Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier: sLeYiedgj6FOV7ykZfOiV9qz3Rzxx3s88nLYKq7G86k=
Subject key identifier: 0E:E5:0C:81:A9:BD:4F:C9:A5:59:1B:86:5D:D0:61:F0:AE:67:5B:C9
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 01A0DC853AD1943830AFABEC6AEA83ED77F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number: 1A85
Signing time: Sat 26 Sep 2026 07:01:53 +0000
Manifest this update: Sat 26 Sep 2026 07:01:53 +0000
Manifest next update: Sun 27 Sep 2026 07:01:53 +0000
Files and hashes: 1: Yo2OMvKcfdcYupX4YzMuNg6YOoU.roa (hash: m4lMqUG0bdl6WZJBNR/JE1WP+BWFScOk7QdsyR0VQzU=)
2: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: Ux7N6k5JrzE4jVqPsU8cnmY4e89M5Mcz3oj9XLA7mys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:3a:d1:94:38:30:af:ab:ec:6a:ea:83:ed:77:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Sep 26 07:01:53 2026 GMT
Not After : Sep 27 07:01:53 2026 GMT
Subject: CN=0ee50c81a9bd4fc9a5591b865dd061f0ae675bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:94:54:3d:1e:c5:0a:ef:23:45:31:60:4d:
91:69:7b:9b:24:c1:6a:57:ac:8e:ba:0c:f4:02:4d:
4d:b4:80:00:fe:2a:78:e4:d3:81:64:27:2a:85:4f:
de:e4:ee:36:ac:0b:87:7b:d1:77:19:08:32:d4:87:
48:87:a7:1c:10:9d:48:27:31:fa:7b:d6:de:7a:e1:
1b:3c:11:6d:a0:dd:3e:ba:c4:3b:a9:5c:34:12:db:
5f:b3:ff:b9:18:18:c7:9c:57:f3:8e:6f:17:0b:26:
e0:02:cc:99:3c:a8:83:5e:7a:2c:a0:b3:b4:fc:24:
d9:59:33:f9:84:f6:ea:f6:41:b6:92:ff:cf:fb:e1:
b1:89:20:ce:00:0c:3b:0c:1c:08:f7:07:2e:2c:72:
05:c2:0f:4b:ed:3f:1d:02:13:91:e4:dc:9a:5a:5e:
11:3b:ec:59:9e:62:79:2c:39:f5:c3:28:41:0c:8e:
6d:02:46:f3:57:3e:0b:df:fe:c4:b3:16:ab:3d:51:
af:16:07:44:6c:27:71:3d:41:19:b3:92:b8:7b:7b:
2d:11:68:1a:31:16:1f:dd:0b:b0:e6:ff:67:10:17:
f6:5a:22:d9:d3:81:61:37:fa:10:d3:40:31:58:4e:
1a:3e:27:c0:ab:a8:2d:d2:db:72:2c:8c:d7:15:0e:
f9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E5:0C:81:A9:BD:4F:C9:A5:59:1B:86:5D:D0:61:F0:AE:67:5B:C9
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:37:0c:a4:68:fb:24:53:cc:8e:e8:ba:71:10:b5:cd:2a:f7:
14:d4:7c:38:cf:cd:91:27:55:6d:b9:d8:5e:02:77:27:8e:d9:
04:e8:dd:b8:e0:42:de:15:8e:2b:0d:20:7d:56:dc:e2:b5:c8:
a1:d2:26:02:18:22:f7:6a:b5:54:b4:b0:8c:71:fe:bf:a0:1f:
c9:5b:34:a8:6e:54:8c:46:e0:a0:c4:92:a7:f4:8a:16:8a:9d:
99:5b:b6:8f:3b:0f:52:79:ad:b4:47:54:43:ab:ea:06:72:f6:
f6:1f:45:00:29:bc:b3:55:9e:71:70:b8:5e:cc:d4:e4:e9:81:
7c:ad:9c:98:0b:fa:1f:92:b9:d9:fa:e6:4a:95:58:c9:67:94:
e5:5b:58:24:57:1c:0b:cd:5e:ea:61:f8:d9:56:18:34:a3:10:
11:32:a0:27:c1:4d:54:02:d3:67:60:22:91:39:88:7b:d9:c8:
02:92:b3:af:79:41:2c:ed:9e:43:23:f9:6b:8d:c4:c2:b9:5f:
3b:46:2c:da:33:07:fa:8f:33:c0:2f:3a:ad:51:31:8d:3e:0a:
ae:b8:28:40:8c:f2:13:d6:3e:ea:8e:f4:38:ea:fd:b8:ed:81:
b7:d7:35:1e:61:1a:d2:e0:56:50:b0:0c:ce:ad:14:de:9f:c7:
64:b7:c0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:19:44 2026 by rpki-client