Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: vo+p5RSll8ETTuKm0qu6os/SulFyxCgIyFAUfZb/LM4=
Subject key identifier: F8:75:09:36:4F:DD:2E:67:C6:7D:9B:31:A3:80:A9:5D:30:D7:C1:F0
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 01A04BE47BC3A38F69440A4F91D225098409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 05BD
Signing time: Sat 29 Aug 2026 05:01:00 +0000
Manifest this update: Sat 29 Aug 2026 05:01:00 +0000
Manifest next update: Sun 30 Aug 2026 05:01:00 +0000
Files and hashes: 1: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: SWwPq//T5WJO3RvgBifaW16CJenY4Qezapld7yeTwGE=)
2: _7yKofbHnJoEbJpKfmaDh_UzpU4.roa (hash: SGPyBt5E90o9ZLuMZHW0/rutTar66Sv5UUe187RDyyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4b:e4:7b:c3:a3:8f:69:44:0a:4f:91:d2:25:09:84:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Aug 29 05:01:00 2026 GMT
Not After : Aug 30 05:01:00 2026 GMT
Subject: CN=f87509364fdd2e67c67d9b31a380a95d30d7c1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:a4:6e:21:67:71:e0:97:50:26:7a:a2:48:
7a:9f:15:2f:3d:e3:d0:a1:4d:2b:5d:21:d2:7f:74:
13:c6:f1:2f:e5:bd:d0:9d:7e:b4:f1:89:0c:42:4a:
dd:79:94:7d:19:2b:fb:f5:2a:9b:53:5f:c4:60:d6:
33:fa:12:a4:3a:3f:92:3a:a8:0f:a8:58:9a:24:b4:
a4:7d:99:19:bb:25:57:97:0a:89:5b:3f:37:b3:22:
da:e1:07:98:5b:6b:ce:ee:03:39:2b:af:45:76:ce:
f4:78:de:be:9d:c8:63:25:c8:67:99:3c:42:fb:0e:
bc:af:84:ed:19:25:73:a9:0a:ba:71:dc:47:d5:e1:
7a:57:26:f9:57:ce:9f:be:4b:65:c9:c4:f5:4d:38:
d9:85:ac:a3:7e:70:9d:40:f7:2e:82:ff:35:db:1e:
96:14:8b:07:b3:c2:f9:8e:f9:2d:66:0a:25:71:32:
a2:ba:17:3b:08:db:c8:eb:7d:44:e8:7f:19:e7:13:
41:ca:16:0f:a5:fb:12:a3:07:fb:fd:04:4b:08:fb:
c9:f9:c9:d0:d3:ae:d3:1b:8d:ba:04:b1:ff:69:7c:
3c:ab:92:cc:16:09:6f:13:be:ce:8c:98:e8:77:25:
60:31:a9:16:ae:76:58:0d:12:bd:f4:ce:d6:f1:40:
9e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:75:09:36:4F:DD:2E:67:C6:7D:9B:31:A3:80:A9:5D:30:D7:C1:F0
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fd:38:54:19:98:ef:6d:4a:ed:f5:07:94:ce:1b:86:95:bb:
93:c5:38:7e:51:23:f9:4f:0b:10:fe:c4:41:c1:38:6d:13:ac:
9a:8d:df:63:2a:a3:e4:b7:50:b0:45:8b:f9:6b:38:cb:f4:a9:
ce:35:a3:86:c0:f0:4b:11:3a:99:1d:9d:2b:b1:f7:09:e2:28:
27:e4:0d:f6:14:d1:2a:24:6c:1d:5d:e3:b4:d1:6b:7a:28:2c:
c1:ac:ec:24:bf:25:ce:09:be:41:66:1b:40:e3:03:ac:12:26:
18:32:8c:96:bd:fe:5f:87:1d:a1:81:03:19:9f:98:b3:8a:3a:
33:38:a9:0f:1f:e1:c0:e1:d8:9c:ca:a5:ab:6b:b9:be:f2:7c:
1d:e4:1c:d4:a2:c0:dc:c3:70:93:fa:a8:e0:12:93:5f:92:a9:
9d:b4:77:e3:65:ee:6c:24:23:74:97:1f:42:8b:d4:f9:eb:75:
3a:41:ab:09:ba:13:93:42:93:39:2d:6a:57:d7:97:44:57:ba:
eb:2f:8c:fc:ff:24:03:fa:28:28:a1:36:30:d8:12:86:ce:d9:
3a:9b:4d:f2:0b:e5:84:e1:38:5d:97:b9:e5:76:6f:f0:88:72:
db:d4:50:d4:d8:e0:53:98:c4:7b:a5:1f:1e:8a:27:7e:2e:37:
6f:c6:a7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 14:38:21 2026 by rpki-client