Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: TFozB/NNBFg0mK0N9AbuBEnVJfBslnfRGuqKn4dpauw=
Subject key identifier: 18:03:4B:7F:1F:EF:48:29:6E:0F:34:92:11:F4:BF:04:D3:E8:9E:82
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 019E31BC0977530EE29381AAC720FE238FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 0309
Signing time: Sat 16 May 2026 17:01:07 +0000
Manifest this update: Sat 16 May 2026 17:01:07 +0000
Manifest next update: Sun 17 May 2026 17:01:07 +0000
Files and hashes: 1: HfBJ2Nut_YAQuWjhDmP8H2eMvJ8.roa (hash: qlvHpaLVzXcUtxyLFD8U+1k01vVLX6TwfsOJYC4Ocds=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: oXbKUu7zXsLgHDbvaNvtLOSgFAXimXR6Q88h6Q3QCAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:09:77:53:0e:e2:93:81:aa:c7:20:fe:23:8f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: May 16 17:01:07 2026 GMT
Not After : May 17 17:01:07 2026 GMT
Subject: CN=18034b7f1fef48296e0f349211f4bf04d3e89e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:76:e3:6b:8e:ed:d9:5f:f5:db:c3:76:32:
97:fe:7a:3c:e4:69:56:c0:97:6b:cc:3c:ad:75:6c:
4f:97:81:7c:0d:8f:cd:d1:1b:fa:a9:e7:9c:a8:74:
55:40:0e:e8:e4:32:08:85:79:4f:3d:b3:67:ab:21:
2e:7c:69:d1:67:22:45:46:2f:db:97:81:7b:53:ee:
20:15:bb:ef:3e:9b:2a:86:3f:0c:65:bc:26:85:7a:
f2:10:8b:06:3d:ea:d9:45:e6:d5:35:b5:d2:56:c2:
e4:73:58:e3:fe:06:b9:d7:0a:02:ed:47:51:eb:8e:
e5:5c:60:8e:96:87:6e:37:6e:54:21:0c:f1:0a:2d:
b0:e1:02:16:1f:2e:71:df:cc:51:8b:6b:43:ad:19:
7c:f4:c6:f3:4c:92:dc:2e:70:36:71:a7:93:0e:ca:
17:b5:93:33:e4:f0:fb:bb:05:19:34:44:bc:17:d7:
88:26:17:be:07:06:36:de:83:27:7d:d0:41:be:30:
6a:5c:55:d0:3e:2c:1b:2f:80:01:56:57:e2:3b:4e:
54:18:97:31:0a:79:39:3a:fa:d5:8f:e9:b5:cf:c7:
e2:59:8a:02:7c:4a:ab:c0:62:f3:37:0d:bb:5a:92:
97:0b:e7:2d:3a:d9:0b:b1:64:28:74:7f:cf:6d:db:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:03:4B:7F:1F:EF:48:29:6E:0F:34:92:11:F4:BF:04:D3:E8:9E:82
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:86:3b:22:41:9c:97:87:81:a1:ce:89:de:d7:50:06:6d:fd:
fe:1a:3a:c9:c4:30:49:4c:29:39:2d:f0:b9:ac:c2:c5:69:b1:
d9:3e:d6:5a:ed:56:ec:e2:1b:df:d2:b6:c1:d4:7f:c9:3b:cf:
ea:94:cd:81:32:0e:0c:68:75:fc:bf:25:79:ec:a3:d7:e7:c4:
88:1e:2a:42:bd:ec:4c:6f:42:72:66:7e:fa:ff:f3:8f:bd:9c:
4c:15:56:88:a2:80:be:18:e2:b2:a7:d8:d7:18:24:61:76:78:
62:f5:30:f6:16:12:85:c1:19:38:b6:ab:54:45:70:e0:00:ad:
0b:3b:f7:b8:8a:6b:7f:a3:9c:c2:5f:8a:fa:b8:24:ae:e1:c6:
92:dd:dd:05:4a:f9:8b:75:bc:36:2a:5d:4b:ea:ff:7d:4c:ea:
32:ea:2b:ab:dd:01:e7:bf:51:61:b3:c3:af:f5:d4:7d:12:c4:
f4:78:73:e8:ea:1d:07:94:58:c5:bd:5e:c4:08:b6:b9:1a:6b:
96:e7:17:d7:0b:6c:30:42:05:df:54:b3:d8:b0:3f:2a:5f:b6:
0e:cb:c4:d7:cc:b4:b2:27:3f:77:27:3b:88:8b:77:9e:03:18:
99:6f:73:60:9f:b1:12:ae:0e:14:f9:75:cb:fc:4a:24:ff:2f:
47:c0:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:12 2026 by rpki-client