Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
File: Z8fCgrBpftBVTIBfUACrEro7nH4.mft (raw, json)
Hash identifier: hYolhUVo5mH8K7YpCU/TKuR9LXHU+fdL2Okd5wxB7TA=
Subject key identifier: 94:1E:45:E4:28:41:07:70:22:47:D3:BA:ED:E9:E8:DC:EA:EC:55:BB
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial: 019D3A1C42C18B53CD1AFAA096255A78600B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
Manifest number: 08CC
Signing time: Sun 29 Mar 2026 15:00:23 +0000
Manifest this update: Sun 29 Mar 2026 15:00:23 +0000
Manifest next update: Mon 30 Mar 2026 15:00:23 +0000
Files and hashes: 1: RnwkUlCJs9bw50GiSdHn7SGXOeo.roa (hash: 8K20xbc5P6ZWPSIDkIUTcAS1BtzkRFadgOrDQ1YrclI=)
2: Z8fCgrBpftBVTIBfUACrEro7nH4.crl (hash: e1oyi7WSVbCK7uJBNj5OMG5rTog56BmlbCN/vlrHt24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:42:c1:8b:53:cd:1a:fa:a0:96:25:5a:78:60:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Validity
Not Before: Mar 29 15:00:23 2026 GMT
Not After : Mar 30 15:00:23 2026 GMT
Subject: CN=941e45e4284107702247d3baede9e8dceaec55bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:dc:f9:aa:9c:b1:c2:6c:4c:b1:19:aa:5d:
75:8b:0f:e4:95:9a:5a:2c:19:55:14:7b:30:b9:9b:
da:a2:21:52:57:b2:f1:92:f1:f4:35:45:cb:c2:a9:
d4:1e:d2:b8:42:5f:27:87:d9:f8:6b:93:c9:a6:fa:
41:eb:a2:b9:30:be:1e:a3:e4:de:cc:18:49:4a:e1:
cd:99:bd:bb:29:8b:0d:ac:59:b2:cd:41:f4:23:36:
47:d2:bc:92:85:64:17:00:fc:87:70:cf:25:ca:87:
39:37:98:07:13:dd:b0:17:66:3d:aa:09:6e:d1:ec:
04:78:71:7c:1c:cc:1b:91:39:f7:10:e6:c5:b1:dd:
ed:eb:5a:cd:52:79:d7:fd:04:86:93:87:68:ca:0f:
05:d1:d0:d4:27:8d:5b:14:9c:1f:90:ae:14:18:c1:
da:e9:73:8d:1c:a9:09:96:b7:17:e8:7b:c3:87:c0:
be:7c:ed:29:83:39:d9:69:ec:77:32:ae:89:05:52:
cc:95:3d:5a:cd:d5:52:b0:fd:32:0c:2d:3b:c2:47:
cf:3e:75:4a:74:8d:ea:a1:b4:f9:7d:4a:e3:3c:76:
a4:f4:7e:b3:25:39:87:43:69:bf:a4:c6:c3:e9:5e:
d5:17:dc:41:e3:7a:53:bc:61:18:1e:e7:e0:1a:4e:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:45:E4:28:41:07:70:22:47:D3:BA:ED:E9:E8:DC:EA:EC:55:BB
X509v3 Authority Key Identifier:
keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:b3:fb:37:cd:7f:ee:84:8c:01:e3:f5:f3:9b:0f:ce:6d:3f:
5d:7d:fe:40:d7:d9:dd:f1:d4:60:a7:3b:11:a0:25:ff:75:6c:
9c:35:c4:99:85:b6:05:14:a9:3d:d3:3d:45:6c:28:67:91:09:
35:4c:43:45:f3:1c:f4:c9:e5:f8:a5:e6:00:bc:20:da:a3:75:
6e:11:c3:6e:be:86:cc:81:68:98:3c:65:80:c8:69:04:ee:65:
f7:35:7a:33:cf:2f:0f:c8:bd:14:0c:d6:5f:db:69:23:82:71:
0e:2f:d1:53:4a:d4:26:19:0e:bd:6c:71:4a:34:7d:72:d7:e0:
3b:59:29:63:aa:03:22:87:e7:9d:1c:9a:76:76:94:28:04:52:
6d:b4:71:31:3f:72:67:0b:ef:81:0b:4e:05:fb:75:24:dd:18:
9d:7d:1d:60:95:d3:0a:2f:41:10:70:ce:6e:95:05:91:7e:6a:
44:72:1f:f3:98:e8:13:7e:84:66:1b:70:47:f2:f1:cb:39:49:
7d:e4:53:8e:66:b3:ff:0d:4f:ab:11:f8:14:4f:91:2e:b1:8f:
a8:3d:3a:c6:73:ee:20:16:8a:42:dd:a2:73:4b:12:20:25:d1:
3a:bd:b4:a6:71:59:56:d9:9a:86:c1:0c:0f:24:aa:9d:db:ad:
d7:a5:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:37 2026 by rpki-client