Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: qsz7PfOki/Lk7paxMsUjKSXoVo6h5JeQIHJ3dY8i8e8=
Subject key identifier: 27:C9:4F:55:2A:BE:10:95:74:DE:C8:59:96:9E:A1:C1:52:86:41:50
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 01A0E85383D453039D9451E56FD7B71BA981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 060E
Signing time: Mon 28 Sep 2026 14:03:02 +0000
Manifest this update: Mon 28 Sep 2026 14:03:02 +0000
Manifest next update: Tue 29 Sep 2026 14:03:02 +0000
Files and hashes: 1: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: KztjNWiP24uhdzzgUf4SHnK3t21sZRrfwwqSDFwU1Rk=)
2: _7yKofbHnJoEbJpKfmaDh_UzpU4.roa (hash: SGPyBt5E90o9ZLuMZHW0/rutTar66Sv5UUe187RDyyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:83:d4:53:03:9d:94:51:e5:6f:d7:b7:1b:a9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Sep 28 14:03:02 2026 GMT
Not After : Sep 29 14:03:02 2026 GMT
Subject: CN=27c94f552abe109574dec859969ea1c152864150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:16:56:8a:63:ea:b1:94:53:14:8f:a2:1c:
c2:e5:51:4f:23:35:ac:24:7e:22:be:23:74:62:d4:
2c:9e:88:50:be:d7:42:33:26:d2:bf:ac:a6:9c:d6:
76:21:a9:46:02:35:77:6b:8b:76:6c:38:c2:71:13:
3c:22:db:d6:6e:53:19:95:76:c7:12:54:38:6c:ca:
d6:87:ee:21:dd:3a:3b:d0:72:07:42:89:84:a7:d1:
81:15:61:af:e3:ab:09:22:74:6d:6e:0a:b4:5c:9e:
2b:87:ca:f1:c6:25:03:b5:91:dc:6a:86:89:97:1f:
ca:8d:da:9a:b1:26:2f:db:37:be:2c:d5:9a:49:a1:
5d:74:4b:96:5f:b4:52:91:30:52:6b:6d:ba:46:bc:
ef:6b:82:f7:fd:5c:7c:68:12:cc:c0:57:2a:2a:f9:
7b:ee:d5:7a:a0:d8:e4:dd:53:3b:e4:27:45:75:0b:
ef:f9:d2:84:f1:bd:c7:5f:22:41:af:cf:9b:93:58:
ce:34:3a:55:6a:16:39:27:fe:ad:27:85:91:65:71:
72:04:fc:06:26:ae:e9:3d:2b:96:b5:7d:a5:3f:9c:
ac:71:14:fc:ec:6e:2b:ed:64:88:8c:0c:1f:71:5b:
7f:5f:e3:26:bc:10:8c:d3:f9:4c:c3:c9:24:62:5a:
41:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C9:4F:55:2A:BE:10:95:74:DE:C8:59:96:9E:A1:C1:52:86:41:50
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e2:15:e4:61:13:f6:a3:4c:d9:63:9c:91:51:0e:da:62:fe:
19:b0:d0:ab:a6:7e:b1:b7:18:9f:85:93:22:6d:f5:fe:55:2e:
af:1f:cf:32:74:25:93:11:9e:0a:15:5c:ad:5c:58:8e:9b:b1:
95:0a:5b:f4:2a:2f:50:36:22:70:12:c8:bf:6c:09:1b:30:7e:
92:d8:5a:15:78:7d:23:0a:90:a5:48:b6:e5:ef:18:31:05:32:
2a:b5:14:73:3a:16:b8:f5:34:e2:8d:e1:58:8d:59:ab:e3:c7:
25:a4:aa:d0:a8:5d:95:e7:35:f8:c4:27:b1:9b:81:6f:65:20:
07:b3:8b:65:a3:69:0d:68:11:90:13:69:01:4d:8c:39:b2:9e:
44:a8:0c:20:29:49:a4:0e:8a:fc:a2:b3:61:9e:aa:c9:33:34:
3c:b8:a1:af:e1:0a:bc:3c:29:f8:b2:41:68:9f:c3:e8:c1:9f:
3b:69:3f:e3:99:85:2d:a8:05:76:37:7b:7e:de:82:3b:1a:92:
e5:41:fb:12:b1:8f:a1:88:7b:b0:4f:85:81:48:b0:1c:be:c8:
26:0e:b7:78:18:ed:11:0f:8f:45:fb:16:3e:16:45:8e:01:75:
8b:00:8b:63:e9:b5:36:6a:01:49:1f:de:b0:f3:ff:5f:e4:db:
60:e9:9a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:16:43 2026 by rpki-client