Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: mPxIUMYOWMNDdF6G3+8KRMbfrPjmwJba3Kk7cO6NccI=
Subject key identifier: BF:54:26:EB:06:F3:D2:4C:1B:8B:19:0F:79:B4:32:33:ED:67:BF:77
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 01A1040053B595DCE78D7F066B564FA4567E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 047F
Signing time: Sat 03 Oct 2026 23:01:32 +0000
Manifest this update: Sat 03 Oct 2026 23:01:32 +0000
Manifest next update: Sun 04 Oct 2026 23:01:32 +0000
Files and hashes: 1: HfBJ2Nut_YAQuWjhDmP8H2eMvJ8.roa (hash: qlvHpaLVzXcUtxyLFD8U+1k01vVLX6TwfsOJYC4Ocds=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: nlcaWJG1nvY0PwjnEksnMzBD6BY0YGiJrUKq6xhXNVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:00:53:b5:95:dc:e7:8d:7f:06:6b:56:4f:a4:56:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Oct 3 23:01:32 2026 GMT
Not After : Oct 4 23:01:32 2026 GMT
Subject: CN=bf5426eb06f3d24c1b8b190f79b43233ed67bf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:a9:78:e8:56:19:23:75:40:c1:0e:2e:a6:
a8:d6:bd:d9:22:00:cf:8e:90:26:e6:83:b7:6e:88:
01:2f:34:95:78:14:39:b5:a0:b2:a7:bc:d9:5e:bb:
52:09:c8:8f:92:3b:e9:7d:50:8c:76:30:30:a9:61:
f7:12:1c:70:e0:c8:fe:f0:b5:eb:8d:f0:cc:a8:54:
20:84:67:90:94:f8:58:21:98:5a:2a:c9:46:16:e2:
e6:05:7a:c9:3e:03:2a:33:9b:c6:9a:65:2d:33:82:
e9:1b:e0:f2:7a:63:11:0e:b6:eb:5f:3e:0d:e2:5d:
ca:9c:1a:fa:fd:7e:e9:6d:e0:02:22:64:f6:34:64:
10:df:1d:56:08:2b:cb:5e:08:21:0f:64:81:e1:ea:
77:e1:75:c5:a7:e9:4a:c4:bb:b0:e9:2b:76:1f:d8:
1f:92:a0:39:0c:e1:8c:4f:96:a3:07:96:de:4a:e1:
26:e0:05:2c:b3:a1:94:39:af:bf:0c:c6:48:e4:3a:
2a:a2:95:25:62:67:30:2f:2c:79:0a:89:82:b3:c9:
0f:77:0f:8c:d6:8a:af:b5:df:87:9c:6b:cd:db:cf:
fe:3e:ed:f7:45:6f:7d:95:36:35:58:3b:17:a6:46:
4b:3f:5e:47:ca:69:d9:6d:71:b0:1a:fd:8a:b9:52:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:54:26:EB:06:F3:D2:4C:1B:8B:19:0F:79:B4:32:33:ED:67:BF:77
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:40:7a:84:4f:07:2a:e4:8b:e6:02:9c:60:51:eb:cb:fe:92:
94:5c:73:f0:32:84:96:db:10:71:ed:62:c7:8b:a7:73:40:8c:
4b:94:50:3c:82:a9:82:28:c9:bf:1f:df:93:a1:4d:c4:25:19:
5e:1c:f9:f2:b8:42:a2:cd:93:26:a2:b9:03:e4:9b:5b:fa:75:
84:75:93:b4:87:9c:b8:de:4a:11:96:ad:54:d9:b5:30:2c:9c:
d8:59:cc:c3:a4:2d:06:f8:3d:4c:ba:6a:65:aa:e9:9f:d0:59:
dd:7c:15:ae:a2:e3:f9:57:9b:09:1f:3b:5e:8d:8b:01:8b:6a:
e3:fb:c6:82:c3:bc:6a:60:f1:2e:1e:55:d0:44:04:70:38:49:
74:04:d7:17:f9:47:6f:7b:c6:b0:66:91:16:ef:e7:e3:9a:7f:
76:7a:00:fc:04:38:17:16:bd:4d:60:52:b0:29:14:47:f4:dc:
73:98:cf:f9:ed:66:dc:42:de:a4:a9:7b:89:08:67:c0:cc:0b:
86:84:71:cb:bd:f5:9a:aa:cc:d0:ff:b2:a7:12:16:db:62:27:
42:57:1e:ff:82:fb:9e:09:8d:5c:b5:9f:5e:2c:99:85:55:9c:
3e:80:5a:3d:42:aa:3b:1b:6e:23:dd:8a:4c:0f:c0:57:e9:17:
01:2d:ee:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEEAFO1ldznjX8Ga1ZPpFZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzRjMmFlMzM4ODQ1ZWZlNzgwMmRlZWMyMzRlYWUzZjdi
OTVmMzEwHhcNMjYxMDAzMjMwMTMyWhcNMjYxMDA0MjMwMTMyWjAzMTEwLwYDVQQD
EyhiZjU0MjZlYjA2ZjNkMjRjMWI4YjE5MGY3OWI0MzIzM2VkNjdiZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiGpeOhWGSN1QMEOLqao1r3ZIgDP
jpAm5oO3bogBLzSVeBQ5taCyp7zZXrtSCciPkjvpfVCMdjAwqWH3Ehxw4Mj+8LXr
jfDMqFQghGeQlPhYIZhaKslGFuLmBXrJPgMqM5vGmmUtM4LpG+DyemMRDrbrXz4N
4l3KnBr6/X7pbeACImT2NGQQ3x1WCCvLXgghD2SB4ep34XXFp+lKxLuw6St2H9gf
kqA5DOGMT5ajB5beSuEm4AUss6GUOa+/DMZI5DoqopUlYmcwLyx5ComCs8kPdw+M
1oqvtd+HnGvN28/+Pu33RW99lTY1WDsXpkZLP15HymnZbXGwGv2KuVLIlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9UJusG89JMG4sZD3m0MjPtZ793MB8GA1UdIwQY
MBaAFM/Ewq4ziEXv54At7sI06uP3uV8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEt
ZTExMWYzMjI2MzZhLzEvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEtZTExMWYzMjI2MzZh
LzEvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkB6hE8H
KuSL5gKcYFHry/6SlFxz8DKEltsQce1ix4unc0CMS5RQPIKpgijJvx/fk6FNxCUZ
Xhz58rhCos2TJqK5A+SbW/p1hHWTtIecuN5KEZatVNm1MCyc2FnMw6QtBvg9TLpq
Zarpn9BZ3XwVrqLj+VebCR87Xo2LAYtq4/vGgsO8amDxLh5V0EQEcDhJdATXF/lH
b3vGsGaRFu/n45p/dnoA/AQ4Fxa9TWBSsCkUR/Tcc5jP+e1m3ELepKl7iQhnwMwL
hoRxy731mqrM0P+ypxIW22InQlce/4L7ngmNXLWfXiyZhVWcPoBaPUKqOxtuI92K
TA/AV+kXAS3u9w==
-----END CERTIFICATE-----
Generated at Sun Oct 4 06:41:06 2026 by rpki-client