Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: e8Umbm6sR00/yDdnu5eu+UWNjQ9PqWq5X6Mvjz7EwY0=
Subject key identifier: 9B:97:8A:AA:2D:72:C9:96:D0:A4:70:8C:2A:45:9C:4D:FE:D9:C3:17
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 019FA260A8E3FE49C14CEAE366F545EA208A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 059A
Signing time: Mon 27 Jul 2026 07:01:11 +0000
Manifest this update: Mon 27 Jul 2026 07:01:11 +0000
Manifest next update: Tue 28 Jul 2026 07:01:11 +0000
Files and hashes: 1: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: PUqJeuw8LMeUV4fNS6WrX8+MeaAOS92mioksFnKYYws=)
2: axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa (hash: nE9lYWD+wgHpWX2b2+6stth4mhkUfCemKJyIsoT/t6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:a8:e3:fe:49:c1:4c:ea:e3:66:f5:45:ea:20:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Jul 27 07:01:11 2026 GMT
Not After : Jul 28 07:01:11 2026 GMT
Subject: CN=9b978aaa2d72c996d0a4708c2a459c4dfed9c317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8c:cb:e6:08:60:1e:8b:1b:cc:1a:24:3b:cb:
8b:00:dc:61:bf:1a:97:25:a3:dc:51:71:f3:76:57:
a5:c3:d5:f8:40:c6:42:6a:0f:2c:d5:8d:6a:3a:b5:
73:a8:76:1f:70:24:2a:a7:1a:81:7f:d4:80:ce:69:
0a:5d:31:b5:26:5c:df:41:93:e7:00:56:63:04:ce:
86:af:e0:cf:e4:34:98:ae:fe:fe:43:8c:8f:7b:34:
62:88:58:75:a8:71:93:b4:4d:0b:84:06:31:54:cf:
e7:a2:f3:9e:79:0d:0f:37:64:f2:1a:d1:79:31:9d:
2f:34:52:96:86:6c:a1:d4:b2:46:e3:10:d9:3e:e1:
12:bd:8b:0b:31:8f:d2:2a:64:d7:b0:ae:de:54:65:
df:a7:63:2f:03:ac:c0:c7:fd:f3:22:dc:92:d4:4e:
d0:df:46:d6:d1:2c:90:ea:7e:29:1f:ad:5b:de:4d:
02:38:f4:f0:a3:34:24:61:37:ff:50:b1:d5:f2:5c:
7d:6b:84:2c:d8:e5:eb:0f:d4:ea:c3:c0:5f:b0:f3:
5d:af:d5:2a:c1:f1:25:f6:aa:39:fe:3d:e9:1f:b8:
76:b0:ab:ea:a7:e8:b9:12:44:61:1a:ab:15:d5:e1:
af:b3:fc:31:a9:0a:95:1a:aa:6a:3d:f7:12:0b:54:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:97:8A:AA:2D:72:C9:96:D0:A4:70:8C:2A:45:9C:4D:FE:D9:C3:17
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ee:04:d8:e2:83:09:0a:c0:7d:32:a1:d5:98:0c:1a:8e:47:
0a:41:49:ef:ba:c4:26:9d:44:12:9c:92:91:2c:07:a5:7b:38:
3f:75:99:42:08:41:76:39:0a:e9:45:f8:37:98:81:42:1e:9f:
a5:9b:8f:c0:40:22:ac:fd:61:d4:16:b6:dc:f4:e5:60:19:75:
fa:2b:3b:19:34:0c:58:58:1c:35:91:56:d4:62:f7:4d:2c:1b:
8e:b3:b9:da:1f:2b:a8:70:6d:43:c3:fc:50:77:42:e9:d5:d2:
0d:6d:2f:89:ec:72:7d:75:c8:ed:58:3d:b5:76:aa:2b:bc:72:
67:e0:b1:7d:35:e2:bd:fc:11:0b:d7:11:49:e8:bb:22:dc:49:
43:6a:da:d1:6c:99:f8:d7:39:32:f6:c1:a8:5b:e0:4c:e1:f2:
23:42:c6:13:0a:7c:32:d0:aa:31:82:80:fd:52:d5:fd:a7:dd:
44:9c:42:cf:ef:14:16:ed:39:f0:ee:30:06:1b:86:51:a0:d6:
2f:b5:23:04:0e:d7:3a:81:41:b9:2f:78:b7:1a:77:cc:54:17:
0b:9d:42:f5:66:16:1b:47:43:52:c1:c2:20:e2:3a:a4:6e:04:
fb:5e:a5:13:a8:62:bc:b8:90:e4:ab:3a:42:5c:98:fd:93:7a:
dc:5c:60:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:05:37 2026 by rpki-client