Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: TU0n1A9ABEhhUhMzwgoSQAIWwP9dJDT2vP1jqKfUyJk=
Subject key identifier: F2:2C:B4:5C:54:F4:4F:8F:40:26:F5:DA:14:5C:E5:99:3C:53:63:26
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 019D37C01434A1AA202EC58790BD36820DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 0AF4
Signing time: Sun 29 Mar 2026 04:00:28 +0000
Manifest this update: Sun 29 Mar 2026 04:00:28 +0000
Manifest next update: Mon 30 Mar 2026 04:00:28 +0000
Files and hashes: 1: R1cZjQFvpzSoNjH57RozbKUytBQ.roa (hash: 5gILAzn1X9eg8JIPVx1JXogFciolZAFabqgiEM14sEI=)
2: bYw-qOY-Tl_DEhveCvoMVunD4fY.roa (hash: fvRin3P+GY7qd3E2JNYZzaXL08cwepa5Y3k4CFb6SB4=)
3: sGwYaMG-fGMANWLmphJR-vDIlT8.roa (hash: 4R34todPrry2ZxDJUBpJW6x1mLbY9FyCK7wsgXPjuTo=)
4: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: XEwmyudSot8uR5yUx9UYqH2BetSpk83N6NYaa8+HLx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:14:34:a1:aa:20:2e:c5:87:90:bd:36:82:0d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Mar 29 04:00:28 2026 GMT
Not After : Mar 30 04:00:28 2026 GMT
Subject: CN=f22cb45c54f44f8f4026f5da145ce5993c536326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:e7:eb:14:d0:35:3d:50:d0:f9:8c:b6:f7:
af:00:a2:97:5e:6f:11:cb:da:a1:f1:5d:28:53:76:
63:c6:5e:be:64:bd:b1:a8:8c:02:35:f5:a2:a8:32:
a6:42:de:29:30:e3:f2:48:37:6b:4c:60:49:7d:9d:
73:ad:a3:a3:ca:b1:fd:bd:0a:40:55:86:aa:55:82:
85:71:48:c2:06:81:ef:48:fd:46:5a:5a:2d:74:80:
fa:b7:fa:b2:2e:54:78:5c:20:b8:9c:8e:fc:a3:bd:
b2:8c:9b:cc:70:4a:7a:ad:30:7a:28:40:bf:b9:b1:
e4:bd:52:21:ce:0c:40:c6:95:ad:cb:2e:8a:4f:72:
a4:a8:12:9c:22:f2:e5:b2:2c:bd:21:ed:b3:83:8e:
b7:83:5c:84:0c:ac:95:15:b3:9c:9a:a4:38:e9:37:
cb:c4:0e:73:98:53:44:28:a4:80:ae:2e:cd:f6:28:
7c:0c:b2:56:96:75:b9:9c:34:0c:1b:04:5e:9e:4e:
e6:43:d8:5e:12:54:bd:7c:45:f2:cb:d4:cd:2c:5a:
78:d4:13:74:b4:79:8f:24:0c:c1:e7:e3:9c:50:68:
14:fa:e8:77:e4:b1:27:6c:dd:f5:17:4f:bb:51:2e:
8b:45:1b:58:75:2b:9f:1b:0e:17:ea:b7:47:32:bc:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2C:B4:5C:54:F4:4F:8F:40:26:F5:DA:14:5C:E5:99:3C:53:63:26
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cc:c2:2a:70:e3:49:48:1c:3d:b4:33:98:fa:45:67:2d:2a:
82:a2:52:bd:b5:e6:00:a6:a7:dd:19:cc:14:63:a2:e1:3b:e9:
38:74:56:fa:c8:b0:40:82:b5:4b:2b:10:62:16:f3:56:ee:bb:
6b:17:b6:76:ad:81:ee:f3:72:ce:e2:3c:4e:80:15:f2:12:f9:
51:ca:5e:b1:d3:88:50:59:69:8d:e6:69:5c:ef:a0:78:e0:21:
52:10:67:7d:6e:78:41:ab:e6:42:96:ba:18:84:91:20:93:a5:
16:42:ed:94:cb:da:44:e7:53:b9:45:84:1c:ee:03:58:08:9a:
b8:9d:27:24:af:f5:23:9c:c4:26:df:7e:50:51:d4:21:df:fb:
b7:20:fa:a2:d9:5f:57:1a:f0:d6:51:2a:87:83:39:71:09:b2:
6e:08:6c:79:0e:b0:34:3a:94:72:f6:16:68:a0:bb:20:3f:54:
e4:e2:b8:dd:da:ae:41:ad:a2:4c:93:f5:f0:35:aa:da:fe:b1:
68:0c:85:f3:78:ff:8d:9f:9b:c2:41:93:ef:72:3e:1c:89:ec:
bf:74:bd:17:b0:b3:3d:e1:b5:a6:8e:dc:06:32:3c:1a:c5:2d:
c3:f4:ac:f3:66:de:9e:a2:a6:f0:d8:71:58:57:03:02:ad:5d:
d6:e1:7a:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wBQ0oaogLsWHkL02gg2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzBmOTlkNzk3OTNhNmYwMWU5YWQ2MjdkMWY5NjhiMGMy
ZDBmM2IwHhcNMjYwMzI5MDQwMDI4WhcNMjYwMzMwMDQwMDI4WjAzMTEwLwYDVQQD
EyhmMjJjYjQ1YzU0ZjQ0ZjhmNDAyNmY1ZGExNDVjZTU5OTNjNTM2MzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEDn6xTQNT1Q0PmMtvevAKKXXm8R
y9qh8V0oU3Zjxl6+ZL2xqIwCNfWiqDKmQt4pMOPySDdrTGBJfZ1zraOjyrH9vQpA
VYaqVYKFcUjCBoHvSP1GWlotdID6t/qyLlR4XCC4nI78o72yjJvMcEp6rTB6KEC/
ubHkvVIhzgxAxpWtyy6KT3KkqBKcIvLlsiy9Ie2zg463g1yEDKyVFbOcmqQ46TfL
xA5zmFNEKKSAri7N9ih8DLJWlnW5nDQMGwRenk7mQ9heElS9fEXyy9TNLFp41BN0
tHmPJAzB5+OcUGgU+uh35LEnbN31F0+7US6LRRtYdSufGw4X6rdHMry8UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIstFxU9E+PQCb12hRc5Zk8U2MmMB8GA1UdIwQY
MBaAFM/A+Z15eTpvAemtYn0flosMLQ87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgt
ODBjYzg2ZTUxODIyLzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgtODBjYzg2ZTUxODIy
LzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgczCKnDj
SUgcPbQzmPpFZy0qgqJSvbXmAKan3RnMFGOi4TvpOHRW+siwQIK1SysQYhbzVu67
axe2dq2B7vNyzuI8ToAV8hL5UcpesdOIUFlpjeZpXO+geOAhUhBnfW54QavmQpa6
GISRIJOlFkLtlMvaROdTuUWEHO4DWAiauJ0nJK/1I5zEJt9+UFHUId/7tyD6otlf
Vxrw1lEqh4M5cQmybghseQ6wNDqUcvYWaKC7ID9U5OK43dquQa2iTJP18DWq2v6x
aAyF83j/jZ+bwkGT73I+HInsv3S9F7CzPeG1po7cBjI8GsUtw/Ss82benqKm8Nhx
WFcDAq1d1uF6DA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:16 2026 by rpki-client