Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier: 3o8MsCH7rTi+GlloZh5CX5kcaD2uxXB9/gczIO26dyE=
Subject key identifier: FE:B6:C3:76:2D:63:CF:ED:EE:E1:7B:67:86:BD:66:7F:39:D6:4D:C6
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial: 019FA14DCF9EDAF10B8ED8E5DBD67E87D00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number: 18DF
Signing time: Mon 27 Jul 2026 02:00:58 +0000
Manifest this update: Mon 27 Jul 2026 02:00:58 +0000
Manifest next update: Tue 28 Jul 2026 02:00:58 +0000
Files and hashes: 1: 11UHbWWyzf12DKqEVtlPbvmvLDo.roa (hash: Dg6T6ROSIHh46iUOhkgkZyjyj5P7h4/p+TTyu04jv1k=)
2: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: bumhxxhdtB8uz1jaHM37ETNC04HDsUr+x9LRigBGwWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:cf:9e:da:f1:0b:8e:d8:e5:db:d6:7e:87:d0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Validity
Not Before: Jul 27 02:00:58 2026 GMT
Not After : Jul 28 02:00:58 2026 GMT
Subject: CN=feb6c3762d63cfedeee17b6786bd667f39d64dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:8d:cb:b8:cc:03:3c:c7:74:52:74:fe:3d:
e6:a0:e4:22:32:c3:ac:9a:dd:f8:e0:43:48:55:7e:
c2:9b:63:0f:3c:be:55:22:39:34:e2:94:7d:d5:16:
ac:c3:3a:87:bc:4d:a8:c6:49:f5:d2:4e:64:88:99:
f7:0e:e6:83:82:e2:39:ee:0e:ad:47:44:0f:78:80:
b6:e3:c7:a5:f9:25:a4:2d:89:48:84:22:68:48:24:
27:c6:28:83:5e:b4:81:4f:c1:e2:31:e8:65:29:be:
6a:3f:75:49:07:f5:f8:08:14:5b:0f:ad:ad:e9:17:
e8:c3:6e:27:ba:6d:a8:3c:d9:1e:1a:e5:cc:b9:5a:
0d:12:7a:4d:57:92:07:56:38:a0:18:8b:ed:84:5b:
23:de:8e:2f:2d:c2:dc:4a:8e:20:1f:b0:b3:86:d5:
23:03:b9:14:6e:75:ac:b4:07:14:15:80:20:9f:f8:
23:4c:ee:08:0c:38:f2:d2:25:e8:fe:1d:c1:05:42:
ef:26:3e:ec:f9:46:36:d1:67:29:3e:8f:86:52:19:
0b:59:a9:7e:7e:af:80:ad:9d:64:e7:e6:fb:2a:76:
f3:68:8d:de:a9:4e:7d:1b:a7:52:38:9e:d1:13:6a:
2d:70:48:b2:79:4f:38:f8:f8:c1:d5:5d:5d:e5:1a:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B6:C3:76:2D:63:CF:ED:EE:E1:7B:67:86:BD:66:7F:39:D6:4D:C6
X509v3 Authority Key Identifier:
keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:87:51:15:31:8c:6a:66:ba:c2:44:0d:75:fa:1a:b2:09:6a:
47:ae:29:73:07:f1:2a:3f:b8:0d:2a:d0:0a:b6:1c:1f:4c:c7:
c2:03:9e:9f:ee:4a:28:b9:ef:03:11:0b:47:43:53:29:3e:d1:
bd:e0:03:01:30:38:43:f1:19:1b:ff:d0:29:e6:0c:b5:ae:1f:
de:e2:f1:dc:fc:82:bd:36:17:24:37:79:db:a9:4a:d9:c2:2a:
7a:85:25:4f:30:a7:39:28:03:00:6b:14:5a:27:5b:e2:5f:f1:
45:a6:e7:b9:33:f1:99:e1:65:9f:05:52:ba:2a:d2:57:dc:b1:
8d:55:c8:ec:3e:74:68:c1:c1:4c:b3:bb:f4:47:59:c8:69:be:
77:2b:7c:50:ac:99:dd:cc:63:74:03:53:86:92:59:e1:65:b5:
2b:28:58:56:ec:40:87:09:e2:b8:1e:ce:8f:61:98:ec:ce:af:
d5:e0:b8:2c:24:54:3b:43:24:2f:94:dd:ab:a8:18:bc:48:ca:
84:e4:a2:fd:c0:14:9b:83:fb:65:2a:f5:f2:f2:ee:e4:14:9e:
72:db:bf:c3:35:8f:76:12:3e:e5:3f:1f:7f:b5:c4:7f:b4:33:
c8:cf:3a:0a:94:31:19:03:d1:c6:cc:8f:93:6d:c0:89:aa:43:
2a:d7:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:28:49 2026 by rpki-client