Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
File: z9tEWe8iRa2EkR7v4IdafZM1xdg.mft (raw, json)
Hash identifier: OpGIFAejtR9kFDaXSJyKFheQVlmY9CosClBoWeVoXL0=
Subject key identifier: F5:C1:AD:41:E6:22:B5:8B:4D:A3:B6:A5:65:7B:B8:EA:55:CB:5F:6A
Authority key identifier: CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8
Certificate issuer: /CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
Certificate serial: 01A10248A553BA46D2AACC6EC8DA80081AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
Manifest number: FF
Signing time: Sat 03 Oct 2026 15:01:17 +0000
Manifest this update: Sat 03 Oct 2026 15:01:17 +0000
Manifest next update: Sun 04 Oct 2026 15:01:17 +0000
Files and hashes: 1: 5Ne0J2AnsBb3KqrsSaZmYRS_sJ8.asa (hash: tSOxg/159dhYNU00jXQeCM0SgZ81uaakuIVv4gHhNvQ=)
2: z9tEWe8iRa2EkR7v4IdafZM1xdg.crl (hash: df9Kgh5emjzA+3svDAlD56HmUy60R05Me8DdAPU71tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:a5:53:ba:46:d2:aa:cc:6e:c8:da:80:08:1a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
Validity
Not Before: Oct 3 15:01:17 2026 GMT
Not After : Oct 4 15:01:17 2026 GMT
Subject: CN=f5c1ad41e622b58b4da3b6a5657bb8ea55cb5f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:22:81:c5:bb:1e:34:c3:c4:23:dd:9c:ec:
42:75:60:5e:67:cd:27:f7:a0:e6:a7:85:11:87:02:
01:6e:f0:2f:02:cf:e2:20:c8:a0:36:f0:47:61:87:
61:ff:61:1c:a3:c9:13:e3:94:e4:3d:d5:26:0a:d0:
20:50:8e:e8:de:91:67:1b:07:89:9c:09:cb:12:fa:
89:41:0e:81:5b:53:de:85:b9:68:d1:c9:d2:8f:7a:
53:96:cf:09:48:d5:f8:37:81:d3:f2:aa:a2:cd:7b:
40:05:1f:10:32:2f:e8:6e:9e:3e:6e:5f:40:98:b0:
dd:64:b9:dd:b2:11:4f:02:51:6f:8b:ee:2a:ee:21:
90:4f:3d:88:fd:b2:cb:52:77:73:89:c6:a2:9d:96:
c7:d3:33:14:04:d4:c4:53:c3:7a:77:f3:8e:ca:ef:
8b:3b:00:90:2c:34:b6:60:4d:30:a8:46:f1:f1:8c:
d5:73:52:90:2b:c3:01:46:0c:33:6d:2a:a7:c2:21:
08:2f:2d:d3:78:a9:68:92:fa:87:a2:cb:11:31:a0:
76:94:e9:58:a8:9d:31:12:79:bb:5a:13:2f:b8:f8:
b6:17:6f:5f:3b:1c:ae:6f:94:46:c8:43:53:2a:ad:
c6:41:23:d9:ed:70:43:b2:b5:8e:48:db:59:e5:03:
5c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C1:AD:41:E6:22:B5:8B:4D:A3:B6:A5:65:7B:B8:EA:55:CB:5F:6A
X509v3 Authority Key Identifier:
keyid:CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:93:71:00:da:8e:c7:63:ba:16:f0:d7:57:96:e2:b7:9c:90:
22:dd:51:ee:f5:7a:a7:0d:b3:e0:db:ed:bb:80:70:87:33:75:
f7:1c:41:a0:28:16:b1:db:90:ef:f4:a1:02:3a:67:85:32:c0:
91:57:40:3d:0d:7f:3a:a7:33:86:95:30:28:10:d7:a7:2e:41:
1b:95:bc:96:bc:37:3b:c7:b0:d0:ad:25:bd:02:d6:2f:ff:bb:
75:7c:2f:80:5b:7e:43:28:ce:9d:06:a8:de:b8:78:c5:50:57:
29:a7:8e:3b:d5:e4:da:90:3e:2e:f1:cf:4a:89:3f:d7:f5:4c:
17:f3:0c:ff:34:80:c6:a1:7a:c1:b2:24:cf:91:bc:5d:25:e8:
72:35:98:6f:df:bb:68:6a:a7:e0:5e:ca:e4:2d:92:1c:34:42:
02:6f:8e:62:93:77:3a:f3:ad:73:d5:73:50:93:9e:e2:22:0c:
c9:0a:6a:31:79:d7:ca:76:66:70:84:f3:c8:38:4f:82:be:a1:
d3:ce:e1:16:d9:c0:0b:4a:a8:64:6a:44:cf:fe:35:65:c9:42:
ce:58:2f:a9:2f:a6:69:a4:c0:64:b0:34:43:ae:f9:61:55:e8:
ed:d5:7b:a1:6e:0c:6b:82:d0:47:10:07:5c:d0:65:95:37:45:
71:f6:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:50:54 2026 by rpki-client