Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: eGrDjTn0gR/HobnjlnH/zxye9Je118jiuOfRPLcDMNk=
Subject key identifier: 20:5D:3A:DC:22:E6:39:1B:31:24:35:44:10:1F:F3:FE:89:44:5F:E9
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 01A06E70B45B63E7FF7E93E5C05502410751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 1A3F
Signing time: Fri 04 Sep 2026 22:01:14 +0000
Manifest this update: Fri 04 Sep 2026 22:01:14 +0000
Manifest next update: Sat 05 Sep 2026 22:01:14 +0000
Files and hashes: 1: EZtw6hEm4-HQ85gMEHMRDpjYxJg.roa (hash: JGtJrI2m1JuEfJQglCfJ1ymwyYrm8ObpYBPxT/bs1tE=)
2: kBCB2dunkrqzg_SLB8-xM23RZt0.roa (hash: 7JjO+kfaDrDk7G2Fc1zLFdd1555LJH9UCjrEULuO84w=)
3: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: qUZr0VE/iFRkSfq4RD26mo8w6ezgzXZY4sbPXtzoju8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:b4:5b:63:e7:ff:7e:93:e5:c0:55:02:41:07:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Sep 4 22:01:14 2026 GMT
Not After : Sep 5 22:01:14 2026 GMT
Subject: CN=205d3adc22e6391b31243544101ff3fe89445fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f9:7e:20:86:1c:c9:44:4e:96:00:46:c8:36:
a4:3c:e9:b3:94:50:44:32:b3:df:1f:d6:12:a3:d0:
9d:97:63:05:07:47:66:c8:82:50:32:bd:9f:7e:d1:
31:32:5d:9e:66:88:8f:32:b5:89:b7:bd:f1:ab:69:
a4:f3:99:c6:4f:02:2a:f1:1c:c2:1d:4a:f0:03:ed:
26:40:e8:02:66:f2:74:f3:d1:64:1b:db:1e:74:3d:
0e:31:1f:33:69:81:5d:23:36:a4:3f:1b:83:15:03:
7f:bb:89:b0:7f:07:f1:23:d1:b8:cb:36:62:c5:7b:
b9:af:9f:0e:07:17:86:51:5b:b0:c2:5b:49:80:67:
2b:a7:ab:e9:74:40:d3:57:f7:1e:96:d6:6b:3c:cc:
c8:cd:16:18:16:4d:1a:72:e2:00:93:17:84:78:a7:
0b:6d:de:44:5f:36:6e:7a:f5:1b:9f:e9:3a:de:cd:
7f:ce:a4:c9:2c:aa:2f:98:f5:52:25:55:14:82:b2:
c3:19:a3:c1:91:4f:a5:19:39:20:ee:48:e3:dd:ab:
3b:4d:36:42:56:1d:41:70:1a:11:5e:8c:a0:a6:33:
cf:40:00:e0:31:2c:78:b7:03:66:4d:f2:06:b1:0d:
21:75:99:20:13:aa:d7:f6:12:68:76:47:93:07:40:
dc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5D:3A:DC:22:E6:39:1B:31:24:35:44:10:1F:F3:FE:89:44:5F:E9
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:b6:d8:15:0c:5d:39:05:cf:2f:1e:c7:cd:5f:c5:11:59:81:
fd:e0:11:f9:32:3a:50:ca:f4:34:27:24:39:7d:c5:c6:95:66:
68:a7:d1:e1:03:66:d2:0b:02:29:6b:13:67:12:25:62:ce:6c:
e4:77:d6:e8:c5:d2:07:3e:3c:55:fe:f9:bb:c3:19:bd:ad:a6:
0b:4d:57:e3:52:bd:b1:a4:31:8b:6d:e3:52:eb:fa:01:7f:ba:
71:17:93:7e:01:a5:39:9a:bc:8a:a8:04:f8:a4:e7:37:26:fb:
5b:45:4c:fd:d0:d2:be:af:8e:a5:f8:91:09:d0:06:d9:24:97:
ae:e9:ba:27:a0:b4:83:f7:24:56:d5:8e:6c:b7:dd:ae:87:7a:
67:a9:c6:dc:bf:f3:25:85:10:56:61:a1:48:df:4e:56:14:4c:
1a:a0:14:0c:34:f7:1d:68:93:6e:1c:0d:2b:4d:25:de:e6:65:
86:5c:0a:61:c3:ce:d8:29:b5:66:f9:87:62:e0:49:2f:60:66:
73:8c:50:ec:12:88:1d:bd:ee:bc:05:f4:d7:13:bf:05:83:f3:
cb:0e:16:4f:63:25:90:20:5a:f8:7a:1f:30:89:08:3b:e4:4e:
ef:18:ec:14:2b:5d:50:2d:13:54:79:cf:83:d4:fb:d6:b0:54:
17:37:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:56:16 2026 by rpki-client