Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: Oh9p/R+ciKcRVbDzv98k0SmCNhjrz2qig8jG2JkRLxg=
Subject key identifier: 8A:59:C8:D2:0E:EF:40:B1:03:04:A2:25:2D:AD:A9:FC:7A:8D:A2:34
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 019D389C3CCF9B0C6951446EA404BDA14E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 0288
Signing time: Sun 29 Mar 2026 08:00:56 +0000
Manifest this update: Sun 29 Mar 2026 08:00:56 +0000
Manifest next update: Mon 30 Mar 2026 08:00:56 +0000
Files and hashes: 1: HfBJ2Nut_YAQuWjhDmP8H2eMvJ8.roa (hash: qlvHpaLVzXcUtxyLFD8U+1k01vVLX6TwfsOJYC4Ocds=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: DKXmLDvgx9d4cO8KkZj9jTWpXwKRE940724Bnqm5+4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3c:cf:9b:0c:69:51:44:6e:a4:04:bd:a1:4e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Mar 29 08:00:56 2026 GMT
Not After : Mar 30 08:00:56 2026 GMT
Subject: CN=8a59c8d20eef40b10304a2252dada9fc7a8da234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:4b:a2:e7:42:ae:2c:27:08:fc:43:84:3e:
11:fa:77:8a:4a:97:1c:a9:d1:5d:14:f8:18:6c:f9:
b8:c9:7d:ed:91:6e:46:44:72:63:07:d2:e9:64:8d:
4f:e1:99:22:e1:44:05:3f:0a:83:bf:0a:f5:01:90:
68:8e:8e:1e:57:46:9d:bf:3d:f9:52:70:f9:79:26:
7e:58:56:01:3f:73:39:dd:e1:9b:88:3a:7a:c8:4b:
79:75:43:56:b1:95:72:3b:94:70:9d:8b:1d:35:48:
11:99:64:e3:bc:fb:bb:a5:27:81:07:8e:27:da:e4:
3f:57:8f:5d:a3:b1:43:2a:e4:0b:11:f0:83:88:a6:
6f:f5:65:9a:e5:7d:1b:aa:35:75:5b:e9:52:f5:36:
2e:08:45:68:78:a0:2d:70:4a:ee:02:7e:82:da:f9:
4e:3f:14:c0:e2:3b:90:2c:bc:6e:68:2f:01:64:fd:
a5:84:8f:b9:2d:96:29:a1:46:4c:4f:6b:4d:71:08:
3e:63:ab:1e:36:b6:2c:75:c7:85:e5:94:88:20:5c:
54:71:d6:01:8f:e6:41:ce:41:eb:66:7a:70:5d:5e:
ea:c2:8b:f7:1f:e5:b3:87:90:2e:e2:7d:b5:b9:47:
74:d1:0d:d2:40:97:fc:bc:8b:75:c4:84:63:b8:e4:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:59:C8:D2:0E:EF:40:B1:03:04:A2:25:2D:AD:A9:FC:7A:8D:A2:34
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5f:79:06:d0:f0:94:68:22:48:c9:72:32:4f:73:e8:8a:27:
19:97:0f:ed:99:c3:da:5f:a9:31:4a:10:90:37:1b:52:d3:34:
d6:8a:d8:3b:0a:b5:d6:ea:9d:87:3a:04:49:26:19:45:87:2e:
ad:be:52:58:61:45:7e:82:54:fa:4f:5b:dc:26:a0:72:bd:c7:
37:9c:12:58:06:2a:b6:63:9c:07:5d:58:66:90:0a:0f:a3:0b:
08:8b:bf:c3:85:d6:ca:08:3e:82:fe:8d:5c:f2:ef:42:f3:4e:
34:90:92:5a:72:33:25:e4:e1:f5:4b:c0:b7:98:60:65:1f:1d:
96:4e:e7:95:ad:39:9b:df:88:33:7e:b7:3c:c7:59:3e:73:ab:
aa:96:9c:1f:4c:8c:f7:2e:29:1e:dd:c6:83:dc:3b:ff:04:0d:
fd:34:4e:64:a4:31:dc:ce:87:4a:72:59:93:fd:aa:82:68:4c:
0c:03:5f:57:55:24:45:d2:d6:bf:09:0a:1d:9b:20:ec:9c:ef:
61:b8:a1:10:0b:67:12:74:4f:a8:a2:41:7f:fb:80:19:1d:67:
0b:0f:e5:3b:eb:7e:d8:20:f3:22:0a:22:9c:d6:54:ad:f8:b2:
6d:b6:0c:b3:73:d5:dd:a4:39:a9:28:8a:68:1c:e3:9e:bd:85:
16:21:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:45 2026 by rpki-client