Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: 0dHPTMZy/kX8EL0p1EV00OOS+HAkj7RpCH8KTyBOXcI=
Subject key identifier: 58:36:05:89:03:C8:12:06:C8:0C:67:E2:E9:8C:F4:CA:01:C9:75:FA
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 019F1C7B854721F10BB532E8F28387A71EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 0BEF
Signing time: Wed 01 Jul 2026 07:01:24 +0000
Manifest this update: Wed 01 Jul 2026 07:01:24 +0000
Manifest next update: Thu 02 Jul 2026 07:01:24 +0000
Files and hashes: 1: R1cZjQFvpzSoNjH57RozbKUytBQ.roa (hash: 5gILAzn1X9eg8JIPVx1JXogFciolZAFabqgiEM14sEI=)
2: bYw-qOY-Tl_DEhveCvoMVunD4fY.roa (hash: fvRin3P+GY7qd3E2JNYZzaXL08cwepa5Y3k4CFb6SB4=)
3: sGwYaMG-fGMANWLmphJR-vDIlT8.roa (hash: 4R34todPrry2ZxDJUBpJW6x1mLbY9FyCK7wsgXPjuTo=)
4: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: Cj1dgm1WbRVBsPgLqZw2ljv3ulVjz7mt8YNkogi+8wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:7b:85:47:21:f1:0b:b5:32:e8:f2:83:87:a7:1e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Jul 1 07:01:24 2026 GMT
Not After : Jul 2 07:01:24 2026 GMT
Subject: CN=5836058903c81206c80c67e2e98cf4ca01c975fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:46:5f:39:58:6b:ae:3d:86:6b:9d:95:c9:
b0:68:79:69:f1:43:3a:e1:ba:de:bc:29:4c:42:1b:
f8:c8:79:b7:53:c5:d7:e8:56:e2:9e:65:16:1d:91:
cc:3d:c1:42:5b:1e:49:2e:54:57:91:d7:ac:81:57:
e5:8c:fd:0f:0b:9f:27:93:82:1c:70:84:a3:03:7d:
e8:2a:f6:72:ed:e4:12:9e:5b:6a:62:eb:d8:22:15:
af:dc:b8:2f:3c:fe:b3:97:b2:b7:84:1d:24:f3:3d:
d4:0a:bd:20:4a:80:26:55:05:63:26:35:d6:4d:be:
33:6e:f2:c2:67:70:e7:69:5b:82:aa:81:4f:f3:31:
94:9a:58:04:ab:39:84:6a:6e:e3:82:c4:43:36:f5:
84:65:c2:92:04:9c:28:db:62:91:bc:fc:51:7d:1a:
90:fc:4c:d5:57:93:5c:88:e9:74:43:46:5b:7a:ce:
58:ad:e3:0b:fc:c2:04:a0:cc:33:ca:b1:d6:40:10:
b2:e2:84:3a:cd:78:57:7a:18:6e:a2:ae:dd:3b:ab:
f8:7e:da:b2:95:cf:d8:2c:c1:bc:97:2a:51:73:4f:
b5:1b:a2:3c:94:5e:3e:2c:f4:44:12:9b:a7:86:0b:
9d:4b:40:50:d4:5f:53:3f:99:95:f6:1f:8b:86:a2:
f4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:36:05:89:03:C8:12:06:C8:0C:67:E2:E9:8C:F4:CA:01:C9:75:FA
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f9:0e:95:12:ce:8d:87:e0:ea:26:e7:93:0d:ff:11:93:37:
fb:08:3b:ee:4b:59:41:12:b4:65:3b:89:bb:22:85:62:ab:a7:
8b:9d:b8:b0:64:a8:dd:9a:56:19:da:9c:f0:39:2c:b1:3f:64:
4a:00:84:b2:d3:e0:97:dc:c8:69:18:a9:5e:de:f6:0d:1c:a0:
b6:fd:8d:b8:a6:ad:ee:56:84:b9:89:30:a3:75:c2:c3:01:e7:
26:92:a3:b9:e4:9e:c8:6b:f1:2f:6d:c3:bd:c4:92:0a:a2:c7:
db:83:c5:f0:cd:c8:98:08:36:8d:71:cf:bd:85:a8:ff:2d:18:
ae:98:23:42:69:d0:9b:e8:84:22:d9:23:4b:2d:f9:c6:85:ad:
39:90:f6:41:1c:1f:46:dc:cc:28:12:33:40:e7:47:9a:85:f0:
23:8d:e3:b6:a2:31:5b:62:15:83:37:c6:d0:42:a5:16:01:15:
ca:61:b0:0d:c7:ef:a2:35:23:43:cd:41:bb:80:92:33:b5:58:
d9:e1:9e:93:91:bb:09:19:62:8b:16:8e:06:38:e4:97:04:6c:
fd:6f:ff:85:4d:d9:0b:01:ce:0f:7d:54:9c:a7:22:e1:01:f9:
86:f1:4f:89:d1:8c:d5:28:66:d3:10:5f:f8:e1:df:e2:3f:9f:
5a:93:6c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 13:54:09 2026 by rpki-client