Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: jJCO1QS2WTOwNDbCVZU7L3e3HxpSNiHNrI7UF0cCFqQ=
Subject key identifier: AA:91:4B:BA:C4:4A:12:8A:C2:B3:FD:E7:10:99:21:A0:A5:4F:9E:7A
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 01A11297056E4FC7072D35C2F9A5F39F9D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 0964
Signing time: Tue 06 Oct 2026 19:00:49 +0000
Manifest this update: Tue 06 Oct 2026 19:00:49 +0000
Manifest next update: Wed 07 Oct 2026 19:00:49 +0000
Files and hashes: 1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: kEa9wz06tODPCcZNGlBWQeVGA1LbgqV6kk3orKZiGps=)
2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:97:05:6e:4f:c7:07:2d:35:c2:f9:a5:f3:9f:9d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Oct 6 19:00:49 2026 GMT
Not After : Oct 7 19:00:49 2026 GMT
Subject: CN=aa914bbac44a128ac2b3fde7109921a0a54f9e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:4b:d3:8e:58:da:de:f5:87:90:0c:f9:fa:
33:9f:82:d6:f0:3a:2b:0f:8e:63:e2:a1:45:a3:72:
70:8d:0c:6e:ae:71:1f:94:5b:b1:4b:d2:99:9a:20:
44:55:16:f0:a5:ce:dc:08:c8:dd:9c:1c:40:b1:c0:
a4:ce:cf:ed:dc:02:25:85:51:14:fd:f3:4b:23:f2:
bd:7a:c4:38:04:40:8c:b0:fe:aa:54:39:40:d9:85:
3f:0c:c3:ea:1f:6e:fd:27:fa:21:70:aa:5c:40:0c:
b3:e7:9b:0e:b3:02:46:e2:57:c1:76:3e:57:2d:00:
d4:43:d0:6f:4a:39:6d:ad:b9:49:65:88:1b:8e:22:
c1:21:7d:d3:95:e1:e8:bc:4b:24:ab:25:0c:31:e5:
2e:08:83:85:2d:96:fc:80:a1:86:93:fa:ac:8d:e0:
0a:ba:e3:51:dc:60:68:24:f7:15:8d:11:eb:68:ee:
8a:92:8b:2a:04:b2:20:30:39:4c:b1:97:25:7a:10:
9f:e7:07:0d:5d:90:12:bd:51:46:75:97:91:41:83:
47:fa:4d:1d:ad:2a:4a:cc:a4:86:29:7b:3a:cc:c4:
b3:64:5a:3d:6b:f7:16:57:47:c7:f5:45:a9:fc:ea:
76:f7:05:ea:7e:d0:c1:93:46:c6:07:8c:c0:c1:55:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:91:4B:BA:C4:4A:12:8A:C2:B3:FD:E7:10:99:21:A0:A5:4F:9E:7A
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:30:55:21:cf:5d:90:b9:47:3a:5d:09:6a:cf:47:95:82:bd:
e2:5a:63:a3:fc:7b:9f:7f:e4:10:a0:e8:cd:e1:9d:2b:44:86:
a8:a6:0f:26:95:a8:c5:de:e5:83:ea:ff:66:8d:fb:e4:76:97:
5b:c0:d8:a2:0a:1e:8c:b0:ed:ad:71:83:08:2d:46:ee:1c:40:
59:9b:57:8e:7c:4a:f2:6e:75:0c:b2:07:60:1c:ca:ad:f6:18:
4c:2d:4b:3f:d3:db:6d:3f:f4:90:5b:49:78:66:b5:05:7d:98:
6e:9e:4e:eb:1c:75:d3:e9:39:b9:63:2f:f6:7c:d4:9e:23:6c:
74:e1:c8:97:df:44:3c:cc:63:1f:fe:d0:e9:a1:40:06:49:a1:
83:71:ee:9a:92:b7:7c:ed:3b:1b:d4:d7:55:79:df:a8:28:22:
76:12:de:c7:2f:04:ad:0e:43:87:ea:fe:77:07:cb:57:0a:34:
6b:f9:e9:79:8f:5a:ef:5d:40:be:3e:ae:53:de:55:05:f3:ef:
c7:7e:ec:6e:06:de:96:f1:3e:1b:14:29:4b:dd:99:64:a4:c0:
07:d6:50:3b:60:09:d1:44:27:45:de:2b:14:43:3f:8b:5d:0d:
d9:96:74:26:49:01:e2:bd:df:b4:93:b9:e3:cb:e5:66:9f:74:
8f:ae:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:53:50 2026 by rpki-client