Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: Bi8DLq5WUhQkkFx4cAEAQ7qkB4u83TDn3eIfqDmtfkY=
Subject key identifier: DD:01:6A:74:C4:04:A0:DE:22:E6:9C:8C:2C:32:07:33:FB:22:07:E5
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 019D382E6F8E2F52A6C1EF9D8707CF7A7E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 09BC
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: YwHwj8nGu01b4DGoJo7OQzmm9y0.roa (hash: GeDg67muROb7D4h2X9co29gZ5d0QPL0hSd4Vfj1zmeY=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: NMks7h30UehjeoepMLzTwPe88ZiUYZ0IJZ/L5u+x+AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6f:8e:2f:52:a6:c1:ef:9d:87:07:cf:7a:7e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=dd016a74c404a0de22e69c8c2c320733fb2207e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:8a:d5:e8:02:fa:17:6c:a2:97:2d:7b:aa:
8a:6d:67:97:e9:26:d7:7d:dc:26:61:a3:26:fb:2b:
bc:27:e1:a5:56:52:f6:18:eb:db:63:1b:ca:fc:13:
0f:d3:40:35:7d:ae:66:3c:74:c1:b0:a8:62:05:87:
12:ca:ef:f5:d9:45:0c:d1:d3:f4:e8:53:35:6e:6b:
62:ca:c5:33:49:ef:2a:c5:76:c2:22:4d:04:29:e6:
15:85:ca:c8:0d:94:bf:77:be:00:27:64:b8:70:d0:
ce:ee:66:9a:03:71:93:1c:7d:49:0d:e4:9c:0a:25:
a3:10:17:9c:a1:31:ff:2e:6b:00:b3:2d:81:e4:8b:
77:ff:4f:9e:06:ba:0a:52:77:e1:b3:89:9c:ad:6d:
f7:a8:54:72:62:c5:06:06:83:25:a9:d9:50:fc:04:
fa:51:08:4c:02:d9:3a:75:a8:cc:01:73:90:15:8b:
11:14:2f:75:06:68:d9:96:7d:f8:13:90:83:d6:d9:
5f:ed:9b:be:6a:ca:c3:7c:20:2d:57:af:7c:e3:a9:
46:83:9a:67:5d:9d:f2:70:4b:09:20:f5:c8:f6:4d:
a7:52:da:d4:d4:8d:36:00:7b:c4:4c:09:1e:bb:6f:
0b:41:44:9e:ae:52:ab:ec:8b:0d:c9:3e:13:8b:f0:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:01:6A:74:C4:04:A0:DE:22:E6:9C:8C:2C:32:07:33:FB:22:07:E5
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:38:20:bf:de:23:ad:a1:f1:20:80:80:c5:c9:57:d3:89:b8:
61:78:79:08:43:ac:42:89:95:d2:14:13:74:21:67:08:5e:b8:
08:e0:b2:f7:a8:60:9f:f0:c5:4a:33:60:3f:ba:8d:e3:de:36:
1f:90:61:5c:d6:9f:f4:a5:07:8f:50:40:a1:56:e1:04:e5:1d:
69:12:5e:62:34:4a:1f:a2:c1:87:25:e0:f8:9f:5a:a5:be:e8:
69:58:60:33:a2:6b:e2:51:55:9d:86:58:aa:97:75:61:ad:5d:
c9:a4:a8:7f:fc:ea:97:5e:8f:8b:fa:69:b1:7d:90:22:42:98:
fa:07:13:d3:a6:f6:2e:e9:ae:e2:65:3a:da:3e:1b:ba:1a:5d:
1f:bf:4e:73:6d:f8:af:c4:86:6e:36:08:53:d2:ef:6f:3d:c5:
d8:e2:b4:61:90:e3:3c:c3:0b:02:32:26:b5:70:fa:ee:4e:68:
3b:54:bd:89:a9:11:2c:db:7c:67:b6:e7:02:54:ca:7d:ef:e9:
54:25:66:d3:de:e9:e4:dd:6c:26:b3:70:2c:6d:8f:ac:1a:69:
20:46:57:fe:39:b3:93:50:5b:2b:b3:55:97:e4:eb:a2:68:87:
b3:f6:68:ba:e4:17:2e:22:bb:5a:e5:81:ce:55:a0:ce:ed:4f:
1f:b1:51:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:35 2026 by rpki-client