Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier: zP3ZJEIlEK2/jHJKensHRiC2tW45O+CUrbeLhuAyoCQ=
Subject key identifier: 78:94:6A:33:BD:27:C8:04:40:C0:3E:02:07:AB:67:0F:A8:C5:19:24
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial: 019DCFE31AB8747EAABDD62B927E65ACE5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number: 17EE
Signing time: Mon 27 Apr 2026 17:01:00 +0000
Manifest this update: Mon 27 Apr 2026 17:01:00 +0000
Manifest next update: Tue 28 Apr 2026 17:01:00 +0000
Files and hashes: 1: 11UHbWWyzf12DKqEVtlPbvmvLDo.roa (hash: Dg6T6ROSIHh46iUOhkgkZyjyj5P7h4/p+TTyu04jv1k=)
2: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: hmLgSl9rAXpPpedzlm0ZJY1tfiUjwz4BEqcHJiqpP8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:1a:b8:74:7e:aa:bd:d6:2b:92:7e:65:ac:e5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Validity
Not Before: Apr 27 17:01:00 2026 GMT
Not After : Apr 28 17:01:00 2026 GMT
Subject: CN=78946a33bd27c80440c03e0207ab670fa8c51924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ff:c8:81:26:5a:35:6e:22:03:6b:4b:27:ae:
a5:12:f8:fc:6e:06:4f:c4:87:9d:aa:75:73:e8:f2:
87:02:fa:3c:f7:f1:0c:55:b1:98:69:8f:3a:bc:f6:
18:1c:73:c6:1f:1a:aa:69:6a:b0:e1:67:e4:4f:e3:
2e:43:d2:22:e7:ca:37:9d:fd:4e:77:45:df:d1:71:
de:9c:e8:4e:7b:57:7e:0e:6b:06:48:ce:4f:d8:8a:
e1:dc:b8:a4:11:9e:e1:a2:4d:5b:b4:eb:1a:45:8b:
4b:6c:e9:f9:35:62:ea:c4:ba:c3:28:0e:87:b1:dd:
44:b6:01:f1:4f:c5:ba:ae:c1:c0:49:6c:eb:b2:68:
95:a8:96:ec:f2:6a:55:93:1d:93:52:9b:af:3b:3b:
95:60:1d:52:db:61:32:37:8b:ab:ff:b4:2d:b4:a1:
37:40:18:68:09:d3:cb:de:aa:e2:a3:bb:27:26:08:
c0:25:64:88:98:77:93:a3:89:35:91:31:44:5a:82:
7a:1d:e1:fc:0a:98:d4:c1:bc:7f:ec:72:d7:0b:e5:
fa:95:2a:7b:b9:66:f8:b8:29:b0:8f:98:c0:9b:94:
9d:9e:54:62:8a:da:62:3f:0f:3a:88:1b:09:c9:d0:
c4:86:64:ec:03:3d:11:71:2c:7c:28:4b:25:9b:6f:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:94:6A:33:BD:27:C8:04:40:C0:3E:02:07:AB:67:0F:A8:C5:19:24
X509v3 Authority Key Identifier:
keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:7d:12:3b:e9:61:2f:ca:74:90:2d:e1:b1:1b:72:a2:60:98:
eb:d5:f0:c8:52:1b:fb:fc:77:44:df:58:f3:e4:5a:d2:9d:ef:
1d:ff:9f:1f:ba:35:71:e2:bc:cb:dc:24:f0:e8:e0:dc:6a:7c:
d8:94:1f:c1:ef:ca:f4:61:06:02:90:27:bb:d7:d7:48:ec:94:
b3:3e:10:69:7c:6f:98:8d:ca:4e:59:fc:4b:0a:ba:ff:6c:ce:
1b:2f:97:a2:c9:59:5f:a6:0a:34:e3:05:f2:ac:52:24:d8:07:
a9:84:fb:67:b6:2f:c5:25:ab:77:ed:ae:32:79:07:28:39:ad:
0f:03:b5:17:18:a0:81:31:a5:a9:a3:67:cb:04:a6:36:99:f6:
37:63:ee:8f:f9:3b:fd:1f:2b:d8:10:68:b3:04:b1:e9:36:51:
27:f0:32:82:95:cf:d1:9c:19:92:02:9c:ea:94:bd:1a:88:75:
36:6a:80:82:b9:2b:58:8b:e0:7e:10:ae:b4:ac:1b:dd:12:cb:
dd:79:e6:e6:28:44:0d:1a:5a:ba:70:c9:e9:2d:96:1b:1e:44:
7d:99:67:bb:7d:be:6d:18:e3:1b:ae:81:90:4e:1c:2d:b3:85:
39:26:4e:d0:a1:a9:93:9d:af:6c:72:38:36:a6:2f:01:69:6f:
a4:51:4c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:33 2026 by rpki-client