Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: MIUujbfI7gzBQlbmtjyc8/j9R+TuaXn3mqjVd0+gFw4=
Subject key identifier: B6:10:A8:24:08:B7:AB:56:B6:99:4A:D3:C8:D3:D4:12:DF:7A:5E:56
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 019E8D9317A42B49957BD08AB9C0182EFB31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 1946
Signing time: Wed 03 Jun 2026 13:01:27 +0000
Manifest this update: Wed 03 Jun 2026 13:01:27 +0000
Manifest next update: Thu 04 Jun 2026 13:01:27 +0000
Files and hashes: 1: EZtw6hEm4-HQ85gMEHMRDpjYxJg.roa (hash: JGtJrI2m1JuEfJQglCfJ1ymwyYrm8ObpYBPxT/bs1tE=)
2: kBCB2dunkrqzg_SLB8-xM23RZt0.roa (hash: 7JjO+kfaDrDk7G2Fc1zLFdd1555LJH9UCjrEULuO84w=)
3: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: uMHbsHylozU7K2VbYfmupe6OGBRS4y5fQXRo5+VUGm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:93:17:a4:2b:49:95:7b:d0:8a:b9:c0:18:2e:fb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Jun 3 13:01:27 2026 GMT
Not After : Jun 4 13:01:27 2026 GMT
Subject: CN=b610a82408b7ab56b6994ad3c8d3d412df7a5e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:d5:c3:a3:b6:2e:d1:5c:d8:f5:82:f1:3c:
02:31:7a:d7:fc:f2:73:39:0f:67:ee:ef:3f:c6:c3:
b5:e5:35:18:f1:48:11:6c:1c:cd:21:cc:68:3b:bc:
b8:7e:2f:78:16:cc:a3:27:fb:36:cd:72:19:67:16:
02:ca:04:1f:3c:b9:29:ea:14:e3:3a:5e:68:8b:94:
00:aa:4b:dc:2e:bb:d3:5b:1d:11:09:09:bb:e3:5e:
ea:7b:4b:4a:19:36:e9:36:9b:7d:ff:a5:62:bf:92:
5a:de:26:3a:6b:28:b8:25:4b:85:d1:f3:60:61:8b:
a6:07:fe:c6:c5:ee:94:98:12:78:63:af:81:4d:b0:
d8:01:98:c9:b2:44:58:0e:0e:0d:1b:8c:20:a9:86:
67:d2:26:9e:91:ee:30:34:67:5f:a0:77:3b:9f:d4:
8b:aa:0b:e0:05:60:c3:08:fd:6a:41:5f:01:0d:3f:
6b:fe:67:5a:15:6f:2b:dc:67:56:e1:8c:8a:60:58:
66:01:c7:fa:ff:b0:18:a2:0a:3a:bb:70:b5:3e:8c:
dd:2c:55:35:11:97:31:55:8b:d5:5b:58:66:2c:ae:
e8:3b:6d:91:c2:b2:fc:14:ee:dd:c6:fd:2f:1f:43:
7c:25:08:20:5d:16:8a:e0:9f:f3:73:2a:83:a7:da:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:10:A8:24:08:B7:AB:56:B6:99:4A:D3:C8:D3:D4:12:DF:7A:5E:56
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2f:74:83:7c:0a:a9:af:51:fa:7e:dd:05:9f:7b:06:ef:44:
4a:ae:d1:4a:5c:5b:1a:32:9b:ef:9c:80:76:9a:25:67:10:21:
88:bf:d9:c0:27:49:16:c0:0c:65:35:c6:d4:db:e2:90:dd:17:
82:6a:5f:04:97:56:9b:d2:4b:55:4e:48:7b:c6:0c:30:f7:36:
09:c2:8f:28:6b:f3:ae:6e:63:7e:ec:94:72:df:d4:31:cd:4b:
d1:ba:d5:ba:cb:4d:08:2f:72:2b:93:08:84:d5:c9:03:39:9c:
ce:37:78:da:2c:1d:65:f7:dc:c2:5d:8c:b6:83:a7:77:58:59:
3f:da:31:55:5a:d2:df:a4:5c:58:e8:92:8b:ba:66:f3:f6:28:
5e:81:f6:df:35:8a:92:9d:40:c5:9b:c2:1d:b3:d8:9f:50:66:
9f:d9:55:29:ca:5a:af:48:ea:aa:c4:4d:d7:9f:c2:de:ba:fa:
9e:01:5e:99:35:65:58:de:29:0a:11:70:e0:bf:87:3e:ff:d7:
99:00:52:e4:f5:ca:fb:40:53:85:f3:a6:d4:c1:2a:12:91:5f:
82:25:a7:12:c8:2c:a8:33:36:c9:af:dd:ce:4f:f8:d8:15:40:
7c:78:fb:37:85:6d:04:ff:bb:55:1b:e5:af:44:38:0a:87:c9:
07:d0:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 23:33:16 2026 by rpki-client