Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: WDQ/BhziH86bSdPhirBExZuJELtRTWutN1YalvLaclw=
Subject key identifier: A7:4E:B7:14:4D:77:4A:6F:13:CB:C3:37:E1:5E:6B:64:9A:D6:0A:34
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 01A180ABC4137B2F544F0A19B92027C798EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 0D2C
Signing time: Wed 28 Oct 2026 04:01:42 +0000
Manifest this update: Wed 28 Oct 2026 04:01:42 +0000
Manifest next update: Thu 29 Oct 2026 04:01:42 +0000
Files and hashes: 1: R1cZjQFvpzSoNjH57RozbKUytBQ.roa (hash: 5gILAzn1X9eg8JIPVx1JXogFciolZAFabqgiEM14sEI=)
2: bYw-qOY-Tl_DEhveCvoMVunD4fY.roa (hash: fvRin3P+GY7qd3E2JNYZzaXL08cwepa5Y3k4CFb6SB4=)
3: sGwYaMG-fGMANWLmphJR-vDIlT8.roa (hash: 4R34todPrry2ZxDJUBpJW6x1mLbY9FyCK7wsgXPjuTo=)
4: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: lhiRSgLOEBRtrDIyqUY4BMLkSYexlXetuGkhtMwwvUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:c4:13:7b:2f:54:4f:0a:19:b9:20:27:c7:98:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Oct 28 04:01:42 2026 GMT
Not After : Oct 29 04:01:42 2026 GMT
Subject: CN=a74eb7144d774a6f13cbc337e15e6b649ad60a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:f9:28:ec:e8:c7:5c:af:83:82:18:f6:13:
15:e1:1f:26:18:43:9c:00:01:cc:4d:05:a5:2d:00:
c3:0e:91:e1:d3:02:f8:20:b6:06:c8:fd:eb:e0:2f:
5e:d2:8b:cd:28:c3:68:b9:32:e6:c4:06:b3:8b:c1:
14:aa:c2:bc:0c:e3:c3:2a:05:92:bd:b5:db:52:cc:
f1:45:ae:f0:13:1b:c7:83:a1:44:4e:58:5d:56:51:
e0:16:a4:58:1c:02:b8:cd:8c:5b:2d:fd:e3:c5:47:
17:2b:6c:5c:43:e6:03:e1:dc:a4:98:bd:9b:28:dc:
c6:ee:92:3a:5f:76:9a:c9:0a:7e:4c:af:8d:e1:4e:
82:1a:d5:53:09:1a:5c:fc:d4:98:85:e4:15:ce:c9:
b2:da:e0:90:27:e9:ff:72:8f:d6:b7:66:1a:a7:7f:
95:c8:3a:4c:4f:2d:6f:7a:a4:5f:dd:88:8d:6d:c2:
20:02:9e:87:d3:b2:97:db:eb:ba:c2:8d:43:72:42:
22:23:a0:4e:b6:fc:ad:fb:6c:de:b0:ba:6e:36:42:
f6:97:70:72:04:15:6d:11:34:2e:26:5e:d1:e1:28:
8b:4a:83:ac:3a:7f:58:a5:77:d4:b2:d5:82:4a:1b:
26:9c:44:00:d4:19:6e:0a:b5:8d:21:3a:80:5a:40:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4E:B7:14:4D:77:4A:6F:13:CB:C3:37:E1:5E:6B:64:9A:D6:0A:34
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3a:9e:0c:3e:2c:de:11:ec:6b:d0:62:fd:6c:f0:a6:a0:19:
ab:a8:92:5b:ec:05:d4:26:97:4f:dd:0e:a9:da:90:29:8f:8e:
1f:27:d7:c2:d3:73:0b:cb:a4:7d:93:12:f6:c2:96:5f:1c:65:
d4:1f:8b:84:74:e9:9d:e6:35:74:70:3a:0f:4b:42:b6:68:a8:
17:26:9d:28:fd:96:a2:6a:35:70:a0:83:11:33:e7:8a:e1:f7:
12:98:77:2c:8d:4a:cb:29:1f:e8:f1:d8:5f:65:7e:2c:35:a0:
dc:db:ec:2d:8c:ff:7b:7d:4c:46:6d:3f:35:27:4c:ed:4c:4e:
54:da:35:83:c0:e7:49:0a:2e:c0:f3:ad:0d:cb:03:f6:ee:dd:
4d:fa:56:11:15:fe:9b:ae:f9:26:78:2a:a5:33:2c:da:af:9b:
bf:26:5d:08:b3:11:61:13:d5:43:e9:71:cc:db:38:4d:23:02:
62:c3:b9:ab:50:7c:14:d2:6e:d0:10:41:ee:c4:b1:65:c2:6a:
b7:c0:69:04:1b:c7:b2:ef:d6:ff:b7:32:a2:3e:f0:e8:71:55:
28:61:53:b9:c9:67:21:47:df:0f:de:be:cd:11:6d:3e:62:11:
4b:35:63:c3:0e:d1:32:c3:b7:1d:81:a2:6c:ab:84:ec:e5:02:
8d:a7:60:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:11:56 2026 by rpki-client