Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
File: Z8ooyF9TcJI3VX3talTbfEODj98.mft (raw, json)
Hash identifier: YoRJ3Hrn/N5C1dMP/jFncbM5TV3dMnEqQwYGKm3A0J4=
Subject key identifier: 96:43:45:09:E0:BC:D9:1C:83:01:19:A7:53:9C:FE:30:C0:C1:19:4B
Authority key identifier: 67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
Certificate issuer: /CN=67ca28c85f53709237557ded6a54db7c43838fdf
Certificate serial: 01A08C7AF9EFEF04162C0F6DE981FF61ED96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:04 +0000
Manifest this update: Thu 10 Sep 2026 18:01:04 +0000
Manifest next update: Fri 11 Sep 2026 18:01:04 +0000
Files and hashes: 1: 0n7BjsuUtMK9eux3ZPIRhUmMWKU.roa (hash: mtRTQIogdYCGX/FRYcEHTrpW3dJUutGmmUeZceCASwo=)
2: Z8ooyF9TcJI3VX3talTbfEODj98.crl (hash: KjZ6vZdmYS0wc3fQ4AtQq2oy6Qvhxk/+TNMwgsWOCVc=)
3: tVnRYYZjjcF8Zb90VZauoKBz0VM.asa (hash: js5NtSgPh808PFkiRkghv7MP7EdL9RD16y2VNGbfdfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:f9:ef:ef:04:16:2c:0f:6d:e9:81:ff:61:ed:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ca28c85f53709237557ded6a54db7c43838fdf
Validity
Not Before: Sep 10 18:01:04 2026 GMT
Not After : Sep 11 18:01:04 2026 GMT
Subject: CN=96434509e0bcd91c830119a7539cfe30c0c1194b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fd:97:9f:f6:ff:8d:58:ec:8a:17:2c:4d:8b:
46:93:3a:c8:15:08:91:3f:f6:e9:ec:24:d7:86:fe:
9f:85:6a:fc:9f:f7:39:f3:08:0f:76:38:6c:32:d5:
f7:02:17:99:c6:f2:94:06:e3:42:1e:96:43:20:eb:
5b:4b:f7:1d:df:e0:60:b7:2a:e7:ed:56:a9:ab:d6:
ab:89:d8:c3:61:58:28:a9:20:20:69:63:60:3b:ba:
ae:96:5e:49:96:d1:fb:da:f8:98:e2:13:c9:05:33:
c2:55:81:6e:dc:ca:c3:78:17:29:16:e0:da:98:be:
60:db:c6:04:9c:b1:64:78:e3:75:fb:38:ff:52:5d:
57:d9:dd:5f:b5:82:4c:bd:51:76:34:1e:13:f7:bb:
4d:62:54:ec:5b:9a:6b:41:91:72:bb:d8:74:f4:7a:
e1:5a:20:96:e8:33:be:4a:11:dc:f8:e5:7d:51:22:
fb:e8:48:74:91:23:f2:64:64:99:16:0c:39:93:a4:
66:cd:9a:4b:42:fe:9d:c4:4b:1c:98:b3:6a:6e:96:
1b:c5:95:96:e1:08:1d:b5:3c:38:35:b8:64:98:5c:
65:dc:33:29:33:7a:87:63:65:4a:c0:37:bb:f5:c3:
ef:16:04:28:8d:86:c5:42:2e:ac:06:c0:28:39:2f:
d3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:43:45:09:E0:BC:D9:1C:83:01:19:A7:53:9C:FE:30:C0:C1:19:4B
X509v3 Authority Key Identifier:
keyid:67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:39:db:ef:e9:38:7b:d6:99:0e:cb:af:cf:7c:fb:1b:bd:98:
96:cf:01:3c:99:f7:54:58:02:83:10:87:44:ad:82:62:77:40:
f3:33:68:ff:c6:a9:a1:b4:4c:6c:c7:f4:61:47:e3:70:86:6f:
d1:ad:c6:ed:69:75:25:d5:5b:d5:5a:bc:0f:25:98:c4:67:9c:
0d:13:73:6d:13:51:a4:2e:d2:92:98:6d:7a:8b:f9:31:10:34:
22:ae:27:83:bc:a3:f1:35:49:aa:07:17:d1:a2:71:ef:74:01:
d4:e2:44:a5:d6:21:1b:c1:41:a0:02:0b:5b:bd:eb:ff:0a:1f:
8d:c3:e0:9f:09:fa:2f:a4:06:28:bb:6d:ca:ae:1e:08:bb:a2:
1d:5c:6a:eb:c4:32:cc:5a:3f:f7:97:5d:ea:42:5f:22:f8:9c:
c1:5d:46:05:98:3d:46:ef:6f:08:ee:55:9b:c8:ef:98:ac:2e:
a8:9e:f5:c8:51:e1:cc:bf:6c:9e:d3:af:92:79:73:7a:fe:07:
9b:02:ec:6a:83:f8:5d:4f:34:ec:07:83:51:5b:61:76:24:ea:
f0:24:c6:89:5a:db:88:49:6b:68:c5:ea:71:e8:26:00:0c:fe:
a4:a4:1f:64:cf:72:f4:08:48:4c:46:17:75:9f:fd:0d:83:fb:
29:fe:4b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:32:46 2026 by rpki-client