Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: JLpa1JpB2RgZ3osdRJRM5oB1Wd1c7Y/5ufszoAt93LQ=
Subject key identifier: C3:19:64:B9:9F:4A:82:AD:44:CF:4C:F7:22:DA:B4:78:2A:28:BE:C5
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 019A73A603F8618003F0C8BA0AA9229C24F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 0386
Signing time: Tue 11 Nov 2025 16:00:51 +0000
Manifest this update: Tue 11 Nov 2025 16:00:51 +0000
Manifest next update: Wed 12 Nov 2025 16:00:51 +0000
Files and hashes: 1: ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa (hash: 3JrfUgNRXXI9DKBiBLG/+I75NBSeTwYH7idBMj+gRRQ=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: mMC+E9G2FS3wNFSpEuveVuRMBhhLtV0cwhmP5kLMvpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:03:f8:61:80:03:f0:c8:ba:0a:a9:22:9c:24:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Nov 11 16:00:51 2025 GMT
Not After : Nov 12 16:00:51 2025 GMT
Subject: CN=c31964b99f4a82ad44cf4cf722dab4782a28bec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:3c:e2:bb:d4:18:76:86:20:a9:f5:2b:61:
f9:25:fb:bf:26:d8:a9:96:ed:18:e3:6f:94:6b:f2:
40:46:fd:66:ef:66:7c:bd:a0:b8:2e:88:9e:86:99:
9f:19:a2:f0:f7:fe:05:62:d6:5a:10:bd:ec:a8:27:
45:3d:e9:a6:59:e6:e2:52:71:ea:c4:1a:80:09:62:
bb:69:30:07:18:f9:b7:ae:e8:20:df:5f:1b:18:99:
91:3e:29:7c:51:97:74:ec:98:e7:59:55:51:73:8a:
d0:89:74:84:9a:35:7a:37:c7:fa:d9:83:af:b1:4b:
a7:ac:12:0b:5c:fe:7e:d0:7d:31:0f:6c:bd:ae:94:
7d:d5:19:bb:46:0c:20:f2:18:d8:9f:73:1d:6c:2d:
a6:af:d1:73:33:14:21:83:03:a6:d4:48:15:ea:11:
63:08:0d:36:19:d8:03:76:0c:d4:07:67:3c:05:62:
b8:1c:d2:85:d7:47:dc:a5:33:bf:a2:53:76:c2:54:
da:2c:66:3a:da:e4:03:90:ed:75:e2:d0:32:2b:b5:
74:c3:9c:99:80:49:f4:e2:a8:7a:ab:89:00:06:53:
d3:86:98:93:f8:ab:df:62:35:1c:49:8c:69:25:07:
70:eb:17:2a:f2:78:66:43:ef:ff:b9:b5:45:03:72:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:19:64:B9:9F:4A:82:AD:44:CF:4C:F7:22:DA:B4:78:2A:28:BE:C5
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d8:2c:23:18:33:3b:45:bf:d6:e4:35:44:58:99:52:3f:ba:
5d:f6:93:8f:7b:5a:82:44:be:3a:e7:fa:51:9d:55:30:2d:08:
25:61:65:46:c7:12:26:48:81:0f:23:cf:1a:f8:51:7b:93:a1:
ca:36:ea:a1:d9:67:5a:8c:e4:42:38:46:10:a3:78:e0:bf:a0:
0b:55:1e:03:d8:60:80:3a:9e:4c:26:cc:72:13:18:a7:e0:36:
81:2f:23:79:d9:ed:eb:ab:88:b1:7d:49:b3:1a:e5:6c:54:19:
0f:8c:f7:e9:e7:08:73:f7:37:b5:e4:24:af:81:06:c7:d6:8d:
1d:71:8f:50:c5:d8:cf:8e:ac:25:7e:b4:6f:2a:7e:74:f8:c5:
1d:ea:94:8c:ea:06:de:82:e7:87:28:56:cb:5c:54:89:03:51:
e2:5a:7a:5a:da:04:7b:8a:21:61:61:90:42:3f:82:16:3c:f0:
a0:1b:e4:21:bf:30:ce:c0:3b:85:cf:d3:0f:92:fa:ce:cc:a8:
9d:8e:8b:d2:d5:b3:cf:eb:84:bf:39:9d:77:d2:ec:9c:b5:c2:
45:8d:85:6c:c1:60:30:e3:d1:52:8f:24:f2:1a:55:7d:6a:09:
be:87:8f:cb:c7:dc:91:76:57:eb:a0:d7:5b:f4:9f:64:68:89:
c5:34:76:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:19 2025 by rpki-client