Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: Hh+ItiOleKhPKXBNeTSCTyzaZCAF+Qa46js7pBB17uQ=
Subject key identifier: 37:30:A0:A6:0C:9D:DF:D0:BC:AD:D9:BA:CC:23:BB:2A:3C:AD:3A:0D
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 01A1295627D0E258E012734480EDDE5BACA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 08F9
Signing time: Sun 11 Oct 2026 05:01:14 +0000
Manifest this update: Sun 11 Oct 2026 05:01:14 +0000
Manifest next update: Mon 12 Oct 2026 05:01:14 +0000
Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: 6goBnQBv82jCtWrI7MK9DZ9f/wGSQBpS/Oy6iz0GOSE=)
4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:27:d0:e2:58:e0:12:73:44:80:ed:de:5b:ac:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Oct 11 05:01:14 2026 GMT
Not After : Oct 12 05:01:14 2026 GMT
Subject: CN=3730a0a60c9ddfd0bcadd9bacc23bb2a3cad3a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:38:78:da:13:9a:4c:02:6d:07:eb:50:22:
48:ee:ba:2e:b3:89:32:35:ef:40:af:f6:35:ec:5d:
ac:92:e0:17:70:bd:0e:b1:c2:65:3e:c7:23:a0:84:
89:4a:81:9a:fd:79:91:51:58:9b:4f:4f:0c:32:b1:
2a:a6:d7:08:18:cc:cc:b4:12:f2:e6:1c:14:f9:9f:
ef:3e:ad:c6:5d:a8:c7:5a:82:b3:90:6a:0e:24:f3:
25:91:f9:ae:b6:9b:b3:50:7e:76:5a:4a:47:3f:c1:
c2:b5:5c:05:13:79:cd:d6:8e:c1:54:f4:e4:9b:03:
1e:65:d6:61:25:f7:5a:0c:dc:8a:35:46:c9:d2:48:
bd:97:57:8a:e9:cb:48:a6:23:d7:a2:c2:3b:fe:17:
e8:ed:e1:45:c3:50:d8:2d:ae:d2:bf:92:43:55:21:
7a:42:f8:5e:3d:d3:38:bc:40:a9:47:6c:c7:a5:14:
4c:d1:b4:80:55:23:96:b2:d0:81:a9:83:16:14:35:
92:56:1f:9b:a0:e8:c4:7c:4c:74:43:a9:5e:bf:0f:
08:33:62:3e:e5:bd:32:ba:37:d5:58:07:59:6b:26:
74:19:c3:a8:64:a6:1c:fb:8d:7d:17:61:bc:8a:6f:
10:85:d7:8d:a4:bb:6d:4a:07:92:3b:86:7d:65:b0:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:30:A0:A6:0C:9D:DF:D0:BC:AD:D9:BA:CC:23:BB:2A:3C:AD:3A:0D
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7c:2c:81:f0:bb:88:ed:fe:9f:2c:43:e9:86:6f:ae:1b:16:
21:ff:22:19:67:8b:1e:45:be:8d:ef:49:62:ce:94:08:0a:6c:
55:61:8d:5c:bb:41:3c:9c:11:1a:1f:e1:54:f7:da:15:bc:b3:
93:d1:25:bb:61:48:dd:e7:8e:82:2a:b6:c1:7c:6d:f7:51:2f:
39:15:e8:e2:dd:7f:01:ff:eb:23:6a:b9:1a:6c:e0:26:fc:b8:
8a:32:12:3f:bf:d1:89:1e:d1:51:13:df:e0:35:bd:07:5e:91:
99:cd:dc:42:63:b8:3a:65:f6:45:58:f5:c6:72:ad:ae:cb:ce:
9d:9e:77:bd:61:47:32:84:1c:8e:20:0f:fa:65:73:1f:cc:f3:
14:cb:15:7d:2f:81:3e:34:fc:c9:47:73:b5:5b:31:04:68:2e:
8a:66:2c:11:57:5a:32:47:d7:74:5a:fc:dd:af:67:3a:98:e2:
97:1e:95:b4:9a:1b:b9:28:e1:9b:6f:af:81:2d:52:b9:cd:e6:
5d:11:c6:fc:bf:5b:6c:0a:ff:20:c9:16:b2:b9:b4:84:d4:cb:
aa:2c:f2:bd:ad:db:3b:49:02:bc:7e:7d:04:c1:d3:eb:27:de:
80:6c:ae:9d:4e:a7:8a:43:a1:92:9e:a7:14:7d:3a:13:60:67:
7c:99:af:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:46:30 2026 by rpki-client