Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: aO4DmqiUqmkEA9f1IhWJYXziu64Mtuy4Uap3rEV12kA=
Subject key identifier: 8D:E4:61:6C:FC:6D:7F:C1:B5:1F:6D:E9:B0:62:DA:70:E6:4B:42:59
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 01A1968E28A4C0AF44BC4D3B8843505A2308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 09CD
Signing time: Sun 01 Nov 2026 10:01:01 +0000
Manifest this update: Sun 01 Nov 2026 10:01:01 +0000
Manifest next update: Mon 02 Nov 2026 10:01:01 +0000
Files and hashes: 1: 6kFMzdPUiPyPGezO_LNVEuK0DIM.roa (hash: WJQe2ZZPHaA7iIzboHAZGY2K/WcsjYy2+zN7bgpDUoI=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: DNa4etIJplG+vvItxLptQXrzlObBvf6RvT09QHf31tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:8e:28:a4:c0:af:44:bc:4d:3b:88:43:50:5a:23:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Nov 1 10:01:01 2026 GMT
Not After : Nov 2 10:01:01 2026 GMT
Subject: CN=8de4616cfc6d7fc1b51f6de9b062da70e64b4259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:bc:2b:9a:3e:17:0d:b8:32:9a:e5:af:ed:
90:82:f5:59:f0:83:43:87:b0:c1:79:b0:fe:65:19:
91:44:dc:f3:be:ca:ce:2c:61:f2:e9:db:9a:65:40:
3e:1e:21:7d:f5:7f:45:86:c9:ee:e9:64:6c:a8:22:
f3:1b:d6:be:aa:ed:4b:72:dc:ed:3b:b4:c7:23:fc:
0d:58:a1:2b:d5:b3:80:5d:73:90:dc:af:c3:0c:16:
92:8f:e9:e8:f6:ac:57:f0:a8:28:09:b5:31:69:0a:
77:f0:5d:f4:cf:e0:ab:b6:94:0b:1e:a9:5d:de:c2:
d2:26:80:6c:f3:0f:f9:93:bc:20:47:fc:83:98:a0:
79:26:9a:9c:5e:e2:f5:ef:d0:9f:4c:9f:4b:b6:f1:
dc:2b:41:58:d8:58:2e:f0:8f:de:d3:02:70:91:c6:
b9:1b:d9:63:13:0b:a5:9d:33:55:e3:16:a1:0a:7f:
2b:2f:8d:48:a7:1c:cc:1a:18:ad:f7:78:70:22:01:
ec:ad:0c:87:06:87:bc:03:a9:01:3f:fd:ed:b0:0e:
57:8d:ee:af:85:9a:12:1e:29:b3:9b:93:a2:a6:81:
81:0e:45:11:c1:4d:17:08:7a:ef:d3:9c:57:9b:b7:
b8:24:93:ca:49:3c:ec:54:33:b2:78:6b:60:f8:f5:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E4:61:6C:FC:6D:7F:C1:B5:1F:6D:E9:B0:62:DA:70:E6:4B:42:59
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:10:12:4d:71:61:62:d1:c9:c5:b7:ab:57:0a:f1:75:ea:f6:
20:00:bb:2b:df:a3:46:3e:62:aa:bb:fe:15:f3:a6:15:7e:bd:
d0:47:8d:c1:c7:00:3a:42:23:f5:32:a6:7d:59:d5:4b:4c:df:
f6:dc:8e:b8:67:63:69:80:2e:29:b2:42:d0:56:23:83:28:64:
12:15:db:a9:38:b2:50:bc:84:08:af:17:65:1b:8e:31:50:52:
74:d4:df:cf:21:a8:d7:47:c1:e4:76:57:a6:a3:9f:72:da:6a:
ea:26:ae:5c:47:37:48:b3:6c:30:50:7c:67:ae:23:0c:74:cc:
39:fe:3c:f0:f7:80:ee:77:df:ae:9c:86:6c:c8:a1:c0:c0:2e:
a7:3e:08:89:d0:e3:75:23:a3:98:2c:b5:b1:2f:cc:85:1a:05:
47:01:5d:ec:c0:58:ef:50:2d:c7:81:a1:f8:f1:0a:de:af:7e:
69:d3:a7:62:93:72:e6:a8:87:11:1b:12:8d:06:3e:e0:87:18:
74:84:c2:18:1e:fa:a1:6d:91:15:76:70:31:cd:56:eb:30:f6:
76:a8:18:b0:a6:6a:d1:b9:9a:09:fc:e6:ac:1f:a8:fa:12:c3:
88:00:2a:d9:da:8e:a6:43:68:50:91:eb:c2:5d:f4:0e:aa:52:
d1:59:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:06:19 2026 by rpki-client