Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: nMYc5FJWErjb4yHacuHpo1Ix6EcTzOWe67nVHNqSElo=
Subject key identifier: 95:0A:16:44:11:F7:5F:43:CB:5A:9E:68:46:AE:4F:AC:4B:2E:C2:3B
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 019D39E5AC11FE0A5A99C3B77792807EADF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 04F7
Signing time: Sun 29 Mar 2026 14:00:46 +0000
Manifest this update: Sun 29 Mar 2026 14:00:46 +0000
Manifest next update: Mon 30 Mar 2026 14:00:46 +0000
Files and hashes: 1: 18mBvWMTzIGjuf0KvgUDpqaEgck.roa (hash: GFEk4/+4DhuQ+HzNstdRPkKFI3j7dtiSLG7Lkc2nCys=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: QJfietxqKasejfE7UIeQAs26M2gVPuqJysUMYUqInRk=)
3: zsYYk54DnHl7eLevLUFDMgKz4P8.asa (hash: 6luWGIPO7hhqIfw0IR/ULYO//RhcC5nGHlt4UBWyulU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:ac:11:fe:0a:5a:99:c3:b7:77:92:80:7e:ad:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Mar 29 14:00:46 2026 GMT
Not After : Mar 30 14:00:46 2026 GMT
Subject: CN=950a164411f75f43cb5a9e6846ae4fac4b2ec23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:c0:11:92:fa:88:46:0a:a9:fa:22:13:c2:
ab:cf:be:85:93:eb:68:81:be:30:47:b0:f1:d0:6e:
15:1d:78:99:e2:8a:9e:73:c6:55:72:56:48:14:84:
ce:8a:8e:88:80:80:c4:9d:c5:93:cc:c8:c4:df:2d:
35:d6:d4:16:01:85:99:e7:da:81:5c:0f:ed:45:c4:
4f:e8:1f:59:92:15:5a:94:e9:4e:20:84:bc:8f:ac:
1f:91:4a:99:97:3d:27:1a:ea:4c:53:94:a6:03:49:
4c:1b:59:4f:11:2c:79:25:54:da:d7:5b:27:46:8c:
33:7a:90:86:98:70:6b:6c:ca:07:31:f9:19:3a:34:
5b:0e:d0:05:68:b8:37:e5:b4:5f:4d:e7:f5:cf:89:
4e:07:db:11:96:03:e4:01:d0:eb:6e:cf:23:f3:a0:
59:4a:9c:d7:72:76:2e:e2:7e:fd:a4:58:36:53:79:
bb:5c:57:41:81:80:f0:cd:13:0c:5f:81:86:be:53:
fc:d2:dd:b4:c8:1a:b4:9c:1a:66:02:61:7a:ab:82:
da:5b:7a:9e:cd:18:88:bc:24:0a:b8:2f:9e:ea:b4:
f0:6b:01:fa:16:48:07:15:97:2c:b3:6a:c5:d4:a5:
3d:ca:0e:61:cc:97:82:24:18:9b:02:8e:aa:65:ff:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0A:16:44:11:F7:5F:43:CB:5A:9E:68:46:AE:4F:AC:4B:2E:C2:3B
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1f:e1:af:1f:2c:25:43:17:de:a2:81:d6:12:24:fc:47:a6:
45:58:57:82:52:8b:46:be:64:04:1c:61:57:92:4c:42:4d:c9:
c5:02:37:ea:25:a2:a0:e6:64:be:8d:dc:01:76:81:90:6c:27:
b9:8e:99:da:c5:5d:e7:b5:9c:f6:ef:d6:c1:fa:bd:5d:1d:cf:
0c:64:c1:3f:68:46:61:a3:42:5d:68:53:46:d9:51:d1:eb:c1:
47:b6:a1:f6:3f:53:8d:7c:4a:fe:59:3a:b0:24:28:12:bc:9e:
d4:e4:41:55:68:6c:a8:fe:81:ae:f8:2f:fe:3d:3a:6a:92:3c:
20:7d:37:48:d1:8b:d3:a4:34:c0:c5:f8:6e:c9:b0:01:9d:cd:
42:5a:36:c4:d6:bc:aa:39:ff:f4:ec:d8:61:9f:2e:ac:eb:43:
7e:07:a3:f8:68:1a:74:16:4f:d5:99:e8:3b:09:cd:6a:10:33:
93:23:dc:f1:ca:c5:78:fc:d0:0d:ec:06:28:95:05:1c:db:6a:
1b:37:04:8d:d0:24:05:3b:db:91:6e:d6:44:b6:bf:8f:bb:b2:
fa:b7:28:18:d6:71:c2:e6:6d:ba:26:c7:23:2d:c6:ad:fe:3c:
73:85:51:8f:50:f5:8e:14:ec:2e:73:2d:68:8b:c1:14:fa:08:
51:af:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:44 2026 by rpki-client