Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: /i2Sk12TAWoF2T1IOnOkY+HttLKDpbixOPCBcFVpOtg=
Subject key identifier: 31:F3:BA:5E:17:6C:D7:19:91:DB:4A:4A:98:10:6C:F6:81:AF:02:3A
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 01A08E327DC90B8AA482520516412A952D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 063F
Signing time: Fri 11 Sep 2026 02:01:08 +0000
Manifest this update: Fri 11 Sep 2026 02:01:08 +0000
Manifest next update: Sat 12 Sep 2026 02:01:08 +0000
Files and hashes: 1: 6q6FFP59V1iZ5mjSs0C-bMaEVi4.roa (hash: 7kD8hB6sSAR0ZTznrHLFw4wEeWx6SBRTYXwBBQFgLak=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: BnVaRpCvjxXGeHPcilsDNvcO7fzOsNE+aDvHlJAdfqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:7d:c9:0b:8a:a4:82:52:05:16:41:2a:95:2d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Sep 11 02:01:08 2026 GMT
Not After : Sep 12 02:01:08 2026 GMT
Subject: CN=31f3ba5e176cd71991db4a4a98106cf681af023a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:b8:24:1b:d4:87:1a:1a:8c:a4:3f:d3:40:
f8:dc:69:3e:ee:cd:c5:6f:9b:45:84:b0:31:94:18:
b0:15:c6:0f:ae:fe:f7:84:60:4e:10:70:a5:2b:26:
5f:15:16:71:15:bb:02:c3:d9:20:3d:d7:54:13:ca:
53:70:d7:23:28:58:4d:69:8e:87:ec:b8:13:09:5f:
bc:aa:01:01:e4:f6:70:65:ef:c2:5c:05:93:fe:07:
d6:ea:91:e0:ec:0c:fe:57:70:63:89:bb:d0:49:ac:
85:c6:ba:6a:98:ac:1d:5d:b7:9e:ea:a7:14:f0:5d:
2f:27:fb:55:11:59:e3:c3:db:0e:01:c4:53:42:57:
19:a2:ab:13:f0:4c:1b:81:5d:c4:8f:5c:0a:70:26:
7c:1f:86:d9:de:27:08:e1:ce:6b:66:8f:0e:d3:07:
55:7b:68:b3:89:bf:75:71:a8:4b:07:3b:7a:ad:a5:
7b:5d:ef:09:a6:07:74:31:5d:a2:57:f3:49:61:f4:
44:08:2c:fa:7b:9f:d8:ca:b6:7d:42:2a:1b:be:42:
d2:94:20:14:11:3f:f9:fc:96:c8:f4:57:48:b4:90:
a8:93:19:4d:8b:04:52:e6:ba:bb:97:08:8c:d9:bc:
82:a4:f4:78:a9:27:21:59:ac:86:b2:53:93:1c:f7:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F3:BA:5E:17:6C:D7:19:91:DB:4A:4A:98:10:6C:F6:81:AF:02:3A
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:79:85:91:2a:0c:85:5d:3c:11:9f:a0:b6:7e:a9:76:0d:8b:
73:09:29:59:be:f2:32:5d:1d:1e:de:43:f8:1c:a3:24:78:23:
e5:7d:af:a9:8a:96:eb:30:22:f1:2c:d6:40:e9:a6:bb:ad:a6:
2f:37:91:fe:cd:a6:99:67:21:6b:a9:e3:4f:77:4d:f7:c1:fd:
fe:50:33:69:c1:7a:a3:30:8c:6c:5e:3f:c2:52:4c:52:4e:3a:
21:d9:2e:fe:29:c3:71:fc:2e:9f:29:ec:9c:1a:90:ce:3a:c1:
e6:76:02:71:c7:8d:bf:b7:2e:e5:2f:c2:e5:cb:9c:e0:b6:9a:
d5:b0:01:e9:e1:73:9d:0a:48:01:93:49:4d:7b:2f:cc:6d:6b:
47:0f:3c:56:2e:40:3f:19:bd:6e:91:99:4f:17:d4:56:55:4e:
5d:5b:2d:d4:a2:62:8b:bc:fb:86:67:49:fd:7b:eb:f7:fc:34:
05:05:d5:a7:4d:fc:d8:b7:92:dc:cc:d8:6f:dd:3c:cb:c0:62:
fa:c5:0d:42:9f:26:2f:a8:9c:12:67:ae:d3:99:2c:10:c0:09:
70:c7:14:6e:70:3b:86:5b:b0:ab:e0:17:ea:06:28:32:35:08:
76:05:6b:06:07:c9:68:ff:f8:87:fc:b7:96:e5:41:bc:3e:d2:
d0:18:67:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:09:37 2026 by rpki-client