Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: LGv6BciAmoqoxUqyuQnbC3RQkeRAZZ9CcocVif0JOMI=
Subject key identifier: 7D:59:1B:5A:3E:BF:26:92:C1:E8:5E:05:C5:98:65:39:90:C1:04:5A
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 019A21ADDAB412526ACA36A06759BD5C6757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 18:00:33 +0000
Manifest this update: Sun 26 Oct 2025 18:00:33 +0000
Manifest next update: Mon 27 Oct 2025 18:00:33 +0000
Files and hashes: 1: Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa (hash: MX3HFB8kT23MsRMUZ5iOzHB5WYojkHCu+itSb597FCw=)
2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: gamuRUQrZ5clLdj5rv4eu8LuvuPJEjwtEwz4QbpkoTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:da:b4:12:52:6a:ca:36:a0:67:59:bd:5c:67:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Oct 26 18:00:33 2025 GMT
Not After : Oct 27 18:00:33 2025 GMT
Subject: CN=7d591b5a3ebf2692c1e85e05c598653990c1045a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:a3:ca:74:be:48:17:6f:9d:db:80:b3:e7:
7e:aa:6c:09:93:bc:cc:ea:5f:ec:5e:26:a0:32:60:
ce:39:b1:a3:fd:82:06:c4:ff:33:9c:1c:ff:07:fa:
ed:57:dc:8a:28:eb:98:cb:23:60:b6:f2:a7:01:e7:
26:60:5c:96:41:8b:74:47:ab:4f:5d:9b:a3:0e:16:
66:e7:a6:b5:8f:41:bd:43:04:fa:d9:26:7c:a4:8b:
9f:95:fa:0c:d9:26:1b:d1:63:53:86:e2:a6:31:80:
67:3f:c8:8e:da:17:0a:a9:af:20:04:d6:d7:ec:33:
ce:72:56:9d:ba:62:96:f0:bd:e2:06:5c:59:47:5f:
44:ca:10:eb:be:ee:f8:56:10:6b:2b:5a:51:2a:5e:
10:d9:1a:1c:ed:d5:39:ee:e2:ac:ff:10:fd:e2:ef:
54:44:69:77:d7:45:8b:4b:0c:0d:5b:45:8a:e6:7e:
2b:be:f6:93:4c:92:e8:6c:5c:50:5b:fe:9b:71:0f:
a0:0b:1a:91:c0:a3:af:66:44:32:f1:3e:9e:c8:0e:
50:af:c4:e9:c5:61:c0:e9:f2:e8:54:de:4e:a5:da:
6a:e5:b9:38:d0:79:9d:ad:be:bf:81:3a:72:e3:88:
ea:9d:d3:ed:4a:ae:bf:1c:4b:58:1b:4e:c4:75:21:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:59:1B:5A:3E:BF:26:92:C1:E8:5E:05:C5:98:65:39:90:C1:04:5A
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b2:b9:5b:8f:99:e3:12:24:9c:98:9e:dc:31:13:21:88:e2:
c5:61:e8:e6:44:4f:75:ab:3a:40:bf:89:5f:d0:ab:39:c3:5e:
b3:b1:eb:01:2c:67:8c:dd:ba:60:ba:a7:b7:4f:77:93:46:4f:
82:d3:92:8a:dc:85:e7:f3:9c:a5:30:04:52:ac:8b:29:2d:73:
d8:f1:e7:9c:3d:f2:c9:f1:33:ca:8e:d3:50:c0:11:ec:d8:cb:
56:90:ce:59:38:55:a8:ce:77:66:0c:c5:1c:07:f3:7d:59:f2:
81:c6:1f:dd:fe:1c:cd:8e:2c:b1:ac:e1:dd:98:b5:cb:5d:63:
b2:24:83:4a:07:2b:73:d1:3a:36:92:8a:12:df:4a:aa:89:12:
50:59:57:10:f3:80:38:8e:99:b5:01:d8:e2:a0:8d:9d:f2:83:
8e:13:49:55:b7:33:6a:1a:b5:0e:23:e3:15:5c:09:88:49:a0:
b7:ef:37:80:f3:b2:95:65:c4:df:ea:00:3f:4e:8c:7a:0c:d0:
15:32:03:ac:cf:8d:9c:e5:4a:99:89:82:ce:d5:46:17:27:d4:
42:5e:23:aa:70:a8:4d:df:68:0f:2c:9a:d7:2b:bf:06:88:b6:
23:b1:d2:4e:b0:f8:6c:d4:96:7f:59:83:3a:30:72:d4:b9:30:
9e:7b:e2:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohrdq0ElJqyjagZ1m9XGdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2FiOGM5ZDIxN2FjMzA3OWMzMDE0YjE4ZDQ0NmUyMTNm
MTk0OTIwHhcNMjUxMDI2MTgwMDMzWhcNMjUxMDI3MTgwMDMzWjAzMTEwLwYDVQQD
Eyg3ZDU5MWI1YTNlYmYyNjkyYzFlODVlMDVjNTk4NjUzOTkwYzEwNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo2jynS+SBdvnduAs+d+qmwJk7zM
6l/sXiagMmDOObGj/YIGxP8znBz/B/rtV9yKKOuYyyNgtvKnAecmYFyWQYt0R6tP
XZujDhZm56a1j0G9QwT62SZ8pIuflfoM2SYb0WNThuKmMYBnP8iO2hcKqa8gBNbX
7DPOcladumKW8L3iBlxZR19EyhDrvu74VhBrK1pRKl4Q2Roc7dU57uKs/xD94u9U
RGl310WLSwwNW0WK5n4rvvaTTJLobFxQW/6bcQ+gCxqRwKOvZkQy8T6eyA5Qr8Tp
xWHA6fLoVN5Opdpq5bk40Hmdrb6/gTpy44jqndPtSq6/HEtYG07EdSHT2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1ZG1o+vyaSweheBcWYZTmQwQRaMB8GA1UdIwQY
MBaAFM/KuMnSF6wwecMBSxjURuIT8ZSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhxNHlkSVhyREI1d3dGTEdOUkc0aFB4bEpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMGMwMDAtNzdiMC00NjZkLWI0Y2Yt
NDQ1NDAwZDcwM2M4LzEvejhxNHlkSVhyREI1d3dGTEdOUkc0aFB4bEpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMGMwMDAtNzdiMC00NjZkLWI0Y2YtNDQ1NDAwZDcwM2M4
LzEvejhxNHlkSVhyREI1d3dGTEdOUkc0aFB4bEpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwrK5W4+Z
4xIknJie3DETIYjixWHo5kRPdas6QL+JX9CrOcNes7HrASxnjN26YLqnt093k0ZP
gtOSityF5/OcpTAEUqyLKS1z2PHnnD3yyfEzyo7TUMAR7NjLVpDOWThVqM53ZgzF
HAfzfVnygcYf3f4czY4ssazh3Zi1y11jsiSDSgcrc9E6NpKKEt9KqokSUFlXEPOA
OI6ZtQHY4qCNnfKDjhNJVbczahq1DiPjFVwJiEmgt+83gPOylWXE3+oAP06MegzQ
FTIDrM+NnOVKmYmCztVGFyfUQl4jqnCoTd9oDyya1yu/Boi2I7HSTrD4bNSWf1mD
OjBy1LkwnnviKQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:57:33 2025 by rpki-client