Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: ehf81ov1GsdtkokdLa4GIO7gVYOWDZhKNHIYxEj2ZXQ=
Subject key identifier: BF:3F:37:10:AC:60:D3:7C:61:FF:53:0E:A5:3E:84:48:6E:E1:CF:3B
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 01A08A1F0F6F0059D51FA0F11438C74CAEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 178F
Signing time: Thu 10 Sep 2026 07:01:26 +0000
Manifest this update: Thu 10 Sep 2026 07:01:26 +0000
Manifest next update: Fri 11 Sep 2026 07:01:26 +0000
Files and hashes: 1: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: Yz9kuFQK+i/ZNh1HefZPOPpxsHf+tppCG/4QEkNVAXw=)
2: fSMYxOKrzkeoTqHTQXJBBkwJ19s.roa (hash: Ury55OlRGKlB+9SNwqIm4SCt+37rVBDsol33MQoHp1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:0f:6f:00:59:d5:1f:a0:f1:14:38:c7:4c:ae:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Sep 10 07:01:26 2026 GMT
Not After : Sep 11 07:01:26 2026 GMT
Subject: CN=bf3f3710ac60d37c61ff530ea53e84486ee1cf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:05:24:00:7f:72:20:30:b7:d6:99:43:a9:
79:14:45:d3:aa:35:74:63:b8:9b:fc:77:0b:0e:e5:
84:c8:1a:2b:13:da:7d:ed:a4:be:85:e7:a3:5e:6c:
fc:5b:b7:a8:a2:7e:d8:60:be:e7:18:89:3a:d0:19:
5e:fa:32:c2:a5:4a:41:62:e0:73:dd:c9:1a:2f:da:
61:98:03:a8:7b:d3:f7:be:b4:ae:21:03:32:b3:0a:
43:f1:36:c0:ae:45:7a:8b:8a:a6:01:ca:93:5a:59:
c8:6a:d4:cb:70:21:ba:ea:3a:c7:b6:06:9b:0d:49:
50:bd:ec:a0:2f:1f:cb:74:5d:54:b6:36:52:98:39:
f6:78:e2:b9:45:b2:a5:59:2e:95:49:29:ac:e0:78:
ec:ce:22:9f:44:11:46:f1:71:67:d6:b3:88:4f:a0:
c4:fe:02:70:99:0a:61:43:bb:36:54:b7:71:23:6f:
bd:b0:18:c6:ab:6b:06:e7:bf:1c:c5:40:ed:45:a7:
62:2c:cc:5e:26:5d:b6:25:fc:bc:9c:54:15:8d:f8:
15:59:9c:cf:b8:96:1b:61:d0:fc:8d:98:61:e8:20:
6a:c7:ae:84:e2:ec:dd:46:ca:a2:92:96:2c:fe:2d:
cb:43:8c:8f:ec:d3:57:69:9c:ff:c8:a2:45:32:c6:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3F:37:10:AC:60:D3:7C:61:FF:53:0E:A5:3E:84:48:6E:E1:CF:3B
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:71:2a:93:b2:25:b5:5f:98:e8:d7:b2:1e:6e:68:66:81:cf:
88:4c:78:99:2c:36:83:79:a3:f7:a3:de:ca:54:e8:7d:2c:7d:
87:a4:af:28:c8:04:6c:85:3a:e7:71:c4:5f:87:8b:db:f6:6a:
4b:64:f6:5e:f2:8f:1f:c2:dc:f0:78:cf:04:e3:91:01:54:d1:
d0:12:11:85:5b:42:69:d1:d3:a3:91:96:92:84:5f:88:f4:75:
65:5b:ed:f9:98:e9:82:a4:84:cf:ad:ee:a1:b2:da:72:c1:31:
6c:c3:4e:e8:36:e3:07:ba:c9:3b:7c:f5:b4:91:e9:d5:cf:a4:
55:48:f6:16:57:4a:ac:5c:e2:0e:0a:7d:b1:0f:07:6f:3a:46:
7c:5a:5e:d3:f6:52:0c:cb:6c:4c:28:9a:5c:99:96:91:24:f8:
ad:7c:00:89:83:6b:0b:b0:51:06:b6:a7:9e:e6:dc:2a:d4:e8:
8c:8f:38:86:c9:5b:a8:00:8e:d4:b2:2b:70:20:78:9a:ec:ed:
9c:90:a7:02:98:04:39:2d:ca:ab:46:94:e0:8a:df:1d:a3:22:
dc:0e:22:1a:24:08:dc:73:ca:e2:cf:64:e3:c4:c1:69:0b:40:
26:3b:fd:d0:c9:80:75:83:8b:40:99:15:d9:f6:d2:31:c2:ef:
37:1a:89:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:17:16 2026 by rpki-client