Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: OcrEQpxh905u2+fv2H3+n8fetVsjchAsiPjJ7Bz8B3Y=
Subject key identifier: 83:FC:AA:41:0F:5D:8F:33:7C:CF:EC:A4:3A:33:22:F1:D0:EB:6C:59
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 01A08A1E4750A7971B42E7CE1C90C09D540D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 0942
Signing time: Thu 10 Sep 2026 07:00:35 +0000
Manifest this update: Thu 10 Sep 2026 07:00:35 +0000
Manifest next update: Fri 11 Sep 2026 07:00:35 +0000
Files and hashes: 1: 6kFMzdPUiPyPGezO_LNVEuK0DIM.roa (hash: WJQe2ZZPHaA7iIzboHAZGY2K/WcsjYy2+zN7bgpDUoI=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: j5TSAN6iPgsl81el30hd1i3kIxulz9Dk6f94+qW6BrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:47:50:a7:97:1b:42:e7:ce:1c:90:c0:9d:54:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Sep 10 07:00:35 2026 GMT
Not After : Sep 11 07:00:35 2026 GMT
Subject: CN=83fcaa410f5d8f337ccfeca43a3322f1d0eb6c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:73:0a:1a:7b:2a:07:bc:d5:68:62:5e:b0:
34:5f:89:6b:e1:26:68:89:34:45:fe:3a:64:66:2a:
23:29:d6:77:35:9c:92:36:3d:13:84:47:64:87:7c:
d0:49:38:bf:59:af:aa:fc:58:fc:32:b2:c3:f7:fc:
7e:7e:f1:37:0d:4c:dd:24:20:7c:f8:45:f0:fe:ab:
51:4e:5d:4d:fb:ed:c7:4f:fe:39:52:b5:e8:49:41:
7d:60:9f:2c:d6:68:67:ec:03:04:d3:a1:ca:4e:3b:
d1:42:2b:68:ce:c8:a3:fb:70:bd:29:3b:66:da:01:
f4:73:68:93:70:a1:ea:e3:da:b5:0e:5d:7f:0b:a6:
4e:8e:5c:80:da:c0:06:05:e3:af:5f:8c:77:18:89:
ff:3d:7a:1a:90:54:ab:74:5b:89:4e:f8:01:9d:a0:
3b:8a:25:06:7d:40:b5:82:d4:62:3c:32:e9:4e:68:
2f:ce:40:b4:4e:ff:66:d3:cc:6d:ce:e8:ed:33:87:
db:51:f2:0f:ab:17:c8:4f:98:d9:a3:8c:af:ba:0f:
fc:73:37:3b:04:8d:67:27:3f:ca:a2:81:d0:28:50:
a7:73:89:9f:7b:d4:73:7a:24:d0:68:8f:70:29:d4:
28:59:47:72:ea:40:74:ea:2c:0c:b9:f6:a4:14:6e:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FC:AA:41:0F:5D:8F:33:7C:CF:EC:A4:3A:33:22:F1:D0:EB:6C:59
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b3:da:93:57:8d:c0:8c:4b:b9:bb:75:9c:14:9b:37:48:51:
9b:3f:96:c8:7f:07:0c:3b:61:b2:5a:da:07:ee:37:70:cc:53:
64:2f:43:14:08:ae:d6:d4:15:10:29:94:39:5f:bc:a3:f6:b9:
a5:e1:a2:d5:92:bb:6e:a6:7e:1d:5c:58:8e:39:49:e3:e2:6f:
d0:85:4b:54:d0:03:9c:9a:81:0e:9e:14:30:f9:2c:92:a2:3e:
b7:45:a3:52:db:eb:fc:11:82:d7:c8:3f:0d:17:9f:25:12:86:
fa:1c:8e:f4:e6:60:e8:6a:f1:2f:b3:a4:8c:b8:1b:75:6a:64:
55:ac:0b:1c:25:e4:69:41:85:69:fc:4c:4d:dd:b2:ed:89:53:
80:d9:88:c4:03:53:0f:5d:66:bb:2e:52:ee:d8:27:38:e4:26:
28:5d:01:6d:2c:ba:57:65:4a:aa:11:09:b9:e7:6c:82:ff:7f:
2a:1a:bb:62:63:6a:db:e1:38:0d:ee:00:95:3b:68:7e:bd:5d:
fd:d9:98:c1:39:2b:0d:1d:3c:b9:0f:87:2b:ec:6f:bf:fa:36:
a2:87:f8:33:cc:e9:db:bd:13:1e:26:25:8e:d0:a4:8d:d0:30:
76:0c:df:6b:9d:a3:f0:a7:65:8d:91:43:5e:39:09:11:a2:e2:
bd:af:88:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:42:12 2026 by rpki-client