Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File: Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier: MdBibrNcNx9ofhZOywFS074Ni0smcbhLF+4HOr1wyPs=
Subject key identifier: 0E:8E:9F:DD:7A:33:A5:E9:C1:EA:37:8F:2D:84:17:7A:C5:91:B6:36
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 01A06EA77B77C12A5608E479D9F71CEFB809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number: 12C5
Signing time: Fri 04 Sep 2026 23:01:04 +0000
Manifest this update: Fri 04 Sep 2026 23:01:04 +0000
Manifest next update: Sat 05 Sep 2026 23:01:04 +0000
Files and hashes: 1: 19m5MDbUFOo2nenyTAHaAJWRktg.roa (hash: ifiLYIYFLAmYeXVeugFRbq75qlpi3IBXffi18Sxi0dE=)
2: EcWTWsW7l7pSDkzIfszK-ABUpsY.roa (hash: psJpT6d58TfpqU9qeBsatlA8wNIaL/3bQDwy3Orowzs=)
3: O-pdjSm1G27EcLZc1YIur1izX_U.roa (hash: jKMq7pI2u6HCOkXwOZSmin7/bWw1O5apvOvL1pGFigA=)
4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: KrflJaMUvJD473j+UWkJqwoCsRvo3xBI3R4RSV08h1U=)
5: doyYOGkkycNxN7CI_sa7Q6rCkOM.roa (hash: woc85YZFaTyz+Qogag/CUtpAQY4A09lS0R0JgcvwyKk=)
6: lN52A8wmVdK-KeTgv5TB-V3C8VU.roa (hash: r7UmoxX/ZzMNRX796XCzomjg3WCGmP7MqKUteRQKBkc=)
7: uB-js8eLrApF33iZUBGxAz2OeB8.roa (hash: v2CZS4LBPcR03VFDtDYyNJUFkRjGLvokXi+BKkeMV0s=)
8: z3KWbXv42c-ZATgtnic3uJ_XhGc.roa (hash: F/Z940zFmLWbSHSUiP5QUTYBI1TQajSnkxOAhEnwt4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:7b:77:c1:2a:56:08:e4:79:d9:f7:1c:ef:b8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Sep 4 23:01:04 2026 GMT
Not After : Sep 5 23:01:04 2026 GMT
Subject: CN=0e8e9fdd7a33a5e9c1ea378f2d84177ac591b636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:05:9b:e2:07:65:39:99:e4:84:df:f8:04:
c4:8c:11:b6:fb:a5:3c:d3:e8:72:46:4f:0f:f0:85:
9c:d9:ef:55:10:74:2c:d0:b6:fc:82:31:2d:32:72:
8c:89:42:17:1a:22:17:ce:e6:d0:4b:50:64:9e:ce:
8d:a0:a3:73:6b:e2:9e:b4:3c:ab:ce:f9:7b:83:08:
ce:f8:fe:43:f2:ec:c2:b0:21:67:9a:34:2b:15:2e:
fb:20:fc:dd:45:d6:53:e4:be:33:ce:4b:76:82:14:
67:58:be:e1:0a:78:40:f0:cc:9f:7d:e4:0c:c2:0c:
83:c6:73:a3:57:5f:a1:75:af:62:09:8a:51:b9:68:
18:72:e3:fa:4c:03:40:ae:3b:ca:be:59:20:08:55:
1c:35:a8:d8:72:38:18:1c:bc:89:cc:5b:fa:6b:7c:
f1:e3:d7:67:80:5c:34:47:fd:e2:a1:5a:78:ac:a4:
f2:d3:7a:61:95:26:0a:d4:b6:55:bd:2a:03:8f:68:
5c:c3:05:8a:42:ab:bb:78:e6:34:f5:a1:92:1f:c2:
69:eb:3e:91:29:09:d3:a1:1c:07:c4:33:11:4a:31:
fb:e9:a9:e3:8f:94:89:fd:6b:88:f5:fa:53:c5:dd:
4a:19:5f:61:55:0c:96:83:8f:18:69:cc:c6:ae:c2:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8E:9F:DD:7A:33:A5:E9:C1:EA:37:8F:2D:84:17:7A:C5:91:B6:36
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e2:a4:75:88:25:64:11:4a:ae:ba:b0:fe:44:38:30:42:89:
a3:60:ae:6e:1c:d5:68:03:52:5e:d2:88:4b:c3:fe:d8:6c:51:
30:2f:01:20:65:85:ac:8d:e3:67:15:3b:95:6b:fb:c6:32:96:
d0:a6:be:3b:c1:39:ee:92:e3:43:3c:b6:68:1c:32:82:a3:66:
73:0d:49:3f:4b:ae:30:5b:ad:90:fc:ed:6b:28:b4:b7:52:36:
87:75:cc:92:44:24:34:94:da:2a:81:1a:25:1b:90:67:a6:b2:
20:c4:eb:23:87:bf:45:51:8b:ef:0e:e6:46:bb:0f:d7:16:86:
f7:9d:a2:42:d7:70:67:6c:00:ff:d3:0b:b9:b5:a6:72:1f:09:
d2:d8:29:6c:87:96:36:05:15:e2:aa:db:ec:3f:3c:ea:40:5d:
ea:64:a0:db:6d:26:44:f6:02:e1:aa:fe:fe:29:5f:b4:78:af:
d6:b5:63:0d:2b:83:40:41:e9:56:a2:3d:96:e9:cd:38:74:d2:
50:52:ac:d0:c8:dd:cc:7e:ab:a4:58:0a:3f:55:7d:8c:07:0c:
6d:78:ac:3f:41:7e:94:88:18:fa:f8:d6:81:5c:28:76:f4:0a:
6a:a4:48:45:fe:a2:96:42:ff:23:e5:03:74:d1:1b:2d:47:11:
3b:29:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:51:43 2026 by rpki-client