Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: B4h8/jaYo6ZoX0XgmwZLwfeSO//2T35CFD7EbuEFhpI=
Subject key identifier: 52:5A:27:EC:24:EF:C0:E3:01:19:B9:71:A8:9C:92:AD:5A:94:3F:DF
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 01A08C0CE40FF483C318A5A1F74F6AA7CFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 0613
Signing time: Thu 10 Sep 2026 16:00:49 +0000
Manifest this update: Thu 10 Sep 2026 16:00:49 +0000
Manifest next update: Fri 11 Sep 2026 16:00:49 +0000
Files and hashes: 1: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: bSU/PjJl3RKO3MBiS9jnE5zJkLT3IoEVcUniayeDLSc=)
2: axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa (hash: nE9lYWD+wgHpWX2b2+6stth4mhkUfCemKJyIsoT/t6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:e4:0f:f4:83:c3:18:a5:a1:f7:4f:6a:a7:cf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Sep 10 16:00:49 2026 GMT
Not After : Sep 11 16:00:49 2026 GMT
Subject: CN=525a27ec24efc0e30119b971a89c92ad5a943fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:99:1f:e1:72:f5:01:a8:da:aa:78:81:5c:
3d:a5:25:ff:a5:78:76:72:2d:e4:94:6f:f8:b7:f8:
06:21:5c:56:97:8e:9c:51:5e:fb:0f:84:63:84:40:
91:15:76:4f:3b:e5:0e:3f:ce:16:a8:33:44:59:bb:
d9:6a:66:99:70:81:86:f7:b9:fe:d9:c4:71:6a:c2:
da:b8:59:85:1e:aa:a2:b6:10:13:8c:0b:8e:82:cb:
01:c9:9b:b5:1c:6a:53:53:99:65:1f:57:8a:3f:9d:
c1:38:40:54:7d:f8:57:fd:74:67:21:0f:4d:54:ec:
7e:7d:08:78:01:bb:c1:3f:a5:19:53:25:3f:6d:40:
a1:5f:df:26:0c:8e:01:d6:f8:41:eb:74:6c:08:81:
87:84:01:e7:19:54:3a:79:26:5a:7c:17:3b:3e:54:
fe:96:da:fb:4e:b9:48:37:6b:1f:be:61:91:1b:2f:
87:a7:5a:e5:af:e3:de:ba:ac:68:46:65:d1:32:c8:
de:f5:17:c9:ee:03:93:c5:51:21:c5:33:e5:d4:07:
7b:f8:ac:79:65:c6:b8:3b:42:9e:bc:c1:e8:9c:e2:
e6:60:4c:34:cc:ba:d9:41:16:58:a6:54:cb:ed:75:
dd:40:ad:99:ec:03:5d:33:73:00:aa:9a:a0:8d:f4:
97:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5A:27:EC:24:EF:C0:E3:01:19:B9:71:A8:9C:92:AD:5A:94:3F:DF
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5c:f3:7a:8c:64:f1:77:13:df:d5:31:d8:8a:b1:d8:0a:56:
2b:1d:6e:ce:11:8d:fd:60:50:30:a1:c0:59:66:e9:ad:08:ba:
54:22:7d:02:4c:0c:ee:61:ad:b3:33:a5:2f:48:89:92:59:06:
6c:08:75:d0:ab:27:3a:2f:9f:f7:41:ee:76:23:99:51:21:20:
a7:ea:c4:49:4a:74:7b:18:00:00:1b:44:e2:6d:d4:78:6b:02:
ef:29:63:f2:99:e4:2c:2f:1c:96:2b:07:60:24:25:1f:f6:2c:
e7:0f:73:40:81:f4:2b:4a:17:a3:cd:7d:5e:f8:d1:2e:aa:a7:
ed:73:5b:ca:1f:ed:a8:c4:d5:42:48:a2:53:fc:88:1f:16:f1:
8b:f7:f3:04:99:fa:f5:00:63:0a:be:49:b3:2c:c9:20:17:14:
3a:f6:98:78:d1:df:de:62:47:09:14:8e:63:3f:d8:d8:7f:b1:
3a:39:6d:fa:91:58:28:c7:2d:11:f9:54:56:12:79:25:1c:03:
a6:4e:e2:a6:5f:9f:e4:8c:c2:32:35:a6:0f:99:e2:ba:47:26:
70:75:61:42:ba:e2:77:93:80:2c:92:7f:e8:06:63:6c:1b:2d:
fc:6a:7b:d3:06:0c:dc:0c:2d:5d:f3:39:1a:06:95:e9:4b:06:
2e:68:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:38:51 2026 by rpki-client