Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
File: Z8ooyF9TcJI3VX3talTbfEODj98.mft (raw, json)
Hash identifier: oIk1ulPaIcGXBrzy2FNHoWr22YCVuRAZMDzg2aWjE6o=
Subject key identifier: EE:EE:78:2E:6A:BD:75:FF:EA:B3:BA:10:70:76:03:B7:59:7C:91:32
Authority key identifier: 67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
Certificate issuer: /CN=67ca28c85f53709237557ded6a54db7c43838fdf
Certificate serial: 019FA2CEB2F647EFA29E4EEC49DD662496F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:01:22 +0000
Manifest this update: Mon 27 Jul 2026 09:01:22 +0000
Manifest next update: Tue 28 Jul 2026 09:01:22 +0000
Files and hashes: 1: 0n7BjsuUtMK9eux3ZPIRhUmMWKU.roa (hash: mtRTQIogdYCGX/FRYcEHTrpW3dJUutGmmUeZceCASwo=)
2: Z8ooyF9TcJI3VX3talTbfEODj98.crl (hash: SGT0eTOatbeAPQDJTVWPD2MFYedCfiNF5+BXoYPp2oM=)
3: tVnRYYZjjcF8Zb90VZauoKBz0VM.asa (hash: js5NtSgPh808PFkiRkghv7MP7EdL9RD16y2VNGbfdfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:b2:f6:47:ef:a2:9e:4e:ec:49:dd:66:24:96:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ca28c85f53709237557ded6a54db7c43838fdf
Validity
Not Before: Jul 27 09:01:22 2026 GMT
Not After : Jul 28 09:01:22 2026 GMT
Subject: CN=eeee782e6abd75ffeab3ba10707603b7597c9132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:da:77:94:e8:54:d2:b0:e2:0e:92:eb:f6:
f3:09:63:1e:cb:14:a8:c7:37:56:d4:17:08:bf:bd:
ec:6d:b0:c3:ee:da:73:be:04:f2:e9:79:a9:bf:90:
43:30:ce:f8:10:d4:68:a0:6e:dd:d0:d2:3d:ec:1d:
af:a7:a6:1b:b0:2d:86:8b:35:07:b7:86:a4:c0:a4:
5f:20:0e:20:52:fb:42:08:ca:17:2c:f9:22:82:13:
75:98:17:fe:f9:44:7e:72:08:48:27:b1:77:32:4d:
81:88:2e:55:a4:cf:a1:fb:db:58:15:fe:3d:97:0c:
74:fb:ab:d4:ad:27:09:a0:03:23:36:0b:b6:45:b0:
a2:02:24:d7:77:81:fe:86:ca:e2:bf:45:00:8b:60:
7b:0b:f8:36:0c:3a:20:f5:89:fa:fe:55:c4:0b:9b:
eb:cc:b7:e9:22:41:70:cd:fb:49:ba:1e:96:d0:88:
2f:57:11:87:1a:5d:24:3e:fa:ef:d7:65:a6:3a:14:
5f:ee:9a:3f:e6:31:c1:ff:78:93:75:f7:8a:3b:bc:
fc:12:42:d5:45:d5:6a:e1:0f:d7:14:f3:83:f5:d0:
2b:5b:82:83:f6:76:23:d7:3c:bc:a8:95:36:18:21:
34:c9:29:5b:73:11:0f:2d:f8:0b:7a:e3:9f:03:a6:
ed:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EE:78:2E:6A:BD:75:FF:EA:B3:BA:10:70:76:03:B7:59:7C:91:32
X509v3 Authority Key Identifier:
keyid:67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:22:1d:13:90:36:a6:98:b6:b0:92:d4:f3:64:03:8e:f8:17:
4d:41:34:cd:dd:18:88:17:f0:d5:53:56:d3:b4:3e:43:e4:fe:
28:ce:c3:9e:28:de:b9:ac:25:42:79:0b:2a:6e:65:4d:f2:39:
5c:7a:09:59:8a:b7:28:38:83:76:ba:53:b7:00:53:ba:b0:5d:
04:de:d2:25:00:e7:59:3f:c5:c7:ca:60:ca:a8:92:f4:7f:37:
e2:fd:f3:1d:6f:51:59:d9:6d:99:a1:e4:90:4c:c4:58:fe:d0:
6a:3d:16:95:c8:cd:07:eb:30:8c:18:b4:65:60:84:12:8e:fe:
b5:7b:e1:0c:cb:ef:13:18:36:76:db:26:7c:bc:4a:6e:71:7c:
ad:c5:83:1b:85:b5:29:f4:44:a4:a0:ae:83:a6:3f:33:bb:ed:
56:af:8b:47:6d:e9:06:07:f5:cb:6d:40:f4:19:f6:f4:5f:26:
bc:de:bd:6a:82:a7:5b:59:73:10:42:86:fc:06:6c:72:a3:a8:
04:17:1e:de:ef:c4:75:ef:c8:6a:b6:13:30:f5:89:60:46:b3:
c5:59:7a:0c:0b:78:6d:46:9f:ea:09:4f:a4:66:cb:6b:a7:5b:
c8:6d:95:2a:2e:b2:30:ea:72:59:d3:ff:70:18:f2:cc:c7:ed:
63:fb:40:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:15:36 2026 by rpki-client