=67d6cd6477f846bf170508ff1ac38994877d3064
Certificate serial: 01A0BF555D9DD3FB3CA8A0DCFE8A366A9C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
Manifest number: 0109
Signing time: Sun 20 Sep 2026 15:00:37 +0000
Manifest this update: Sun 20 Sep 2026 15:00:37 +0000
Manifest next update: Mon 21 Sep 2026 15:00:37 +0000
Files and hashes: 1: Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl (hash: i242+xqZtMgCOolB/42frIbjs79tMu59kH32JAu4j2E=)
2: s5JRW3dxCG3iSbG4YoeXwLVuI28.roa (hash: 6zxuS5n39EUMCOA6BmiDNejkEzaS6JegPxfxplNxV0w=)
3: w8zh1viLCameZBKyxiERXyJUv6g.asa (hash: +trZ6/UyyOJ0HhjRujxJ5kbX2C1OMx0w/MD/s7o7PO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:5d:9d:d3:fb:3c:a8:a0:dc:fe:8a:36:6a:9c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d6cd6477f846bf170508ff1ac38994877d3064
Validity
Not Before: Sep 20 15:00:37 2026 GMT
Not After : Sep 21 15:00:37 2026 GMT
Subject: CN=c8a72843629958b5d5009b5101a4713a3b8c17dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:b0:bf:a5:ed:8a:1d:c5:3c:c4:be:ce:6b:
93:de:34:6a:45:50:3a:61:26:12:68:ae:bd:d9:6c:
cf:87:5e:dc:dd:38:e4:b8:21:f9:70:98:43:bd:16:
58:f7:e7:5e:34:fc:7a:0c:12:66:1b:e5:41:0f:ca:
31:4e:39:66:bf:54:b5:1e:0e:5e:7c:76:3a:3a:35:
a4:4b:e8:bb:17:37:01:5a:a3:c0:75:45:e7:eb:6a:
b1:fb:db:7b:5d:2b:75:99:34:25:a6:26:46:95:6a:
d6:2e:5e:93:42:78:e2:3e:0d:e5:33:da:cd:9e:18:
ec:55:40:99:82:53:07:a5:42:e0:a3:16:e5:0d:e2:
bb:de:90:7e:9a:61:42:0d:f2:ed:ff:50:a1:69:a6:
f0:a3:29:fa:b1:2c:fc:c4:20:2b:51:38:ba:e8:0b:
18:c7:63:4c:20:e1:92:0d:77:99:ae:25:64:12:be:
d0:6a:59:d5:4f:42:2d:ce:48:8d:f0:15:8a:fa:ad:
ca:e5:1a:d6:ba:bd:be:f3:bb:a1:08:4a:32:92:73:
6e:e1:18:36:4e:28:67:01:ab:e7:00:6b:4d:c8:5b:
12:17:80:8b:53:69:ec:3b:36:00:dc:27:f6:d6:17:
ea:af:ea:61:f4:db:ff:43:c4:8a:c6:08:16:63:f1:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A7:28:43:62:99:58:B5:D5:00:9B:51:01:A4:71:3A:3B:8C:17:DD
X509v3 Authority Key Identifier:
keyid:67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:51:9e:cb:55:e5:04:3f:b6:ee:d3:95:4c:56:fb:a0:a1:37:
ac:67:ec:a4:86:41:cb:a7:4f:3d:03:b8:65:1c:44:62:27:e2:
94:b4:d0:fd:1f:ef:c1:77:05:d2:60:3e:16:7c:a7:ed:96:e8:
f1:85:45:fa:7d:98:15:c2:45:3d:2a:0b:8c:f4:ab:c4:cd:a0:
97:51:9c:51:e8:60:4e:d9:fb:5f:95:85:57:b3:ed:71:49:32:
44:6f:d7:e3:15:19:d1:b1:2c:a7:88:24:93:49:eb:75:32:73:
ca:c8:26:32:c8:78:35:79:03:b3:8c:ed:06:da:63:ed:e8:27:
75:e4:69:53:29:3c:60:d5:36:dc:74:61:69:3b:f2:10:cb:d6:
bf:39:2c:f5:29:9c:47:34:a8:77:d5:50:c5:2c:b5:a9:33:08:
07:8f:58:d5:b5:a9:9c:5b:6f:bc:da:3d:49:f4:16:e0:f0:d7:
52:75:aa:db:71:38:23:1a:0a:84:c9:0c:b5:93:7d:2e:91:ca:
20:72:37:0c:a6:68:ef:dc:c1:cc:28:40:20:a5:70:25:5d:1f:
61:98:72:ad:c7:56:56:e1:de:6a:91:10:f6:d5:22:e4:ee:47:
75:a5:3c:db:34:da:ad:cd:d0:32:55:c8:6f:41:aa:d2:f4:01:
ce:2c:af:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:01:47 2026 by rpki-client