Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
File: z9LUeU5busDjTJ0BibJu8UcViiM.mft (raw, json)
Hash identifier: QV/bVz/FfDtvylAoKq+3z44QCwS911vR/z63IQ53WaE=
Subject key identifier: D4:5C:6E:FA:F1:2E:5E:FB:A8:A5:AB:59:4B:D6:62:1B:81:7F:F1:37
Authority key identifier: CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
Certificate issuer: /CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Certificate serial: 01A0C3D6A0232479292112FC125057F5E090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
Manifest number: 0238
Signing time: Mon 21 Sep 2026 12:00:17 +0000
Manifest this update: Mon 21 Sep 2026 12:00:17 +0000
Manifest next update: Tue 22 Sep 2026 12:00:17 +0000
Files and hashes: 1: e9ESBbCpXLampxKyfROKHhSNrlQ.roa (hash: tD7v+u/DQGlM+A9s6n4BBi5LAYT9sFcm9HvPxsWUOOU=)
2: pUcV2CDMwVfdHgvxvC-AB5Vhfog.asa (hash: /YYL6jpXO8Tk4JIAMqivU9OX7v7luqvFgZ3LC4roaSQ=)
3: z9LUeU5busDjTJ0BibJu8UcViiM.crl (hash: XyTyY663ky3glkm21GorXK7FxUrLerV4n5dVwaV74zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:a0:23:24:79:29:21:12:fc:12:50:57:f5:e0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Validity
Not Before: Sep 21 12:00:17 2026 GMT
Not After : Sep 22 12:00:17 2026 GMT
Subject: CN=d45c6efaf12e5efba8a5ab594bd6621b817ff137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:eb:7b:5b:5c:ad:6b:8e:83:a0:df:c4:5b:
60:dd:7a:1d:28:84:da:02:31:88:0b:5f:4c:5c:a1:
e4:e6:3a:af:41:40:0a:59:f1:69:29:0c:b9:ff:67:
4a:d4:d3:be:ce:93:bc:3a:59:70:78:fd:b4:86:9b:
ed:f4:b2:ab:09:a7:7f:46:81:9f:26:6c:a7:3f:69:
f0:8b:d0:1b:13:a9:ca:4f:af:91:b6:2b:27:c9:6f:
84:5b:f2:c6:9f:af:e6:a7:5b:db:ff:f6:ce:00:5f:
71:3e:bf:9f:1f:89:94:cb:85:4a:bd:9e:89:0f:9f:
d1:61:fd:5f:c7:ae:e2:7b:56:13:eb:42:58:c6:68:
93:13:a8:4a:6e:29:0e:7e:bc:49:9b:45:02:9d:b8:
2f:0c:a1:0b:ac:5b:63:3b:dc:7a:20:fc:e3:58:55:
3f:aa:b4:8b:10:70:f8:08:9f:d6:da:f2:1a:1b:e2:
a6:be:8b:f8:7a:1a:d5:8e:f4:62:a9:3d:49:11:03:
3e:1a:22:ba:4f:d3:56:04:9f:df:e0:47:a3:0a:db:
38:43:bc:45:a1:9e:bc:8c:65:28:db:0c:d2:3d:b6:
a3:b2:b8:44:53:5e:c9:39:46:98:38:55:50:c4:17:
ba:bc:9d:c3:2a:d1:52:8f:e9:4b:c1:54:04:f6:7e:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5C:6E:FA:F1:2E:5E:FB:A8:A5:AB:59:4B:D6:62:1B:81:7F:F1:37
X509v3 Authority Key Identifier:
keyid:CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9a:af:b5:c1:85:3a:75:21:57:e2:59:02:95:c7:49:03:f6:
1f:e1:90:77:bd:5c:0b:e9:e2:48:eb:e4:50:85:70:10:70:16:
8f:23:a7:28:c0:c7:61:66:9c:0e:67:fc:6c:b1:bc:7e:87:73:
89:0a:fa:16:f7:52:e2:19:d1:84:d9:94:46:dc:c5:0f:ee:2e:
d2:dd:c6:0e:61:be:a7:c0:61:77:cc:ce:12:37:ad:d6:11:bc:
19:64:28:f2:78:fd:2f:35:db:60:e3:df:28:1b:87:b2:65:b6:
2c:4b:be:5a:40:a4:41:8a:fc:8e:f4:74:9e:24:73:08:32:d3:
51:38:50:76:69:62:ff:99:8b:79:48:0f:43:51:a3:9f:bd:61:
98:1f:5c:bd:74:b8:5f:c1:73:2c:f9:6b:9f:18:44:b0:ab:30:
36:fb:56:20:75:b6:eb:fb:fe:cc:ce:26:fd:d0:a5:6f:e6:39:
ec:dd:de:0c:5f:fb:55:81:9c:ba:48:10:9f:88:a9:12:5d:37:
c7:0e:3f:bf:ec:7a:5a:28:4e:25:e1:3c:73:aa:03:92:44:1e:
3b:7b:ed:54:fa:54:81:67:a5:b3:5b:32:27:8e:5d:6a:99:90:
ff:7d:76:3d:0e:72:b3:7a:14:86:ea:d2:a2:b0:2d:f4:83:b7:
06:07:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:25:04 2026 by rpki-client