Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
File: Z8ooyF9TcJI3VX3talTbfEODj98.mft (raw, json)
Hash identifier: +0TFQ0ij+QPz2gswreTLNtUjjfQNteUPMNGWbB67EQk=
Subject key identifier: 78:3F:AF:DE:60:90:CE:4E:6A:5E:63:51:7C:68:8A:36:5E:62:F0:1D
Authority key identifier: 67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
Certificate issuer: /CN=67ca28c85f53709237557ded6a54db7c43838fdf
Certificate serial: 01A0C28D3DEB4FE9C1162C810EF4AD9F45A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:00:31 +0000
Manifest this update: Mon 21 Sep 2026 06:00:31 +0000
Manifest next update: Tue 22 Sep 2026 06:00:31 +0000
Files and hashes: 1: 0n7BjsuUtMK9eux3ZPIRhUmMWKU.roa (hash: mtRTQIogdYCGX/FRYcEHTrpW3dJUutGmmUeZceCASwo=)
2: Z8ooyF9TcJI3VX3talTbfEODj98.crl (hash: Yg1IzJktPCce4ZD/J3vrfoKRCXWJRyEapM/CKvF7YPo=)
3: tVnRYYZjjcF8Zb90VZauoKBz0VM.asa (hash: js5NtSgPh808PFkiRkghv7MP7EdL9RD16y2VNGbfdfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:3d:eb:4f:e9:c1:16:2c:81:0e:f4:ad:9f:45:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ca28c85f53709237557ded6a54db7c43838fdf
Validity
Not Before: Sep 21 06:00:31 2026 GMT
Not After : Sep 22 06:00:31 2026 GMT
Subject: CN=783fafde6090ce4e6a5e63517c688a365e62f01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:2a:8d:81:19:ff:fc:5b:f4:a5:c6:c4:da:
1f:3d:8f:55:0f:f4:fd:39:a2:e8:52:9f:8a:c9:b6:
49:0d:15:7f:c0:ee:e6:62:9c:a7:0f:ac:a8:78:af:
78:f6:08:2d:cb:ed:aa:8e:8e:f6:59:d2:5c:65:0d:
f6:76:2e:1f:7d:1d:1d:61:0f:b6:4a:fd:10:aa:ed:
1a:ef:be:7e:19:52:4f:5b:5c:8c:7d:0c:34:df:eb:
2d:9f:ed:70:eb:6e:44:00:7d:1a:5b:f7:da:79:af:
82:22:bb:84:d8:b3:2a:0e:78:40:a7:5a:5b:fe:d8:
35:c7:58:76:cc:dd:5e:5c:65:da:2a:b1:12:f0:b0:
ee:38:fd:14:9d:60:bf:5b:72:d3:50:ee:30:c4:8f:
69:9e:27:e0:9a:8c:0d:2d:2f:8a:e4:dd:44:94:c7:
db:75:e4:53:7a:85:3b:60:35:ba:a3:9b:e1:bc:19:
c5:35:5e:f4:bf:98:fa:8c:be:15:64:9d:5f:9a:d2:
43:1b:09:0b:8a:dd:c5:94:c5:cb:67:99:71:a7:69:
5f:d0:9e:e1:a7:a8:76:0b:55:48:e2:db:8f:53:33:
43:eb:f8:ca:1c:3b:f9:88:ab:11:fa:01:3c:82:a0:
e2:2a:b1:52:4f:3c:af:6d:4b:c5:e3:f0:d8:3d:39:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3F:AF:DE:60:90:CE:4E:6A:5E:63:51:7C:68:8A:36:5E:62:F0:1D
X509v3 Authority Key Identifier:
keyid:67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1b:6b:fb:20:c7:fc:18:9c:35:0e:c1:fb:41:d9:a6:5f:1d:
12:09:fd:7d:23:05:cc:0e:0c:99:d0:60:ff:b8:4b:f1:be:b8:
06:5e:4d:15:83:fe:22:31:da:eb:40:45:e8:a1:80:88:df:d5:
0b:18:7c:9c:ca:1a:75:b6:5f:ed:27:2e:09:53:47:b3:64:d8:
b5:b9:09:cc:a8:75:3b:45:68:3d:10:dd:35:de:6c:74:2b:8e:
2b:68:f9:6c:a8:b4:c3:9c:f0:4e:f1:1c:7f:f9:bc:94:60:c1:
ee:91:52:20:c4:60:80:01:49:3d:cd:60:69:1b:09:9f:a0:ce:
ed:28:ab:4c:ab:b8:75:df:c8:26:20:b6:50:2f:1a:ab:3e:b4:
15:4d:1b:71:7e:52:fa:d7:38:6e:ef:52:83:3e:fd:c8:c6:25:
c7:89:ad:ea:4d:96:27:f9:67:60:3d:da:e9:7a:1e:5d:9d:3e:
f3:b7:05:5c:f4:9b:b4:fe:8d:62:97:f2:28:ff:68:2a:1d:fd:
d9:62:48:a6:0c:b8:26:19:a4:7f:fd:cb:8f:87:36:29:3d:69:
45:8b:2b:c4:2d:df:83:5a:81:ab:1d:df:73:7e:9d:37:2a:d8:
e8:17:3c:13:6e:6d:3d:3b:40:6c:a1:0d:fe:01:35:34:16:c9:
07:a7:ac:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:55:51 2026 by rpki-client