Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
File: Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft (raw, json)
Hash identifier: 9z5RyqOOJb+KqTNOByGRIXNp5plYNf6T/B/9qIiHDoc=
Subject key identifier: 1C:7E:1E:83:76:1A:89:52:6B:5F:85:B4:24:E7:43:71:80:34:7F:40
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 01A086AF996DD2394A421B5E8E889CD0EAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
Manifest number: BF
Signing time: Wed 09 Sep 2026 15:00:50 +0000
Manifest this update: Wed 09 Sep 2026 15:00:50 +0000
Manifest next update: Thu 10 Sep 2026 15:00:50 +0000
Files and hashes: 1: 6LtQiSb78nDyjbmEiYfBW6K94lQ.roa (hash: J7MI4GNzgAtUYP9XKuJ4vcnnaKJ8K4FoSSPzAm0y+FY=)
2: 7HjQZcnyPGzTBbrXVDpIzGTxTAQ.roa (hash: evgW7hhbeIzJbe2wQVkcrOjUE5xE8nomQXZ1TrKMAc0=)
3: 8yzRL6UTfoY2UAWRhFfcY21aiw8.roa (hash: 9a1PcOeE8ZLKSk+KrqFMb26rK/NZVC1SSfxLpvqFg4A=)
4: PKOV_kT6uGHhTn2-6WDHVB3hpzY.roa (hash: FXsrCUeyVdza65q3avYmUJtFZh5GIUafzTy0U+HiLQE=)
5: TAhJXyuaU-go54rMGjVHPRVQsF8.roa (hash: T2ctTiMfso19o9sCdUv1gT123PCz7JSAkNRApoDkkn8=)
6: Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl (hash: jOWGFQek3dxwqM2RSaRrZsZ80O/ycT/G6rcWXKLVD40=)
7: cP1pRSbGF2VydLggt4WcH_Io63k.roa (hash: rej2g9WtxITjbtIMhQNau2HJc/7FPh2+SNTgiY69p1A=)
8: lciHL8Z1BSH4tJKSK6v4VIpHQQQ.roa (hash: n7tikthFcj7M5HJ14fYaGIRaUsjAfU/R0n+U8AFO1ms=)
9: pKcn8ZOkERD-XLZgPeULEQ2qPoY.roa (hash: TDT0jcowVii6rblfICInjysSX3+/qS6/908mLzL3IDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:af:99:6d:d2:39:4a:42:1b:5e:8e:88:9c:d0:ea:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Sep 9 15:00:50 2026 GMT
Not After : Sep 10 15:00:50 2026 GMT
Subject: CN=1c7e1e83761a89526b5f85b424e7437180347f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d7:87:b9:18:a4:63:1b:a9:4c:76:73:aa:95:
e3:48:d0:7d:89:53:b9:da:5e:1c:2d:69:2b:24:83:
85:31:42:e8:a9:db:7f:9c:7b:7f:b8:c9:10:7d:65:
0d:c2:b5:4c:2f:1c:91:0a:91:77:4e:3c:02:86:00:
e7:b5:8e:8f:9c:08:93:97:9c:ce:1e:f8:7c:5b:57:
70:b6:ae:05:36:cf:e2:82:d1:29:ff:9c:d0:c7:1d:
c6:c3:d7:35:65:0c:66:76:99:92:6f:eb:4b:22:36:
d2:b8:e7:9a:48:4d:a7:7c:22:85:a4:e2:34:38:8e:
12:0b:33:24:e6:88:c7:01:8e:36:6f:70:0b:e1:fa:
bd:60:81:2d:a0:d5:c9:88:4f:93:19:8e:12:4e:e6:
81:8e:9a:07:4a:24:9c:9b:f3:8d:ef:df:ea:15:80:
71:42:0e:98:08:08:8c:4d:00:a9:bb:4b:8d:f4:4a:
c9:7e:f4:04:49:28:cc:dd:93:4e:77:26:66:91:c8:
16:c1:bd:9c:c7:63:2d:58:e6:2b:07:7c:c3:31:df:
0b:cf:aa:b0:1d:08:db:85:c8:5d:e9:7b:91:7f:5c:
0b:57:26:35:b3:bf:6a:d2:8c:3e:be:4a:9a:7b:3e:
e8:53:91:c8:7e:8e:13:92:cf:5e:76:bd:19:7c:cc:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7E:1E:83:76:1A:89:52:6B:5F:85:B4:24:E7:43:71:80:34:7F:40
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:92:78:96:c4:c1:d9:5a:ca:9a:6c:5c:0f:e6:1d:30:14:b1:
62:d2:a0:8b:73:11:74:3d:59:ec:c2:d6:1d:75:61:63:29:c2:
35:3a:28:a7:02:71:5f:35:a3:f2:a8:ad:76:29:16:f9:e1:bd:
c8:98:73:59:ce:53:17:49:2e:60:3e:1d:53:ff:3a:52:05:32:
4c:95:ca:7d:c3:df:d2:af:fb:4b:3a:54:fe:42:ff:f2:b4:94:
82:f0:ca:5b:fe:d0:94:40:c9:f2:43:63:b1:cd:b4:1c:e6:df:
8e:a1:a9:55:5d:0e:1d:08:7d:bc:85:f1:7f:1e:f8:66:fb:c3:
d0:97:10:88:c8:8c:37:c3:0f:47:8e:8d:5c:a0:13:1b:5c:dd:
01:08:3f:cc:48:52:39:40:32:ab:b2:70:35:e1:2e:f0:d0:dd:
ce:57:72:27:3c:85:93:81:33:b2:4c:43:eb:9c:68:6e:2f:44:
51:e3:6e:08:f2:ec:3c:15:c9:9f:b2:d1:e0:e9:24:1d:70:8e:
55:2d:7d:bf:03:e3:1b:e5:ed:a6:d6:5e:30:74:0a:06:8d:d5:
e8:ae:85:2a:08:ae:c6:e6:52:6c:53:13:b0:30:5c:30:c2:90:
24:b4:50:ce:5c:ce:75:74:78:b4:8d:f0:ae:36:ed:e2:83:6a:
d3:2f:be:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 00:11:42 2026 by rpki-client