Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: RJEADElqIMaDDqsatlLWMw+GXqO0DsTDYy/nWH/r3ZU=
Subject key identifier: 56:79:68:68:73:53:44:EC:3D:22:4A:AD:4C:A5:D5:48:31:DC:A2:9A
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 01A0CEFEE63A1C6990EECA3538BED055D1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 0941
Signing time: Wed 23 Sep 2026 16:00:06 +0000
Manifest this update: Wed 23 Sep 2026 16:00:06 +0000
Manifest next update: Thu 24 Sep 2026 16:00:06 +0000
Files and hashes: 1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: C9qCf07o+7O3WvZGYD3J8kYGnH3cb6yovvhXYowg18Q=)
2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:fe:e6:3a:1c:69:90:ee:ca:35:38:be:d0:55:d1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Sep 23 16:00:06 2026 GMT
Not After : Sep 24 16:00:06 2026 GMT
Subject: CN=56796868735344ec3d224aad4ca5d54831dca29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:f3:82:bc:5b:27:92:c8:e3:66:a1:91:bf:
6a:62:16:17:9c:24:ab:07:b7:ab:02:ad:9b:65:50:
ae:4a:56:5f:76:66:a8:89:3c:c2:a3:e9:d6:6e:8e:
a5:ea:e0:96:62:fe:24:16:08:83:b3:cd:d3:3b:9b:
dd:b2:64:8a:97:dd:ad:ca:52:04:d7:ba:a7:1f:b6:
97:6c:63:8a:0e:bf:3c:3d:a4:43:e8:95:f9:25:b1:
67:76:f9:93:9d:9d:88:b8:10:79:0b:b2:5a:71:8f:
b0:72:d9:43:7d:61:4f:b7:c5:5a:f1:12:43:4a:a8:
e8:2f:14:5f:67:26:00:88:55:67:5f:43:d3:5c:bd:
ff:0a:59:5b:dc:91:7a:68:97:00:62:b8:4a:2c:e9:
38:c0:75:9d:61:12:51:d5:d5:d1:af:a3:66:b7:aa:
c5:4d:cf:71:9c:4b:cc:a0:4b:b3:43:7a:ad:15:26:
0c:58:95:48:c8:32:6e:ed:ee:fd:3d:2e:d0:d3:29:
48:9e:b0:b7:e6:80:a8:9a:fa:1b:0c:2d:c8:f6:12:
26:f3:d8:48:bc:f5:6b:21:36:b4:50:f3:e5:67:fe:
b9:e2:05:5a:5c:8f:a9:88:2c:e3:ba:6e:f9:92:ad:
23:76:53:2a:5b:fc:24:de:48:8e:53:28:3b:a4:a0:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:79:68:68:73:53:44:EC:3D:22:4A:AD:4C:A5:D5:48:31:DC:A2:9A
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f0:e9:14:16:0a:e0:3c:ad:f6:1e:42:b8:1c:cd:c2:fc:af:
68:73:28:a3:57:56:16:dc:19:ca:d9:c6:6f:e7:a1:82:f4:63:
5a:37:71:27:11:1b:83:0c:19:e4:53:73:db:d4:b6:53:e2:94:
be:f3:91:cb:bd:e7:da:8d:75:e6:60:44:fc:64:f5:2c:04:a3:
42:f5:87:9c:06:ac:83:d6:c6:dd:37:a1:3a:50:91:2e:58:7f:
53:70:ff:30:90:2e:12:f6:c7:31:1f:d4:9c:fe:6c:1d:44:d2:
13:84:80:be:4f:b9:c7:11:6f:c7:dd:06:d3:dd:7c:3f:12:ec:
bb:69:56:42:21:4e:da:99:73:8d:23:8f:8c:a5:01:c7:48:bd:
16:13:62:95:15:4d:1a:7f:bb:e5:3b:87:a2:ce:64:96:04:91:
31:19:4a:bf:15:57:92:63:dc:59:a5:7f:f1:2c:5b:64:50:cf:
f1:71:1c:92:4b:c3:cc:04:1f:96:47:e8:ab:08:c1:b9:1b:c5:
f2:92:ff:39:ff:09:4e:80:7d:f6:3c:b7:59:33:15:f1:67:08:
b9:ce:3b:4b:f2:99:d8:40:54:5a:02:66:8e:b8:33:ba:59:ad:
d5:a5:92:fa:78:d5:a6:2b:0d:e1:e6:dd:04:ee:60:50:c4:f1:
4f:ca:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:29:52 2026 by rpki-client