Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: djZTtK6rEqQSJJvxLUO2npHZNqqZAqwcEI90kg4XFdI=
Subject key identifier: 8B:7F:3D:8C:FD:E1:A1:B3:D3:4C:6F:60:2A:87:F9:BE:AD:C2:A4:A7
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 01A0024AC7191B7716FB58623AFA86DAF5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 08D7
Signing time: Fri 14 Aug 2026 22:00:50 +0000
Manifest this update: Fri 14 Aug 2026 22:00:50 +0000
Manifest next update: Sat 15 Aug 2026 22:00:50 +0000
Files and hashes: 1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: PRH/O+N+88EY1UMjxSB8bXrnMUAOKM+B8Ya8SkjUUAs=)
2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:c7:19:1b:77:16:fb:58:62:3a:fa:86:da:f5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Aug 14 22:00:50 2026 GMT
Not After : Aug 15 22:00:50 2026 GMT
Subject: CN=8b7f3d8cfde1a1b3d34c6f602a87f9beadc2a4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:cc:9c:5b:8d:f0:c9:53:c3:fb:2d:27:79:
3f:aa:4b:a1:2c:72:f7:a0:7d:ce:2f:9c:67:da:e7:
bb:05:6a:77:f8:f8:0a:7f:3e:79:d6:3e:3d:2d:91:
0a:fd:09:c5:37:a4:15:61:8f:2f:05:cf:ce:f5:6f:
6f:b3:6b:b0:be:1d:4d:cf:8a:87:6a:6e:8e:86:69:
af:51:b2:de:75:74:b1:8a:64:95:87:81:43:cc:4e:
d1:0c:11:fe:1b:c5:b7:94:85:73:a4:c5:c9:7a:bc:
43:f0:b4:62:8d:74:f3:5a:f6:8b:0a:d9:08:8e:aa:
12:51:8d:eb:6a:0a:c8:9b:16:8d:7b:8f:84:81:8a:
da:5e:16:05:ec:a2:05:a4:c8:0c:bc:f5:e4:71:59:
82:ac:ec:61:99:c2:f4:ca:b7:8a:3c:86:6d:fe:4c:
94:1a:16:4f:67:1c:a4:95:64:5a:d4:d2:21:f0:a7:
8d:ca:93:e9:71:f5:03:b6:5e:a2:28:47:66:42:f2:
05:d7:c8:1c:a8:b9:4c:a9:c3:37:b8:31:5e:1c:a2:
1c:a3:d1:f6:8c:15:55:13:db:cc:55:04:c6:86:6e:
f7:a5:ba:89:5a:6f:84:a8:52:d0:53:0f:b8:8d:04:
82:c8:f5:30:3a:91:62:fe:72:54:dd:21:de:95:cb:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7F:3D:8C:FD:E1:A1:B3:D3:4C:6F:60:2A:87:F9:BE:AD:C2:A4:A7
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b6:70:65:d0:62:70:56:e3:e2:cb:b5:f9:fe:54:e6:8a:93:
f6:9c:a4:84:e7:dc:25:46:35:50:52:bd:c8:fe:b2:be:ec:b3:
12:b1:84:c3:a1:4f:09:4a:4e:dd:c0:8d:3a:40:5e:66:ff:64:
87:1a:12:9d:90:84:b0:89:96:14:1f:34:d5:ec:8d:24:30:8b:
98:e7:5a:51:0b:f9:5e:44:55:da:f7:68:06:98:41:c0:15:35:
d4:d4:eb:34:01:0b:c4:3d:ae:f3:53:e7:11:be:93:3c:df:38:
b8:bc:13:03:b2:35:22:d2:87:2d:30:9d:8a:c8:ee:dc:2b:38:
09:d5:46:31:50:ed:1f:f3:43:6b:3f:15:6c:36:b2:ad:62:aa:
69:2a:df:b2:98:be:e4:92:f3:c8:af:b1:ce:77:09:55:a7:8b:
81:77:78:47:96:b8:af:f0:8f:d9:88:fc:d2:22:6c:2b:64:99:
30:27:05:11:21:e7:df:18:b9:97:41:75:55:a9:da:d8:fc:66:
9b:06:e6:c7:cf:83:c7:8a:9d:8a:f9:52:21:ef:e9:24:90:df:
7f:b3:37:71:6e:98:8e:93:af:8a:2d:a8:18:d0:33:25:e9:03:
2b:d9:b3:19:24:9a:8a:96:29:e6:bc:1d:a5:3a:a5:81:71:72:
be:28:8e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:03 2026 by rpki-client