Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: CgH7ccc9iMu+0Ez+nK7ppGVZ72FuEMHNrGwqzxRRY9Y=
Subject key identifier: 3A:69:C4:15:31:13:AF:6E:49:45:0E:F5:BA:17:14:CF:A5:EE:BA:E4
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 01A178F1024F1D87D7723ECD897E5FAAABF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 1AC9
Signing time: Mon 26 Oct 2026 16:00:22 +0000
Manifest this update: Mon 26 Oct 2026 16:00:22 +0000
Manifest next update: Tue 27 Oct 2026 16:00:22 +0000
Files and hashes: 1: EZtw6hEm4-HQ85gMEHMRDpjYxJg.roa (hash: JGtJrI2m1JuEfJQglCfJ1ymwyYrm8ObpYBPxT/bs1tE=)
2: kBCB2dunkrqzg_SLB8-xM23RZt0.roa (hash: 7JjO+kfaDrDk7G2Fc1zLFdd1555LJH9UCjrEULuO84w=)
3: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: yQAM6GURyG8jLUmyo/gQlj4n2RUF82oXtUFS3z7Ebt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:02:4f:1d:87:d7:72:3e:cd:89:7e:5f:aa:ab:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Oct 26 16:00:22 2026 GMT
Not After : Oct 27 16:00:22 2026 GMT
Subject: CN=3a69c4153113af6e49450ef5ba1714cfa5eebae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:b4:62:0c:9c:9f:b0:b8:7d:e3:ff:12:d9:
07:05:fd:77:d2:b6:7f:e2:91:91:6f:c7:53:53:7b:
7a:71:c6:a0:ea:9c:8e:d7:42:72:0c:87:ca:bb:a0:
1c:9d:88:c7:48:c1:ac:2b:25:0e:5c:bc:e8:86:88:
9f:6e:6b:5d:f6:db:59:be:70:22:c2:b2:ce:ad:ce:
c4:cf:c2:ab:22:27:32:77:5a:43:11:03:eb:5a:4e:
62:7c:df:92:7f:b9:3c:41:70:68:0b:31:0d:02:2e:
14:b5:53:de:5d:53:b3:c0:bd:c7:c9:0f:ae:5e:b8:
3b:a2:6a:49:66:30:16:5e:30:21:ba:d9:15:2c:a3:
df:cc:e7:71:77:dd:6a:86:31:24:0e:cd:cb:7e:57:
d8:6a:10:19:99:64:5f:11:e4:7f:da:c7:99:ae:3b:
38:2b:0b:ac:e9:92:89:35:61:1e:66:20:3d:88:8e:
f3:e0:d5:85:c7:57:53:be:38:46:81:2d:50:70:bf:
d5:5d:78:3a:8f:56:af:ea:8e:5e:42:78:5e:cb:3f:
85:36:97:5f:c6:4a:d0:76:bd:a5:59:74:4f:c3:bf:
70:c1:4e:d8:51:5a:0c:71:73:12:bf:9a:c3:3a:ad:
4b:b8:83:11:71:1f:c1:47:e3:c9:0f:f0:20:2a:d5:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:69:C4:15:31:13:AF:6E:49:45:0E:F5:BA:17:14:CF:A5:EE:BA:E4
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:79:3e:7a:ee:d9:42:08:a5:dd:c2:22:44:cb:0f:73:c3:11:
dc:de:5a:d4:ae:1c:04:89:87:00:64:05:5e:a8:4c:14:00:cf:
1d:2e:bd:e2:c5:ac:5d:a3:41:28:dc:1d:f5:5d:92:37:b9:89:
64:ad:80:2a:d2:95:d8:5f:8e:ae:18:68:e0:60:ce:1e:06:96:
6a:55:71:7b:ce:4e:59:b2:e0:cf:1c:90:47:07:94:d1:33:83:
0c:6b:5d:ce:88:15:1a:5f:46:5b:72:1b:7c:25:d9:4e:fd:90:
75:ad:d9:3e:e9:20:2b:3d:6c:da:40:1f:64:b3:09:fc:b1:8d:
46:d1:5b:1f:97:09:51:e5:41:a9:ad:c0:b4:73:78:c9:38:90:
8f:e9:12:21:56:70:d4:8a:3d:e7:e1:8b:3e:83:b0:8c:74:24:
b1:83:b4:a4:11:59:2c:71:c4:f5:55:70:cf:e2:96:e9:94:fc:
e9:1e:69:84:20:bb:1e:a2:45:e3:11:a4:f3:d0:39:3d:51:09:
3f:1d:aa:85:72:c8:c5:94:f6:00:da:48:cc:0a:b7:ce:ca:a2:
fc:25:60:24:6a:b6:e1:eb:e7:c5:0f:c7:60:86:2e:df:21:9d:
1a:fc:35:d8:20:fb:a7:51:49:8a:d9:5d:fc:c7:e6:88:3f:09:
4b:71:37:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:57:35 2026 by rpki-client