Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
File: Z8ooyF9TcJI3VX3talTbfEODj98.mft (raw, json)
Hash identifier: d1iS6V6LUxzdDw7vpMDJBIkqLghrATuvQrG/LfcrS5U=
Subject key identifier: 50:C3:D0:F2:1C:92:64:4B:C6:AB:57:1E:52:3D:BC:E2:F8:5F:CF:F6
Authority key identifier: 67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
Certificate issuer: /CN=67ca28c85f53709237557ded6a54db7c43838fdf
Certificate serial: 01A18F4214A38B0FD416ECB84EC6F926A903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
Manifest number: 0148
Signing time: Sat 31 Oct 2026 00:00:34 +0000
Manifest this update: Sat 31 Oct 2026 00:00:34 +0000
Manifest next update: Sun 01 Nov 2026 00:00:34 +0000
Files and hashes: 1: 0n7BjsuUtMK9eux3ZPIRhUmMWKU.roa (hash: mtRTQIogdYCGX/FRYcEHTrpW3dJUutGmmUeZceCASwo=)
2: Z8ooyF9TcJI3VX3talTbfEODj98.crl (hash: HIBBNBOVagSXzQXC1jq64Q8rzM6aIpBObz+5gAJBaqA=)
3: tVnRYYZjjcF8Zb90VZauoKBz0VM.asa (hash: js5NtSgPh808PFkiRkghv7MP7EdL9RD16y2VNGbfdfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:14:a3:8b:0f:d4:16:ec:b8:4e:c6:f9:26:a9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ca28c85f53709237557ded6a54db7c43838fdf
Validity
Not Before: Oct 31 00:00:34 2026 GMT
Not After : Nov 1 00:00:34 2026 GMT
Subject: CN=50c3d0f21c92644bc6ab571e523dbce2f85fcff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:94:44:68:b2:2b:2c:48:40:0e:9f:c9:b3:
e6:bd:c6:21:22:e8:a3:09:97:30:f4:ce:b5:e2:3d:
d9:57:8a:91:7c:d6:c8:df:03:70:39:23:17:03:b1:
15:94:5e:ef:aa:82:3c:26:a8:82:ba:a1:6d:93:cc:
0b:e9:fa:f5:2f:c3:20:98:bf:a0:8b:af:00:39:4d:
a5:9d:0f:9c:ee:41:1a:7e:f3:7d:0c:60:a1:4f:c6:
f1:3a:ea:86:06:0b:01:55:fe:fa:be:b0:b9:54:0d:
92:ff:fb:6a:87:9f:7c:80:74:c7:27:44:5f:80:58:
0e:d0:8d:4a:1c:31:a1:a9:71:19:2b:d1:6a:95:44:
a2:f2:83:60:ee:1b:3b:bc:bc:fa:3c:4d:be:d9:1a:
fb:e3:31:16:13:14:fe:b0:e8:b4:09:04:f9:80:0b:
12:8a:b5:11:53:09:05:76:55:2f:e7:e8:2f:16:15:
92:9b:56:c3:18:1f:6d:7a:9e:43:5b:68:27:c8:84:
b6:f0:80:47:76:67:54:d9:21:a8:6a:3a:91:84:6f:
6d:ef:cd:00:23:39:63:a5:24:6d:58:df:66:59:0a:
44:99:fe:1a:00:59:43:06:d0:fe:6a:ec:c4:80:99:
ef:62:e8:e9:45:3f:96:7b:cf:f6:22:d3:0e:19:da:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C3:D0:F2:1C:92:64:4B:C6:AB:57:1E:52:3D:BC:E2:F8:5F:CF:F6
X509v3 Authority Key Identifier:
keyid:67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:90:a9:75:f9:f7:8c:96:6a:c3:3d:6e:7f:f2:64:95:1c:66:
fd:03:38:3a:13:7d:73:54:19:f4:e4:6f:cc:bb:c8:3d:3a:84:
9f:fd:fc:49:1e:f9:d5:80:2f:00:7e:88:df:71:e7:04:14:1c:
7d:01:e7:13:58:64:d5:2f:f3:da:df:71:a2:90:8b:e6:d4:71:
78:4c:45:ed:f4:7f:d3:59:6f:20:11:9a:37:5e:99:15:91:37:
7e:6a:91:25:34:1e:98:09:a2:b2:c0:57:4d:02:cd:41:bf:e2:
a6:c5:b1:e8:d1:af:a3:69:c7:4c:2a:46:f8:1c:f3:80:38:3d:
b8:d3:35:7e:f8:97:3a:db:03:46:2f:ca:ab:e8:61:4c:79:b0:
3b:5a:a0:32:39:ae:dd:7c:65:ac:7a:8d:af:4e:24:52:92:a8:
56:3f:b8:c7:ce:14:ef:5f:a4:20:ea:1a:28:af:3c:54:fd:32:
71:95:70:c6:dd:7b:ac:63:fe:25:3d:e7:c6:8d:95:a8:d4:75:
1c:47:71:59:ba:1a:54:0c:5f:0b:33:ac:f0:9b:45:5f:7c:be:
e6:24:65:3e:90:ad:5b:ae:1a:9d:fb:f8:64:f7:7f:e5:c8:d5:
0d:24:95:f3:ab:9a:aa:06:01:5c:92:ef:28:1e:b7:65:52:e2:
fc:16:f7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:45:47 2026 by rpki-client