Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: fqHC2TAeIr+jHKA9Pa/wB+rddk1u3Q20PKy22gX1+0c=
Subject key identifier: B8:FB:39:45:E6:62:8B:04:DF:35:AC:A4:5B:12:70:3C:D7:CA:3C:42
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 019E295E451EA0B383FF2F0F52F585C8D078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 0573
Signing time: Fri 15 May 2026 02:01:44 +0000
Manifest this update: Fri 15 May 2026 02:01:44 +0000
Manifest next update: Sat 16 May 2026 02:01:44 +0000
Files and hashes: 1: 18mBvWMTzIGjuf0KvgUDpqaEgck.roa (hash: GFEk4/+4DhuQ+HzNstdRPkKFI3j7dtiSLG7Lkc2nCys=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: sG5I0Dz+tv+qgK4kB+zPPYev5hXZII7T9cGhWNM+vL8=)
3: zsYYk54DnHl7eLevLUFDMgKz4P8.asa (hash: 6luWGIPO7hhqIfw0IR/ULYO//RhcC5nGHlt4UBWyulU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5e:45:1e:a0:b3:83:ff:2f:0f:52:f5:85:c8:d0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: May 15 02:01:44 2026 GMT
Not After : May 16 02:01:44 2026 GMT
Subject: CN=b8fb3945e6628b04df35aca45b12703cd7ca3c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:1d:85:00:8a:7b:0e:bd:04:47:6b:c4:fb:
7a:db:d3:ff:fb:bc:14:d2:fd:78:3e:af:e4:4d:00:
fd:dc:23:11:bc:e8:5e:9a:9b:03:dd:5e:fb:aa:85:
2b:fc:56:10:ae:a4:1f:c5:3a:fa:74:d3:cc:b9:bd:
2d:a2:76:e1:c0:12:7f:7c:18:51:2f:b8:66:c8:93:
58:d9:1c:96:39:b8:9a:8b:6c:c4:9c:f6:b5:b0:11:
fa:50:23:74:08:58:e2:97:0d:45:ae:5b:c1:53:8f:
4d:ff:c2:03:19:e3:ae:96:9b:b4:83:cb:fe:49:58:
04:ac:ce:52:11:5f:d6:36:16:c9:d0:61:f8:e3:2f:
a3:b9:10:61:f3:7e:db:27:b1:0b:1d:be:96:3b:40:
fb:c4:dd:ab:37:3f:7f:fd:91:12:7f:84:d0:dc:13:
8d:f7:58:d0:02:04:30:a3:be:5a:9a:76:40:73:9c:
49:32:3b:2e:be:6f:73:bf:a2:e4:87:42:ec:55:28:
cb:7a:05:0e:65:49:e4:40:dc:21:c0:23:b5:46:55:
bf:a5:dc:68:ed:2d:a2:39:cc:9c:0c:84:c3:c4:3b:
30:a6:7b:97:c1:64:31:e2:78:ee:cc:49:7f:45:14:
ed:8e:4f:46:c2:52:25:02:d3:5e:c8:5a:c2:cd:91:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FB:39:45:E6:62:8B:04:DF:35:AC:A4:5B:12:70:3C:D7:CA:3C:42
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:90:48:dd:73:44:6b:ce:38:4e:55:75:73:81:19:d7:bb:60:
fb:b1:40:b2:f3:21:70:ee:d2:30:07:2e:85:13:49:9f:c8:f9:
e3:95:f0:c8:ab:a4:90:5d:df:46:d4:44:e2:2f:fa:12:9a:1f:
ff:12:47:d2:ab:aa:42:c0:4c:d3:61:29:a9:c3:ee:72:38:5d:
24:6d:6e:ee:80:99:ba:d0:27:07:3e:25:5b:c8:81:f1:c8:36:
79:e1:74:d8:90:5a:78:88:db:7e:7c:b0:20:1d:66:c4:cb:66:
1e:f3:b5:88:dc:24:40:fb:15:f8:76:21:cc:ad:4e:56:57:0e:
79:8e:51:71:80:ba:81:7e:c5:9e:c8:f2:03:be:3d:f0:72:1d:
34:a3:78:9a:ee:5a:03:5c:58:c9:6a:d7:53:b0:b6:ac:68:4e:
07:f5:fe:37:ff:ce:69:e1:3c:ae:bd:0b:a3:f4:52:82:45:c8:
bc:de:a3:83:f8:e0:4c:f6:f8:f0:3a:a6:fb:13:b2:99:fd:19:
55:74:01:8e:75:53:b2:4d:6a:11:0b:1d:e1:83:df:3f:6a:56:
da:97:c8:2f:ea:dd:ca:96:1b:52:c5:c0:a1:fb:55:eb:82:0e:
65:d5:7a:7a:6f:80:07:61:54:2f:81:b3:e3:72:26:fc:f6:24:
63:6b:40:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pXkUeoLOD/y8PUvWFyNB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZGMyMTczODhhYTdlOTAyOGRkMWUwNGJhNjQyOTEzNTJk
NjBiZWYwHhcNMjYwNTE1MDIwMTQ0WhcNMjYwNTE2MDIwMTQ0WjAzMTEwLwYDVQQD
EyhiOGZiMzk0NWU2NjI4YjA0ZGYzNWFjYTQ1YjEyNzAzY2Q3Y2EzYzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRIdhQCKew69BEdrxPt629P/+7wU
0v14Pq/kTQD93CMRvOhempsD3V77qoUr/FYQrqQfxTr6dNPMub0tonbhwBJ/fBhR
L7hmyJNY2RyWObiai2zEnPa1sBH6UCN0CFjilw1FrlvBU49N/8IDGeOulpu0g8v+
SVgErM5SEV/WNhbJ0GH44y+juRBh837bJ7ELHb6WO0D7xN2rNz9//ZESf4TQ3BON
91jQAgQwo75amnZAc5xJMjsuvm9zv6Lkh0LsVSjLegUOZUnkQNwhwCO1RlW/pdxo
7S2iOcycDITDxDswpnuXwWQx4njuzEl/RRTtjk9GwlIlAtNeyFrCzZEgnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj7OUXmYosE3zWspFsScDzXyjxCMB8GA1UdIwQY
MBaAFM/cIXOIqn6QKN0eBLpkKRNS1gvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMt
NWU1YTYyNGQ3NGI4LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMtNWU1YTYyNGQ3NGI4
LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5BI3XNE
a844TlV1c4EZ17tg+7FAsvMhcO7SMAcuhRNJn8j545XwyKukkF3fRtRE4i/6Epof
/xJH0quqQsBM02EpqcPucjhdJG1u7oCZutAnBz4lW8iB8cg2eeF02JBaeIjbfnyw
IB1mxMtmHvO1iNwkQPsV+HYhzK1OVlcOeY5RcYC6gX7FnsjyA7498HIdNKN4mu5a
A1xYyWrXU7C2rGhOB/X+N//OaeE8rr0Lo/RSgkXIvN6jg/jgTPb48Dqm+xOymf0Z
VXQBjnVTsk1qEQsd4YPfP2pW2pfIL+rdypYbUsXAoftV64IOZdV6em+AB2FUL4Gz
43Im/PYkY2tAEA==
-----END CERTIFICATE-----
Generated at Fri May 15 06:20:43 2026 by rpki-client