
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: CHM7UkTfL11p8LCSOiHf0xMPymbid6tzpc2xpg9BsZ0=
Subject key identifier: B4:CE:E9:71:44:FC:F6:56:AF:11:1B:C0:79:B0:F9:87:8F:38:23:59
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 019FAC07FB621256264F6740EEF0C377FB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 08CF
Signing time: Wed 29 Jul 2026 04:00:31 +0000
Manifest this update: Wed 29 Jul 2026 04:00:31 +0000
Manifest next update: Thu 30 Jul 2026 04:00:31 +0000
Files and hashes: 1: 6kFMzdPUiPyPGezO_LNVEuK0DIM.roa (hash: WJQe2ZZPHaA7iIzboHAZGY2K/WcsjYy2+zN7bgpDUoI=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: RxdC45oMUS43AsMN0hiol3MEHJ2RHB0lQVy8hyzWYgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:fb:62:12:56:26:4f:67:40:ee:f0:c3:77:fb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Jul 29 04:00:31 2026 GMT
Not After : Jul 30 04:00:31 2026 GMT
Subject: CN=b4cee97144fcf656af111bc079b0f9878f382359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:05:bf:cf:8b:74:a6:16:31:c0:f9:46:08:
8b:72:19:be:5f:40:68:37:d1:4f:ee:3f:75:6d:9a:
3d:d9:9b:1f:db:d4:20:cc:5f:a1:2b:d2:ab:29:53:
65:8b:96:03:b0:69:a0:e7:7f:ce:92:a5:34:69:10:
a7:37:79:4e:3a:5c:a6:25:b9:e6:1c:0a:fe:70:a9:
b5:40:4e:25:a2:aa:8d:1e:de:b3:73:62:55:4c:0c:
c2:22:8d:04:62:75:08:59:c7:f3:41:1f:03:4a:a7:
eb:d3:a0:4e:f6:28:88:29:40:15:18:11:7b:f9:ce:
da:a7:9b:51:33:cb:81:f6:b4:7f:99:fc:db:c2:5d:
5d:e2:67:b4:99:30:88:07:8d:ab:03:e2:53:06:8d:
4c:6b:37:1f:23:28:c6:fb:35:ff:13:18:1d:5f:2d:
44:09:0c:a4:c2:d3:14:00:1c:06:44:9c:12:c0:af:
54:36:41:21:8e:8e:c0:a1:95:7c:db:93:16:6c:8a:
98:b2:a5:05:a0:ce:0e:bc:e2:0a:d8:58:dc:08:2c:
41:45:7b:dc:4c:79:ec:16:d8:c4:20:78:65:93:1c:
3d:78:30:89:2d:aa:a5:af:c0:25:7c:13:23:41:d2:
b8:8e:e8:62:70:bd:d4:80:b6:a7:c0:62:e1:3e:c0:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CE:E9:71:44:FC:F6:56:AF:11:1B:C0:79:B0:F9:87:8F:38:23:59
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2c:b5:67:33:9c:69:31:7c:d3:19:f5:5b:16:0e:28:ac:ab:
94:cd:65:c5:5c:e2:c0:61:8d:e5:95:da:33:5a:5d:7c:85:fd:
5c:61:9f:4b:86:73:24:b1:12:5f:ad:2a:9a:d4:5a:d2:63:19:
72:61:c8:47:f7:a2:5d:09:84:ac:ca:a5:1b:69:09:a6:ff:dc:
01:91:d4:36:7f:80:23:5e:71:41:22:a6:35:e5:fc:71:f9:86:
7e:37:f7:77:e8:88:e1:9a:05:49:b4:84:a2:11:22:85:49:5a:
ce:bb:98:0b:1e:02:4a:ac:6c:29:19:56:c1:23:ca:f8:a8:5e:
98:40:45:ac:79:5e:2c:ef:78:a3:02:d5:9e:fd:ec:ee:47:0a:
23:41:54:3d:8a:e0:3a:e0:5b:42:ec:e0:9e:ce:72:4d:5b:54:
e7:c5:d9:2d:42:55:6c:de:74:aa:d3:8f:41:ec:bc:cf:b3:c9:
64:cc:66:78:5d:71:e3:25:f9:25:57:ef:60:ff:ad:f1:71:1a:
e3:a9:c4:b6:65:07:d1:a1:57:dc:4a:bd:6e:65:e0:ac:5b:4f:
e2:f6:1e:90:2f:c0:d1:cd:d6:bb:10:98:be:ee:6d:56:9b:bf:
f0:4e:e2:b0:ce:88:b3:1b:26:e3:ee:d5:62:06:cc:80:21:3e:
c0:61:a8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:30:04 2026 by rpki-client