Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
File: z9LUeU5busDjTJ0BibJu8UcViiM.mft (raw, json)
Hash identifier: cxs9iro2R0w1i/dol65dFtiI3OJbDdZ1SKdX+L9248o=
Subject key identifier: 17:52:25:97:42:C9:1A:0F:2C:71:D7:84:F6:D2:B9:77:F6:13:D0:90
Authority key identifier: CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
Certificate issuer: /CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Certificate serial: 01A181194C2CD11D02BAF062C0FD90AEDE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
Manifest number: 029A
Signing time: Wed 28 Oct 2026 06:01:21 +0000
Manifest this update: Wed 28 Oct 2026 06:01:21 +0000
Manifest next update: Thu 29 Oct 2026 06:01:21 +0000
Files and hashes: 1: e9ESBbCpXLampxKyfROKHhSNrlQ.roa (hash: tD7v+u/DQGlM+A9s6n4BBi5LAYT9sFcm9HvPxsWUOOU=)
2: pUcV2CDMwVfdHgvxvC-AB5Vhfog.asa (hash: /YYL6jpXO8Tk4JIAMqivU9OX7v7luqvFgZ3LC4roaSQ=)
3: z9LUeU5busDjTJ0BibJu8UcViiM.crl (hash: jWiWkF/lOFY+eMu9fbVWX15gJyA8O7pXrZlejB/QBbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:4c:2c:d1:1d:02:ba:f0:62:c0:fd:90:ae:de:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Validity
Not Before: Oct 28 06:01:21 2026 GMT
Not After : Oct 29 06:01:21 2026 GMT
Subject: CN=1752259742c91a0f2c71d784f6d2b977f613d090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:21:92:fa:91:3c:25:82:3e:2e:85:2a:63:
53:40:ee:cf:88:8a:a4:cf:ff:e2:03:ea:da:ce:25:
8d:ef:83:90:1b:8e:62:b9:0e:49:fc:1e:9b:2d:2f:
1a:71:5a:33:3e:05:cf:60:99:0a:06:6b:79:aa:7d:
d7:47:53:c8:4b:0d:57:47:7f:77:bf:89:74:c0:5e:
14:42:c1:f7:a7:5c:0d:9f:44:34:07:2f:1a:95:ec:
b9:d7:14:bd:da:1f:b5:d4:d9:23:63:ed:90:58:51:
16:dc:2d:3a:7f:51:12:86:3d:c6:ea:b9:af:56:d2:
6b:69:bb:e9:0e:d3:80:3a:fa:a1:17:6f:69:44:9f:
ac:87:53:29:77:98:a7:19:2a:4b:9e:13:c7:58:ad:
b6:af:5c:73:6a:fe:c8:79:c5:20:54:8a:c4:1c:d3:
31:7d:2e:26:c1:78:95:c1:29:a8:81:2d:52:62:98:
bb:1d:93:36:b7:d6:12:ce:18:53:f5:76:54:ab:ee:
76:8a:a0:0c:04:36:5c:d6:bf:62:62:b9:d4:92:e5:
22:8f:2e:3c:4b:bd:70:98:02:3e:d6:71:d1:99:54:
f8:92:35:12:76:7a:d0:e1:57:f1:92:fb:7d:7d:2a:
09:41:37:44:d9:49:5e:1f:25:ff:c9:f6:d2:46:dd:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:52:25:97:42:C9:1A:0F:2C:71:D7:84:F6:D2:B9:77:F6:13:D0:90
X509v3 Authority Key Identifier:
keyid:CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a9:5c:cb:3b:39:c6:81:fc:f1:02:7d:7b:08:69:b0:84:5a:
01:f2:de:a4:7c:0a:84:b4:e9:cc:b5:3f:6a:0a:b5:2e:af:ed:
b6:b3:40:d4:33:17:46:95:f9:39:1a:14:45:a6:13:4f:ba:0f:
03:42:2a:e6:d5:9f:7b:3f:9d:7c:36:80:8a:63:d5:1e:11:3a:
5e:42:b7:67:f0:75:f4:af:4f:62:33:02:9f:77:57:d1:9c:65:
cb:35:44:12:61:65:0a:9e:c7:e6:7f:e3:55:d3:60:55:2f:8a:
bd:4c:91:3c:37:c6:31:4a:07:89:7e:31:08:0c:56:90:a9:90:
72:25:a7:57:a3:52:02:55:02:d5:93:40:f4:2d:f5:79:10:eb:
d9:84:a0:07:49:63:eb:af:07:a7:2a:ae:ec:1d:2d:7c:3f:89:
12:bd:11:ca:0d:c6:e8:22:82:ed:56:82:a2:c9:13:32:ae:91:
eb:83:a8:f6:69:17:16:fd:4e:24:ce:91:0a:da:d8:cc:1f:8c:
33:48:e5:a1:f3:80:e5:4b:a2:a8:ad:c3:cb:9c:df:6d:77:70:
ba:c7:b0:b5:25:fb:d2:e0:6e:6c:d0:25:6d:1d:7f:d0:ee:88:
23:61:26:46:d1:46:b3:f8:02:f1:18:fd:3c:fe:bf:3f:b2:bb:
9b:c0:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:25 2026 by rpki-client