Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
File: Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft (raw, json)
Hash identifier: DemU3pTxOmZn7WvaF3PUM1Xh2FfMZyGw8nfFYvfGG88=
Subject key identifier: A8:BD:81:45:08:D8:58:7E:CE:C4:A8:08:2D:5D:F9:D6:4F:4A:B9:CA
Authority key identifier: 67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64
Certificate issuer: /CN=67d6cd6477f846bf170508ff1ac38994877d3064
Certificate serial: 01A03DF1FD2AC7E37F282DE14444E8DEACE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
Manifest number: C6
Signing time: Wed 26 Aug 2026 12:01:04 +0000
Manifest this update: Wed 26 Aug 2026 12:01:04 +0000
Manifest next update: Thu 27 Aug 2026 12:01:04 +0000
Files and hashes: 1: Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl (hash: dfpE9rHIli3t0w2RHQEEneCIYZ3F4PqzHWJXrc/Kfvk=)
2: s5JRW3dxCG3iSbG4YoeXwLVuI28.roa (hash: 6zxuS5n39EUMCOA6BmiDNejkEzaS6JegPxfxplNxV0w=)
3: w8zh1viLCameZBKyxiERXyJUv6g.asa (hash: +trZ6/UyyOJ0HhjRujxJ5kbX2C1OMx0w/MD/s7o7PO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:f1:fd:2a:c7:e3:7f:28:2d:e1:44:44:e8:de:ac:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d6cd6477f846bf170508ff1ac38994877d3064
Validity
Not Before: Aug 26 12:01:04 2026 GMT
Not After : Aug 27 12:01:04 2026 GMT
Subject: CN=a8bd814508d8587ecec4a8082d5df9d64f4ab9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:27:4f:74:a6:bf:3c:a7:d3:91:07:ac:c8:
51:04:28:55:7e:da:f8:00:4d:d3:16:3c:df:28:fa:
c5:70:a6:9a:e2:42:8b:50:d4:0b:a0:2b:da:7d:29:
f0:54:34:be:06:a1:54:13:96:dd:6f:9e:b0:87:ac:
b8:90:60:ab:d9:5b:93:5b:cf:b6:13:df:91:5d:25:
7c:fb:88:0c:06:8d:7a:39:99:e7:bd:e4:07:db:08:
86:3e:30:ca:ca:2c:e8:e2:2b:7a:80:d7:0b:c5:14:
3e:c9:df:bc:35:cc:31:82:b6:dd:5b:c7:e9:f2:ef:
5c:26:53:b8:98:0f:c5:d2:a2:08:54:b2:62:41:68:
b8:f1:e3:fb:21:09:4f:fa:aa:47:45:4e:7b:26:0a:
32:31:ee:8e:26:4c:50:71:dc:38:f0:c8:30:c6:3e:
eb:5b:e9:13:61:10:80:96:82:a5:e0:9e:dc:66:0a:
7b:3d:33:98:b5:ce:90:90:36:81:7d:80:38:08:74:
5f:f0:70:07:3e:60:c8:66:22:91:6b:3f:16:df:c5:
a3:a9:92:e9:31:05:b5:a5:64:64:3e:8d:21:af:ad:
42:4b:d6:b5:29:ff:67:e1:62:c8:15:b8:6e:75:92:
df:59:b1:50:7e:7e:71:31:6c:13:1f:c7:3f:8a:09:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BD:81:45:08:D8:58:7E:CE:C4:A8:08:2D:5D:F9:D6:4F:4A:B9:CA
X509v3 Authority Key Identifier:
keyid:67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d4:06:bd:d0:83:ca:f7:b4:79:a6:a1:ae:fc:7b:87:ab:c8:
82:2c:a2:55:59:ce:6f:05:70:45:6f:49:2c:a9:2f:fe:6a:fc:
47:53:fa:0c:4f:3d:ce:53:73:5b:c2:b2:f6:3b:2b:52:41:36:
4f:d2:b3:ba:cd:9b:bd:01:11:54:83:c4:42:72:3a:8d:cf:94:
81:a7:92:0c:be:f2:45:a5:e9:94:aa:d6:9e:bc:31:55:71:0b:
dc:3a:76:6c:2a:c4:1d:5a:96:c9:49:c5:3f:38:47:04:cb:1a:
c2:d2:45:7a:93:9c:7e:36:f7:07:3c:77:db:22:6f:67:52:76:
17:36:33:8e:19:d9:d0:7b:77:5e:20:90:0f:f2:ad:18:25:21:
41:4a:60:78:1e:df:04:98:9f:e7:84:86:a8:6b:b7:8f:f7:72:
a8:17:f0:74:46:fa:3f:e6:5c:e8:55:c9:54:a7:7e:c5:b2:60:
47:5f:66:61:4a:12:f8:98:a8:c4:01:b3:5f:7b:43:5d:05:81:
13:e5:93:b2:1b:7a:ae:b3:0c:da:35:40:29:e9:81:0f:d5:48:
23:02:6f:1c:72:1f:00:d2:b5:8a:69:7e:88:89:8d:6e:5c:2e:
ed:c9:00:af:07:ae:8b:a0:03:df:c7:21:03:e3:df:41:bb:30:
3c:7c:aa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:19 2026 by rpki-client