Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: Qw5QDUOyKO/52Zy/dsKFLvpaexr1llc0KfvxxpA1VKc=
Subject key identifier: D6:D0:16:57:C6:7B:45:D3:E2:FB:05:F8:70:90:AD:F3:A4:FA:F7:E7
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 019FAB639646B840DE1581EC3EB7FC42AAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 08AA
Signing time: Wed 29 Jul 2026 01:00:58 +0000
Manifest this update: Wed 29 Jul 2026 01:00:58 +0000
Manifest next update: Thu 30 Jul 2026 01:00:58 +0000
Files and hashes: 1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: L65Sp7D2+cL3E4WiIDheedvYK/8J9NL34M/acllYo3M=)
2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:96:46:b8:40:de:15:81:ec:3e:b7:fc:42:aa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Jul 29 01:00:58 2026 GMT
Not After : Jul 30 01:00:58 2026 GMT
Subject: CN=d6d01657c67b45d3e2fb05f87090adf3a4faf7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:84:29:37:87:f9:29:b1:f9:cd:b8:ba:ed:
a6:5e:25:74:3c:fd:90:ee:1d:50:40:b5:e9:c0:53:
5d:a3:f8:13:6f:eb:76:5b:0c:68:c1:1b:70:7f:5c:
f2:cd:40:1a:7a:5c:4c:2a:72:2a:dd:49:fc:50:60:
b8:c9:72:03:41:29:ac:e7:d4:81:0b:87:a1:35:b2:
44:82:e2:bc:80:59:ec:24:4e:99:38:92:c3:fa:c5:
9e:23:09:5e:7c:06:30:3a:93:71:86:b6:3c:df:f3:
36:51:43:5a:15:cb:30:33:8b:0d:b4:3c:1c:d9:04:
32:13:c1:1b:37:7e:3e:93:5e:b4:10:9d:a7:33:86:
7e:f1:79:fb:93:dc:3c:19:c9:73:ef:c3:b8:40:67:
80:94:61:81:24:be:85:16:a4:6f:43:c4:b0:50:57:
8d:ff:c9:20:63:13:57:68:7d:2a:22:d2:3d:93:0b:
af:56:fc:ac:49:83:e7:2a:dc:4c:0b:b1:93:78:08:
1a:f2:6e:db:81:61:71:49:4a:3f:8b:ce:ab:46:21:
19:5e:63:41:63:90:03:58:02:8f:ed:56:7b:73:ba:
aa:52:2e:66:ab:a2:af:38:dc:73:53:66:e1:13:96:
e4:0b:dc:23:fa:2a:ab:85:5b:7d:3a:9e:90:46:e2:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D0:16:57:C6:7B:45:D3:E2:FB:05:F8:70:90:AD:F3:A4:FA:F7:E7
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:db:5a:2a:09:4d:9c:c4:ee:76:12:59:8a:39:73:77:f9:37:
ba:3e:7e:b7:f7:09:a0:ca:c9:c2:e8:51:c4:52:89:35:de:81:
cb:11:12:fe:a5:d9:0d:e2:d4:d8:bc:c2:78:e2:4a:b8:05:76:
2f:f7:48:81:8e:96:b6:01:b5:87:5b:60:10:83:f4:5b:10:74:
c6:d5:33:cc:fd:3f:14:94:69:53:e7:0f:15:60:c4:d8:3d:fc:
3e:86:11:91:d4:d2:e6:60:f4:c5:c0:55:19:07:1e:7c:51:38:
18:dc:cb:1f:2a:07:0a:83:18:fc:42:87:e8:51:fc:af:6d:55:
81:2d:67:59:4a:ab:4a:80:0d:72:bd:5b:32:c7:23:18:a1:17:
12:ff:4d:58:81:8f:ba:b5:ad:0b:37:bd:6b:22:2b:3b:15:90:
1c:c0:32:ec:0e:af:9b:20:b2:59:2c:d2:c9:0c:df:da:3c:8c:
12:bb:25:0b:d4:69:f1:e4:64:b0:56:c0:e4:73:e1:da:4f:55:
82:7a:1c:8b:10:a3:fa:b7:dd:28:4d:1b:94:39:ab:d7:68:f5:
84:31:3b:e4:ea:6c:a6:a2:0d:f3:0e:f7:49:7f:ad:8b:43:d7:
32:a1:f3:8e:58:2e:e9:b8:d2:93:9d:60:59:90:e7:64:05:52:
63:d7:ba:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:09:58 2026 by rpki-client