Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: 6I8L8AHtRREHV0c/isU+qHh+eThJtnZOKnRHufK7LZc=
Subject key identifier: 3C:37:69:8A:BF:96:2F:C0:84:45:61:13:AF:7C:2B:2A:88:37:E3:89
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 01A1148568AB6AF04A6ED041B8598BD2DF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 0965
Signing time: Wed 07 Oct 2026 04:00:49 +0000
Manifest this update: Wed 07 Oct 2026 04:00:49 +0000
Manifest next update: Thu 08 Oct 2026 04:00:49 +0000
Files and hashes: 1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: W/GkM6sQjUUrLPBnUXr1u/FLieR5BaZqW044aGwmVUA=)
2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:85:68:ab:6a:f0:4a:6e:d0:41:b8:59:8b:d2:df:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Oct 7 04:00:49 2026 GMT
Not After : Oct 8 04:00:49 2026 GMT
Subject: CN=3c37698abf962fc084456113af7c2b2a8837e389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:25:3f:c2:a0:a2:9a:46:d6:fd:f4:21:f8:
72:87:26:78:15:8c:d2:e3:90:ea:39:7d:d8:b8:7b:
3e:86:65:3e:fa:ce:0f:ef:9c:c1:20:87:1f:bf:94:
5b:d1:e0:9a:c9:8e:96:59:0b:1d:4c:d0:b3:ac:48:
b6:9a:c8:70:41:a6:79:92:54:f7:44:66:b9:42:3b:
93:06:87:8b:3a:92:96:ed:a6:c1:be:42:3e:b1:93:
60:83:bc:9f:50:43:f6:ea:bb:8b:41:dd:5e:a2:76:
49:89:e5:53:6a:2e:f3:db:68:2c:9b:00:35:3d:71:
a6:2a:c5:79:9f:bc:1b:5f:c6:0d:d4:42:d7:7c:8f:
87:8e:02:5d:da:bb:b0:03:df:5c:02:fa:9c:6a:44:
c2:f5:cf:3f:23:76:e0:7f:4d:34:9c:c1:1f:0e:9a:
02:09:b2:5f:17:bb:e3:ed:0a:fb:ab:6c:e9:09:7b:
8c:ae:b1:41:8b:19:5a:b1:6a:c0:4c:f1:e6:49:94:
9c:2f:fa:69:53:1f:e7:ac:da:84:e9:3e:9f:4e:c3:
c9:41:39:ac:e6:df:cd:6c:5c:66:c3:97:63:38:29:
3d:82:e2:cf:a2:76:86:f3:60:5c:a6:f1:de:f1:e4:
c2:c9:61:8a:7a:e3:6d:6e:aa:ce:20:a9:9f:0b:4f:
19:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:37:69:8A:BF:96:2F:C0:84:45:61:13:AF:7C:2B:2A:88:37:E3:89
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1e:2d:38:8a:b8:dd:a2:d3:1a:8d:07:f0:06:7f:ad:49:c3:
82:f7:72:e6:68:4e:97:69:f3:50:36:ae:d1:97:8f:c9:e9:91:
f1:4a:0a:f0:43:ca:bf:dc:a3:45:b3:db:90:bc:2c:f9:14:a9:
e2:c1:56:b2:ca:a1:52:f4:da:48:6b:7c:73:aa:4d:17:ce:5f:
ef:96:84:15:24:bd:72:0a:0c:ad:b6:a4:bc:86:2f:c5:15:38:
e6:60:18:7d:2d:1e:02:c1:27:10:6c:b1:6a:bd:13:e8:c9:95:
19:d4:a6:b5:1e:95:36:27:64:a0:31:41:98:3a:ba:f9:8c:a7:
67:87:74:5e:70:d2:ef:86:a4:a7:cc:1a:79:e7:83:3d:12:2e:
d3:fc:e7:f3:6d:e2:4d:8b:fb:b5:ec:5d:48:c9:4e:61:6d:71:
91:b4:8e:5e:92:9a:81:7a:d0:a3:58:13:5b:fb:ef:b4:30:e5:
4b:e9:34:c1:28:15:68:d0:77:46:9e:c1:36:69:30:ca:3d:b4:
d2:82:cd:5c:1b:0d:93:69:67:80:8f:1d:04:9a:9d:a2:fe:11:
74:e8:c1:5b:e4:37:10:39:cc:fb:19:f3:b7:1a:7a:9c:50:19:
d5:78:9c:53:98:b9:11:ec:16:c0:95:d7:4b:74:5c:38:6d:be:
60:4b:e0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:57:49 2026 by rpki-client