Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
File: Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft (raw, json)
Hash identifier: 9M8z6YHIKkIYGKZ61PajxGx1lFMVJ1V3y7sEHg1x5kk=
Subject key identifier: 31:AA:5A:BC:10:F5:05:8E:0D:A1:0F:C2:E3:62:86:10:FD:5C:80:7E
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 01A181BE783866F1F2A93D97196D246EE500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:01:45 +0000
Manifest this update: Wed 28 Oct 2026 09:01:45 +0000
Manifest next update: Thu 29 Oct 2026 09:01:45 +0000
Files and hashes: 1: 6LtQiSb78nDyjbmEiYfBW6K94lQ.roa (hash: J7MI4GNzgAtUYP9XKuJ4vcnnaKJ8K4FoSSPzAm0y+FY=)
2: 7HjQZcnyPGzTBbrXVDpIzGTxTAQ.roa (hash: evgW7hhbeIzJbe2wQVkcrOjUE5xE8nomQXZ1TrKMAc0=)
3: 8yzRL6UTfoY2UAWRhFfcY21aiw8.roa (hash: 9a1PcOeE8ZLKSk+KrqFMb26rK/NZVC1SSfxLpvqFg4A=)
4: PKOV_kT6uGHhTn2-6WDHVB3hpzY.roa (hash: FXsrCUeyVdza65q3avYmUJtFZh5GIUafzTy0U+HiLQE=)
5: TAhJXyuaU-go54rMGjVHPRVQsF8.roa (hash: T2ctTiMfso19o9sCdUv1gT123PCz7JSAkNRApoDkkn8=)
6: Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl (hash: 45zT4/nTTBLqlc+sZWz+Xss26YMs9zwq1E/oUF8/edA=)
7: cP1pRSbGF2VydLggt4WcH_Io63k.roa (hash: rej2g9WtxITjbtIMhQNau2HJc/7FPh2+SNTgiY69p1A=)
8: lciHL8Z1BSH4tJKSK6v4VIpHQQQ.roa (hash: n7tikthFcj7M5HJ14fYaGIRaUsjAfU/R0n+U8AFO1ms=)
9: pKcn8ZOkERD-XLZgPeULEQ2qPoY.roa (hash: TDT0jcowVii6rblfICInjysSX3+/qS6/908mLzL3IDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:78:38:66:f1:f2:a9:3d:97:19:6d:24:6e:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Oct 28 09:01:45 2026 GMT
Not After : Oct 29 09:01:45 2026 GMT
Subject: CN=31aa5abc10f5058e0da10fc2e3628610fd5c807e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:6d:5f:92:e7:70:d9:e4:cf:df:34:f0:83:
58:c6:d4:3a:09:73:22:c2:a9:19:df:40:53:84:db:
34:77:6d:fc:8b:57:09:61:4c:69:1d:9c:ab:f6:98:
ca:9b:8a:bc:39:36:cf:15:d3:e9:11:df:ae:e0:19:
6b:a6:11:c8:96:a9:63:7e:62:7b:e2:7c:f3:68:45:
7f:96:6f:46:15:09:c8:b7:71:7c:0d:63:f2:9f:3e:
b6:d0:d7:d0:7d:84:87:37:3f:ea:64:5e:9e:ac:4a:
49:fd:f7:c9:6e:83:56:a0:25:bb:2c:91:f0:39:e9:
c4:1b:3b:63:4e:8a:e1:24:bc:dd:9d:e8:74:48:a3:
9b:60:54:5a:f2:15:84:c1:48:de:21:fa:d9:28:8b:
5d:db:dd:08:2c:47:25:dd:cc:45:d8:c4:e8:61:ce:
aa:89:4c:8a:1a:14:2f:b1:01:c0:b6:77:71:ab:6f:
d0:a6:07:88:23:36:e5:a6:16:5d:6f:1b:8d:11:99:
88:3c:d5:30:55:bd:91:0b:c7:83:f0:f3:2a:3a:f0:
36:e2:2b:db:5f:75:21:19:b2:4a:05:2e:af:af:31:
04:5b:53:d1:67:78:cc:fb:c7:a1:0e:cc:ba:f4:19:
96:53:0c:43:37:94:28:83:d5:6f:79:57:8c:15:3d:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AA:5A:BC:10:F5:05:8E:0D:A1:0F:C2:E3:62:86:10:FD:5C:80:7E
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:45:71:f4:64:2f:d0:10:4a:e1:a1:c1:f6:43:4b:07:28:52:
98:5d:b6:35:c4:3d:0f:96:cd:d3:1c:5c:56:8a:3f:8f:7e:92:
ce:22:a3:b9:3c:13:95:33:ec:26:01:43:2d:db:ca:ab:ed:19:
13:44:fa:1d:9e:6d:ff:b3:8c:7b:71:54:17:e8:04:73:fd:70:
3f:35:b4:61:20:a5:d2:22:ca:6e:4d:2f:b3:7a:ee:f0:81:32:
77:ad:12:6a:92:5c:de:77:74:4c:04:19:5e:a8:31:6e:f0:c9:
7a:b8:a3:7b:76:c7:aa:49:02:a2:de:e5:c6:2e:ed:1b:d7:c8:
81:e1:7b:a8:f7:83:a4:2c:4c:d0:b9:5a:6f:d3:60:0a:d1:31:
c8:5d:bd:ab:2b:39:3a:d5:6a:d5:52:7d:85:52:d5:e9:ed:ae:
8e:3e:32:c3:2c:ad:1e:c9:23:9d:71:f3:8b:2a:d8:72:3a:39:
78:7b:d7:73:65:ce:ef:d7:48:63:1f:4b:e8:60:2b:7e:a0:b5:
00:0f:b4:61:14:95:5d:e1:47:f8:a1:63:fc:ff:62:72:14:4f:
4d:5b:ac:3c:ee:5a:b5:33:19:ae:fc:bc:f2:8e:a1:b0:c1:a4:
fd:39:a2:fd:8d:e4:45:07:24:80:3a:4a:be:f8:69:8a:3c:9b:
52:dc:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:08:23 2026 by rpki-client