Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: SIivAZ+QWkTwgdrR0iDw7R7+lJFljoTzwTpPgD8zmYI=
Subject key identifier: D9:4C:C1:19:01:0D:33:BF:37:20:A5:EC:C6:00:26:E6:14:2D:13:1B
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 01A08AC3C768D6EB8D284574B79FB18BEBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 138A
Signing time: Thu 10 Sep 2026 10:01:21 +0000
Manifest this update: Thu 10 Sep 2026 10:01:21 +0000
Manifest next update: Fri 11 Sep 2026 10:01:21 +0000
Files and hashes: 1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: RvfCgzzfBt3QJx5+pb+qOHJhUtlBu3LVKgiVRW1NBA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:c7:68:d6:eb:8d:28:45:74:b7:9f:b1:8b:eb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Sep 10 10:01:21 2026 GMT
Not After : Sep 11 10:01:21 2026 GMT
Subject: CN=d94cc119010d33bf3720a5ecc60026e6142d131b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:ae:d4:cc:63:f2:bc:e1:a8:b2:7a:80:f9:
f0:07:d5:bc:32:35:80:89:d8:35:fe:69:3c:94:33:
b1:64:b2:6d:10:22:e5:02:20:5a:c7:e5:a7:ba:af:
a9:75:15:0a:34:62:8c:72:e4:dc:df:45:ca:05:76:
c5:fc:2a:93:5a:d3:ff:ee:d8:0d:4c:dd:8f:be:94:
a5:af:c2:d5:ee:75:07:53:35:c5:53:51:35:8c:56:
07:9e:86:35:64:b8:c7:b2:30:00:0e:8d:d5:c4:9f:
8e:2f:fd:b5:3a:a8:bf:eb:9b:65:37:8f:94:cf:8e:
ae:2d:ed:79:50:1d:22:c2:61:cd:a7:fd:8a:a7:07:
ff:31:5f:40:b1:d9:96:33:55:4b:a8:4c:73:88:76:
51:b7:31:35:24:95:65:ad:b3:b9:d9:a5:da:69:80:
81:21:c1:b9:56:9e:ca:f4:32:73:b5:2c:a6:94:86:
5f:4b:6e:1e:af:10:50:e8:cf:03:16:9e:5b:b9:b2:
10:ae:0b:60:bb:cb:77:0a:5b:2b:6c:c0:58:f0:82:
3d:61:cb:1a:f8:ca:8b:63:53:ab:a9:6c:b7:f7:3f:
35:81:20:ad:f5:53:39:01:df:0a:1f:9c:3d:6a:d2:
36:72:c0:9d:4f:cf:2d:8a:38:16:0f:b5:e2:23:21:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4C:C1:19:01:0D:33:BF:37:20:A5:EC:C6:00:26:E6:14:2D:13:1B
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d7:b2:c7:ed:1b:27:e9:4c:15:d2:a6:3e:a5:f1:80:45:41:
c8:2e:22:f6:73:63:f6:e0:35:35:51:ec:df:16:e6:75:b7:75:
be:da:c0:39:21:57:84:7b:35:dd:39:55:38:b0:33:9a:d7:83:
23:13:85:c8:92:e1:4d:30:48:f7:6d:f8:d6:19:ac:07:b8:9a:
99:a6:84:92:90:d8:8a:14:74:99:f4:09:b4:da:8a:0e:b4:25:
d3:94:ae:3a:e8:fc:7d:f5:33:70:5f:b5:96:ad:96:4c:a4:d5:
60:0c:ff:9d:60:4a:6c:92:91:99:9d:13:c6:1f:f7:d7:ef:25:
d3:66:b4:44:a5:06:ff:c9:85:73:7a:72:90:16:c5:f5:10:cd:
3f:0c:98:8f:65:48:44:c6:ea:62:6f:4e:3b:ed:84:be:ed:1f:
94:45:18:6f:65:a6:e4:b1:af:a1:c6:1f:f4:86:e9:fe:87:5a:
1f:24:36:83:2d:c8:bb:ac:65:11:b3:d4:b9:5e:a6:1c:79:e4:
b4:b0:bc:5c:09:3a:69:98:ca:ac:3f:92:17:34:9c:d9:8c:a5:
29:a8:c3:a0:34:b3:ed:ad:60:3e:54:7c:a4:86:b5:98:cf:37:
18:7b:d7:b9:26:d4:0a:bd:c7:bc:a5:3b:cd:61:0f:e4:d9:85:
8e:7d:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:57:54 2026 by rpki-client