Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: fmM/K8XIPcEYCi1JCBSr//vvhcdKQ3NvLGj2jtUV/J4=
Subject key identifier: CE:8E:D5:A1:44:2A:99:83:EA:35:29:2B:4D:57:AF:A1:0A:41:7B:C5
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 019F111C7A0C9836776DCE7F987EC0F62FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 05EB
Signing time: Mon 29 Jun 2026 02:01:46 +0000
Manifest this update: Mon 29 Jun 2026 02:01:46 +0000
Manifest next update: Tue 30 Jun 2026 02:01:46 +0000
Files and hashes: 1: 18mBvWMTzIGjuf0KvgUDpqaEgck.roa (hash: GFEk4/+4DhuQ+HzNstdRPkKFI3j7dtiSLG7Lkc2nCys=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: dmMF/FjpAecweQLSSphlk/xU+hwqu8jU7O1gwcbHLQQ=)
3: zsYYk54DnHl7eLevLUFDMgKz4P8.asa (hash: 6luWGIPO7hhqIfw0IR/ULYO//RhcC5nGHlt4UBWyulU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:7a:0c:98:36:77:6d:ce:7f:98:7e:c0:f6:2f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Jun 29 02:01:46 2026 GMT
Not After : Jun 30 02:01:46 2026 GMT
Subject: CN=ce8ed5a1442a9983ea35292b4d57afa10a417bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:a4:cf:b9:d7:5e:ce:ba:4d:dc:62:5a:69:
88:f1:71:8e:35:1d:54:42:50:1e:39:73:14:a7:53:
44:a3:83:1e:1d:29:8f:d0:7a:05:d3:11:63:0b:fe:
cb:5e:14:f0:99:e1:9d:2d:73:cf:d9:1e:17:92:4e:
68:61:9f:77:3c:17:6e:a0:f5:96:8b:f3:5e:ea:8b:
38:bf:5d:91:b0:20:b8:33:a9:26:3f:38:77:f0:5e:
29:d1:79:ff:ab:03:47:0f:d1:b3:6d:09:3b:c5:73:
6a:63:90:db:95:06:20:54:51:1e:11:51:2c:90:4b:
99:08:05:ee:73:a5:52:ef:e3:92:b8:00:5d:6f:f9:
0e:29:a6:b3:9f:f4:02:75:61:39:28:45:67:40:31:
b6:52:ad:d1:81:6f:e0:49:1d:73:7b:0e:f0:95:a8:
7d:ad:8d:00:e5:d2:ae:9a:dc:fd:bd:ce:42:50:ef:
64:2d:61:6e:7b:c9:f4:e7:a6:cb:0e:b3:56:8b:b9:
6f:b4:11:a6:a5:8d:b9:39:5e:ae:c5:8e:a2:a9:f6:
e5:c5:91:d7:34:b6:e0:bb:4c:25:13:38:3a:f3:e2:
02:56:07:2e:1b:2b:cc:48:ae:e8:aa:bf:34:18:b7:
0d:eb:54:92:8e:67:5c:f5:16:af:97:77:30:eb:ba:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8E:D5:A1:44:2A:99:83:EA:35:29:2B:4D:57:AF:A1:0A:41:7B:C5
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9c:34:1a:2c:f4:10:de:54:58:d6:29:ed:51:fa:f1:45:17:
98:70:94:d8:62:f0:ee:b1:20:f9:6b:45:63:e4:6c:c1:47:13:
35:f4:16:53:e4:fd:27:8e:93:98:75:04:8a:ab:0e:60:55:0d:
76:3a:1a:a9:d9:9b:35:56:42:d1:45:c4:90:95:97:ff:d0:f0:
19:fb:b5:ee:07:87:34:ff:5e:15:21:38:d2:4a:44:ed:da:57:
34:9a:09:7b:7b:af:11:77:96:1e:bf:ce:b2:45:77:6d:22:1f:
85:5e:f2:d0:36:65:9d:fd:29:b4:68:07:83:8b:fa:6d:2f:85:
45:68:24:94:ef:ef:10:4a:a4:16:87:32:ec:a5:b2:1f:cd:70:
c1:9e:cb:58:a9:8d:40:d0:a6:7e:9b:a6:fc:dc:72:6c:51:08:
44:56:38:d2:7e:f7:c9:4c:e9:99:a1:b8:ac:ce:9a:7c:30:c6:
66:92:55:22:c5:f2:11:01:74:31:82:ac:41:5a:ae:10:cb:1d:
54:0e:b1:76:d0:51:01:fc:1a:7f:21:f8:2a:c2:f0:57:ab:f7:
03:e6:79:56:2a:fc:70:bd:d8:5f:9b:6d:e7:7f:39:41:5c:0d:
4f:88:13:a3:9e:0f:74:e4:62:bc:4f:99:ba:e2:bd:e7:1d:69:
fe:2a:5a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:02 2026 by rpki-client