Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: 462NtmOzg7VOUi+YrsfO2/Q+uxManv9V94SBW+7fCuc=
Subject key identifier: DD:4E:F7:E9:BB:61:97:BE:C6:74:70:17:44:2B:3D:D0:AE:B3:C5:64
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 01A12E7C73E11D31D5BCBDD5DB2AF0DDEFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 0692
Signing time: Mon 12 Oct 2026 05:01:10 +0000
Manifest this update: Mon 12 Oct 2026 05:01:10 +0000
Manifest next update: Tue 13 Oct 2026 05:01:10 +0000
Files and hashes: 1: 6q6FFP59V1iZ5mjSs0C-bMaEVi4.roa (hash: 7kD8hB6sSAR0ZTznrHLFw4wEeWx6SBRTYXwBBQFgLak=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: IwPeWbbMRpeocgeN/1SnTJmkUwbsDB6h14b1u2SD0CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:7c:73:e1:1d:31:d5:bc:bd:d5:db:2a:f0:dd:ef:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Oct 12 05:01:10 2026 GMT
Not After : Oct 13 05:01:10 2026 GMT
Subject: CN=dd4ef7e9bb6197bec6747017442b3dd0aeb3c564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e1:36:d9:be:fd:44:80:63:86:3c:20:a9:67:
f6:bd:ff:fd:0f:8b:24:a8:20:4b:45:20:03:b4:3c:
1c:cb:e8:a8:3c:13:54:95:02:ef:6f:68:02:40:0e:
89:34:67:cc:2e:a8:4e:7b:7c:1f:6c:e3:5c:b4:c7:
fb:99:4d:c2:2f:aa:3c:60:b6:2c:24:09:b7:f0:3e:
07:56:29:3e:60:ef:b9:0c:f4:f1:b0:f4:c7:20:e4:
4a:74:49:fd:17:eb:97:9a:c9:be:1c:93:31:5d:9b:
b9:42:60:51:ca:e8:56:e3:43:42:d5:53:77:d3:7f:
25:ff:8c:75:c2:3e:f0:3a:60:22:64:70:f2:b0:e8:
da:a6:22:16:38:78:d5:9b:9e:7c:a1:27:83:64:e9:
03:44:a7:f3:51:0c:6e:d6:ff:03:cd:40:05:87:0d:
c1:a9:e2:5f:26:03:9a:dc:c5:d2:a0:58:2f:6e:76:
11:1a:ef:c8:2c:76:e5:ab:3b:8f:9e:8f:8a:99:d7:
b6:dd:5b:2e:e7:1b:a2:e8:b2:05:da:b3:98:50:2d:
54:e8:51:d6:e4:a7:09:93:bf:5f:e0:9e:e2:33:f9:
07:8a:c9:80:fb:e5:44:ec:7e:b9:36:6a:c0:a3:33:
18:a3:a8:0b:eb:08:98:4d:15:6a:31:35:ee:32:90:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4E:F7:E9:BB:61:97:BE:C6:74:70:17:44:2B:3D:D0:AE:B3:C5:64
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:49:50:d9:4b:56:e1:f3:bd:40:6b:9a:98:f6:22:ea:2f:7d:
5c:7b:0e:87:7b:fd:52:dc:bf:d6:50:fd:1d:13:ce:44:1a:7d:
49:0f:3f:b7:b9:14:5e:1f:bb:af:aa:ac:ec:16:bd:c8:3f:34:
4a:9e:dc:54:b9:40:5f:94:1b:3e:3f:d2:55:21:87:9d:0e:1b:
0d:cf:75:5f:45:83:1e:f4:1d:38:26:22:5e:92:13:d1:28:23:
bb:f7:1d:2a:eb:f2:48:e3:49:d6:30:56:d5:a5:80:c5:df:46:
59:6c:8b:41:12:ec:68:52:80:53:02:51:9d:51:a5:51:70:9d:
73:14:89:f6:93:88:e5:26:a5:3a:c5:83:8a:11:71:46:55:8d:
00:aa:77:73:71:8d:34:17:b0:a7:90:fd:49:9d:fe:23:05:ef:
fb:03:4d:fa:a5:99:0b:ff:c6:ee:09:f5:a2:0a:92:22:44:b1:
47:4e:0b:d8:b8:6d:8b:22:c3:73:b1:6e:fe:8f:89:56:26:c3:
8f:8f:f0:d4:1e:0c:a4:36:68:b0:3e:fb:e6:97:d3:03:17:d2:
70:43:d3:7b:e9:b5:55:b1:c6:a5:9d:06:57:44:59:dc:21:e2:
80:26:43:ad:0d:f6:94:46:64:68:1c:0d:08:c0:b3:39:49:19:
d6:a7:d7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 06:40:11 2026 by rpki-client