Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: P4XZ2s+HXC5JZuvo7pCRa+z+XbX/SOXwqt5mZzbNdDk=
Subject key identifier: FF:83:6A:09:3C:7A:02:3C:43:82:40:EC:12:97:79:2A:61:7F:CA:82
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 01A030DB94465A723F789FBAD5C9D20373EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 0680
Signing time: Sun 23 Aug 2026 23:01:31 +0000
Manifest this update: Sun 23 Aug 2026 23:01:31 +0000
Manifest next update: Mon 24 Aug 2026 23:01:31 +0000
Files and hashes: 1: 18mBvWMTzIGjuf0KvgUDpqaEgck.roa (hash: GFEk4/+4DhuQ+HzNstdRPkKFI3j7dtiSLG7Lkc2nCys=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: FzOoCQzEJdxENSDODZeGqjlsEec1ER7zQij2IKsj0Xs=)
3: zsYYk54DnHl7eLevLUFDMgKz4P8.asa (hash: 6luWGIPO7hhqIfw0IR/ULYO//RhcC5nGHlt4UBWyulU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:30:db:94:46:5a:72:3f:78:9f:ba:d5:c9:d2:03:73:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Aug 23 23:01:31 2026 GMT
Not After : Aug 24 23:01:31 2026 GMT
Subject: CN=ff836a093c7a023c438240ec1297792a617fca82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:78:5e:0f:83:bd:28:72:47:9a:a3:78:3b:59:
73:15:eb:b9:e3:e4:01:55:72:7e:24:4e:9e:29:90:
4f:8e:ca:25:64:d8:ac:ed:c5:0f:ee:c8:7b:3e:f3:
9b:a3:fd:96:a0:59:8e:94:06:14:b5:e6:15:ce:f1:
41:b9:14:16:5e:70:43:06:bd:2c:bb:e6:71:32:ee:
fa:98:fc:80:22:c8:fc:5b:4f:7d:a8:0f:83:9c:31:
23:53:c1:ea:9e:36:55:3a:a3:00:dd:73:ad:26:03:
6c:b6:30:af:c5:a3:a5:de:f4:2d:9c:42:4f:d7:3d:
95:a3:bb:4e:f6:7c:f3:f9:d4:1e:55:8a:52:7c:fa:
b7:06:5a:66:f4:fb:98:63:30:53:00:da:dc:ab:dc:
cf:d2:f3:0a:5d:1c:3e:37:56:85:c8:d4:5d:a9:4f:
f6:f3:cc:12:82:57:d2:ad:04:a9:a1:09:d1:62:6e:
f7:9f:9d:d1:b1:4a:c1:eb:20:5c:2f:5d:a3:52:0c:
94:fd:29:7e:5f:6a:f3:7b:13:89:b3:da:de:f2:e2:
82:f8:af:7c:8a:33:fa:0f:8a:6d:41:db:17:8a:f1:
6d:b6:77:80:e2:b6:ba:6d:35:bb:f4:32:6a:f4:3a:
f0:a0:56:9b:2f:7e:0b:a2:45:90:a7:b8:8c:db:4d:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:6A:09:3C:7A:02:3C:43:82:40:EC:12:97:79:2A:61:7F:CA:82
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a9:dc:2e:94:0f:14:1c:76:8a:a1:03:fb:95:8d:3c:8e:58:
00:2d:76:0f:34:5b:de:e2:08:95:0f:6a:67:67:3e:ab:77:a5:
c4:9e:76:ff:8a:37:a4:82:f8:e3:d0:ad:9a:02:b5:8a:05:44:
19:30:19:00:35:47:0a:fe:05:ac:5d:b9:7d:1c:ab:76:96:2d:
85:7d:89:93:f8:b1:c0:53:07:9d:a7:49:ba:a3:bf:dc:68:94:
4f:a4:3b:6b:34:e6:76:85:c5:c2:0a:f9:c6:3e:00:d0:8a:87:
23:df:4c:77:a7:a6:f9:f9:5c:f1:e4:6c:a8:6f:07:7c:d6:8d:
e8:01:35:33:c6:b9:bf:e2:fb:18:89:be:66:21:bd:78:ee:92:
8d:a9:d3:8b:73:4a:f0:4c:09:51:e8:b4:54:2f:7c:5d:23:6d:
53:31:89:e2:88:50:70:fd:f5:f3:d1:9c:5a:e6:a7:e0:73:27:
b4:17:ad:03:4a:02:20:26:6c:69:a4:5b:04:a1:da:ae:d4:f6:
06:22:64:ad:60:ac:64:03:b7:7b:4e:1a:17:98:6e:9a:64:fc:
5b:e6:35:29:77:37:ba:9b:fb:d8:04:d9:9c:98:cf:93:95:2b:
52:31:ff:b0:ab:6c:91:f1:15:83:32:fd:7f:bb:77:ac:a8:6e:
ab:16:d1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 02:38:49 2026 by rpki-client