Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File: mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier: Yv5OMwtZWVFdpONXDTg2IU6eYCROhAVfdxcCroxruco=
Subject key identifier: E5:71:7F:3F:3F:21:7A:44:31:4F:63:E0:5D:42:8C:E6:C5:E4:5C:09
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial: 01A0CD10FEAEC47AB8B5EBC01C352885077D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number: 068F
Signing time: Wed 23 Sep 2026 07:00:38 +0000
Manifest this update: Wed 23 Sep 2026 07:00:38 +0000
Manifest next update: Thu 24 Sep 2026 07:00:38 +0000
Files and hashes: 1: 3V5hdONsM9mnD45S8jPJ1WtCJLE.roa (hash: ycXvRVGBtkt6ad8wPNg1L/oY1B8Crh02govZSgpTHFQ=)
2: V_tPVXkmNH-9PJavVnocYPrTQTA.roa (hash: AGRfFdJJ1C/dURKRvBBJILwUMj7XLrg7AaRP8T3ZsSM=)
3: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: IAHjN5iiYS8eEB6HwbulJA/5Kl5hGnKLgY3mnYBUorU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:fe:ae:c4:7a:b8:b5:eb:c0:1c:35:28:85:07:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
Validity
Not Before: Sep 23 07:00:38 2026 GMT
Not After : Sep 24 07:00:38 2026 GMT
Subject: CN=e5717f3f3f217a44314f63e05d428ce6c5e45c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:ac:db:d2:51:b8:71:e2:a7:6d:e6:a8:0b:
8c:40:b8:61:b2:83:9d:bc:32:d0:45:7a:b4:74:db:
6e:ec:97:4b:8c:d7:7b:d7:d4:8e:3c:aa:8e:e1:da:
77:5d:d6:08:18:4c:18:81:e8:b1:c0:62:62:2d:b6:
73:3a:a0:f6:98:4b:46:e3:8f:90:e7:d5:c4:f6:a9:
66:c7:31:f6:b1:09:2a:85:de:6b:d8:9b:1a:bb:db:
0c:b3:67:b5:ea:d2:cf:d9:d4:14:a5:40:2e:b8:ef:
e9:47:c4:d5:4a:5a:5b:a0:32:d9:7f:ab:dc:6a:44:
16:9f:26:5b:ef:12:23:f4:37:05:9d:56:ac:07:b8:
08:89:57:f1:db:21:e5:b6:28:af:8c:ca:9f:2f:f1:
ad:69:29:09:1a:ac:e7:ba:be:4c:7b:4d:38:83:8e:
c1:db:63:67:54:22:aa:b8:cc:84:72:a4:32:d9:8b:
af:3f:98:fe:75:54:91:42:a6:3d:ce:8d:cc:a1:25:
dc:36:bf:cb:50:54:26:17:0d:ce:da:56:1b:bb:12:
91:8a:fc:93:e1:70:3c:46:e1:b3:87:a0:62:42:e3:
62:a8:5c:6b:13:9c:0c:cb:25:c4:4f:6e:38:16:b0:
79:9a:fe:b8:1a:2f:07:25:5f:b9:b2:ac:22:ef:f3:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:71:7F:3F:3F:21:7A:44:31:4F:63:E0:5D:42:8C:E6:C5:E4:5C:09
X509v3 Authority Key Identifier:
keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6d:ff:6f:ab:70:ca:84:8e:ac:64:4a:38:15:fe:77:60:17:
6b:dd:92:9a:fc:36:b5:f1:08:03:7f:44:3a:97:5a:9c:0d:45:
bb:bf:49:cd:e2:9e:82:0d:a2:bd:71:37:54:93:42:4b:68:3d:
89:07:a9:25:80:92:28:d4:05:e1:0a:7a:f4:4a:07:7a:ff:ef:
36:36:ac:75:d8:d1:ab:20:9e:80:21:4c:24:a3:d5:b9:69:b8:
51:99:5d:d4:e4:b1:7c:3a:09:12:4e:19:29:07:47:45:20:0a:
e7:22:6f:d3:a9:c8:c0:11:5e:d2:cc:0f:ab:4e:0d:57:9b:82:
4a:05:c4:c0:16:3d:c7:cb:72:c8:0b:f9:1d:0e:4f:95:04:75:
53:04:e7:47:7a:d7:b4:83:fb:d2:e0:95:9f:f2:6e:06:47:15:
1b:30:d3:a6:2f:4c:fb:51:f8:04:dc:15:57:17:26:12:df:66:
5c:3f:11:c8:26:87:b1:ce:32:e0:c7:ad:e4:c0:62:09:8a:d4:
3c:20:33:b4:b8:fe:1f:67:b8:ea:57:62:21:49:07:83:78:76:
3d:d6:2d:c5:1f:7b:b9:81:07:3f:4d:48:77:ee:6e:95:b0:9e:
aa:29:59:33:38:9f:98:28:e8:21:3a:ba:47:bc:9d:6b:63:e0:
a6:d9:be:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:27:57 2026 by rpki-client