Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: LLQ1XeSFKtwZ9UsrN1Oun56dFkHTwLgoBTD2+pMItYk=
Subject key identifier: 01:AB:06:0B:53:4C:51:6A:E3:DA:9F:C7:7C:D3:E0:9E:A8:EA:20:41
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 01A06DCC4B9000D99C1AC68EE75CC70DBD7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 152B
Signing time: Fri 04 Sep 2026 19:01:40 +0000
Manifest this update: Fri 04 Sep 2026 19:01:40 +0000
Manifest next update: Sat 05 Sep 2026 19:01:40 +0000
Files and hashes: 1: TfIi7I3WgDvXNjupkEjxzP8GxkI.roa (hash: Qym68UnT2HiOSpZ3+9brbjDLO7IA/zFl9AhYdT/LiLQ=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: CW7ccU2c0BGmv/mLwya/lN0I/vV+NOFJHdnTxtc5af4=)
3: zBxBTpibLrslxHWch5H0k9kNNd0.roa (hash: kLIKoJKwnkX2C7p3Y1VY7at5dd/MwDeXCZmhRXuoHg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cc:4b:90:00:d9:9c:1a:c6:8e:e7:5c:c7:0d:bd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Sep 4 19:01:40 2026 GMT
Not After : Sep 5 19:01:40 2026 GMT
Subject: CN=01ab060b534c516ae3da9fc77cd3e09ea8ea2041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:b2:a7:ad:fd:69:72:fa:3f:4c:6f:91:bc:
e9:ff:bd:06:83:7d:fc:f3:f3:27:2e:71:7e:df:31:
cc:e2:33:62:3b:fc:35:1b:da:db:03:3b:61:05:58:
50:57:08:2a:0e:67:4b:27:18:05:3d:64:a3:10:f0:
e0:c9:5c:ba:3c:b1:be:3e:bb:d7:4e:d4:61:47:83:
0a:7c:67:2e:38:aa:05:38:1a:3c:db:49:24:9c:16:
4e:e4:97:9f:e9:c5:54:2c:86:84:63:9a:f3:22:5a:
01:fa:fa:d6:63:4e:91:25:87:b5:53:2c:31:66:ba:
af:0b:af:c5:e4:2f:49:cf:f0:56:92:1a:6a:75:e3:
4b:42:e8:ff:27:18:ee:5c:a6:53:f9:85:41:99:22:
05:80:d1:03:12:9b:a7:41:95:a0:fb:6d:17:b3:5f:
02:fb:c2:f4:71:04:7b:84:7b:49:cf:62:50:d7:f6:
0e:62:10:1c:27:e3:60:aa:74:44:13:44:5a:92:4b:
cd:2e:b7:76:89:6b:b0:d2:f0:4d:8b:9a:60:c9:8b:
8d:ee:a7:6b:17:0e:a2:6a:02:5e:6f:b1:48:f0:34:
91:e6:3f:4b:38:c6:be:d7:13:51:0d:56:d7:14:a4:
45:19:ae:97:c6:2a:ba:8f:f8:1c:7b:f2:e2:b3:79:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:06:0B:53:4C:51:6A:E3:DA:9F:C7:7C:D3:E0:9E:A8:EA:20:41
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c2:83:0c:59:f8:92:56:ea:88:e2:99:9b:97:07:24:15:00:
83:29:b3:d1:5f:17:08:7b:90:d5:22:02:9f:76:d7:6c:28:17:
d3:61:9c:01:33:b4:96:b1:76:f0:ac:e7:fc:e1:98:01:63:2e:
f7:1b:03:b6:93:5f:36:23:88:49:b5:7a:36:08:e6:ad:d5:3d:
92:e0:c6:c4:67:78:9b:9e:19:29:c2:75:ec:05:ff:eb:c7:5c:
b7:a7:b0:17:81:2b:ff:ab:9f:86:23:82:c6:98:3c:77:c2:4e:
1f:47:74:35:99:61:0e:80:ea:6b:3b:52:4b:0b:44:6a:8c:2e:
7c:18:b1:81:d4:3d:74:89:a2:ad:84:c3:2c:92:bd:ce:0f:a9:
8d:30:e9:af:28:b2:75:44:f2:45:05:82:8a:16:1f:a4:aa:ff:
d5:43:55:c6:b7:87:18:bf:6b:a9:d2:29:09:4d:2b:02:1f:d0:
39:29:af:b1:0d:b2:5f:da:28:9a:48:b3:32:6a:11:00:e2:91:
23:01:88:8b:6c:f5:35:fb:27:9d:17:82:9f:35:19:72:85:9b:
9f:5d:a7:a4:f8:07:1c:bb:10:7b:95:4d:f2:0b:87:aa:f7:e3:
44:56:12:cc:92:6a:bc:97:2a:dd:cf:aa:d3:30:68:de:64:c0:
91:52:1e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:50 2026 by rpki-client