Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: 75Ove+4EVCU9tRDoGTqZ/rtnk77Tj9gZ6Pg6voZLFRg=
Subject key identifier: A0:EF:0F:78:77:16:9F:D7:6F:6F:D0:A5:9A:87:B4:AF:F5:7E:C3:B8
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 019D3940D5FA674F6B1EF4F3AD2105FB8AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 11F0
Signing time: Sun 29 Mar 2026 11:00:43 +0000
Manifest this update: Sun 29 Mar 2026 11:00:43 +0000
Manifest next update: Mon 30 Mar 2026 11:00:43 +0000
Files and hashes: 1: UbxGuXfCPU7PaazgdUkcbZmtVZU.roa (hash: U0sRu1JWMunI3dF2aemA2TfuPLAR6kavSK8Q8KfB14s=)
2: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: Yv1vmN8nbtdxykII6u97Bscq84jMvPvkKWBAr6s0mfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d5:fa:67:4f:6b:1e:f4:f3:ad:21:05:fb:8a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Mar 29 11:00:43 2026 GMT
Not After : Mar 30 11:00:43 2026 GMT
Subject: CN=a0ef0f7877169fd76f6fd0a59a87b4aff57ec3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:07:02:12:1d:4d:b5:83:14:c7:a8:64:87:ee:
2a:3f:15:1e:9e:17:8c:d9:e1:c2:f0:6f:5d:96:7d:
60:d9:40:6e:7e:47:c7:09:c8:14:d8:8c:89:03:91:
c3:5d:54:b1:10:43:59:ed:85:80:9e:01:e9:4a:15:
6d:bb:55:ea:ef:ae:c5:59:27:7c:58:80:32:65:b7:
93:50:d9:8d:4a:8b:ba:b3:05:33:ba:e4:ae:79:5a:
09:29:cf:39:f5:10:e5:19:e0:b4:fc:b1:e0:1e:eb:
32:bf:86:63:66:aa:49:6e:23:22:48:d5:b5:b8:75:
87:d6:f1:16:93:d5:47:b5:2e:b5:2a:b2:50:a2:47:
a6:ab:ba:b1:6a:f6:e6:0b:7d:98:5f:ad:92:d8:9c:
7f:d3:c0:a8:12:4d:91:b1:e9:e1:03:e6:52:14:07:
e7:3c:e6:3a:45:f8:d2:da:53:a9:8a:98:56:7c:c5:
3e:1f:68:7c:d7:1b:e5:08:f5:d4:e1:2e:93:17:28:
55:9e:ef:8f:c1:42:df:44:01:be:ad:61:f3:09:1b:
0f:bd:36:26:d9:97:71:d9:b2:25:61:ba:81:a0:fc:
3c:62:f8:93:3a:f6:51:d8:b7:02:f8:03:65:c9:e0:
f6:f7:c8:29:3c:c9:aa:d7:a2:36:63:27:54:bf:e2:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EF:0F:78:77:16:9F:D7:6F:6F:D0:A5:9A:87:B4:AF:F5:7E:C3:B8
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f6:a5:1e:3a:ea:f2:28:ce:4e:41:0f:d5:12:fe:66:e8:19:
05:f5:4d:6a:fd:93:04:6f:a6:8d:60:dd:2a:44:9f:28:99:be:
a1:8d:c2:1d:7f:60:2a:21:12:d0:2f:28:75:bd:d9:a6:5c:21:
1a:0a:ac:9b:10:0a:00:bd:28:73:40:df:51:10:b8:27:f2:2b:
dc:2b:cb:ce:82:9b:c7:c3:e0:91:48:82:df:a5:3f:94:6d:a6:
de:36:a4:74:50:10:aa:51:e0:e5:55:47:b2:de:43:01:0e:f6:
ad:09:94:e6:9c:9e:5a:53:a7:03:2c:91:31:99:af:d8:be:1c:
80:9e:56:b9:0c:b4:1a:81:51:79:f1:8f:a6:f0:78:c7:df:97:
ac:5c:7d:bd:71:c9:2c:ef:0f:22:92:cd:df:bd:d1:17:eb:5b:
34:b6:2c:d8:11:50:6e:72:8f:92:77:c4:b7:43:37:ff:6d:56:
70:3b:bd:15:b5:15:16:0c:ed:fe:92:a3:a1:61:50:49:69:55:
1b:e2:a1:61:f0:40:3f:f8:19:a1:8f:e7:2c:76:5b:d5:14:3e:
eb:de:0f:bc:2d:36:d1:37:82:3a:7c:d1:93:3a:54:fd:ad:d3:
e6:d7:fd:01:c4:c5:18:03:4e:15:f8:0e:1a:a6:67:79:b0:d0:
31:67:87:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QNX6Z09rHvTzrSEF+4rwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzcwMDhjNmY5MTcyMmRjM2IxMjc1Mjc1NThlYmRhYmM2
ODBjZTYwHhcNMjYwMzI5MTEwMDQzWhcNMjYwMzMwMTEwMDQzWjAzMTEwLwYDVQQD
EyhhMGVmMGY3ODc3MTY5ZmQ3NmY2ZmQwYTU5YTg3YjRhZmY1N2VjM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QcCEh1NtYMUx6hkh+4qPxUenheM
2eHC8G9dln1g2UBufkfHCcgU2IyJA5HDXVSxEENZ7YWAngHpShVtu1Xq767FWSd8
WIAyZbeTUNmNSou6swUzuuSueVoJKc859RDlGeC0/LHgHusyv4ZjZqpJbiMiSNW1
uHWH1vEWk9VHtS61KrJQokemq7qxavbmC32YX62S2Jx/08CoEk2RsenhA+ZSFAfn
POY6RfjS2lOpiphWfMU+H2h81xvlCPXU4S6TFyhVnu+PwULfRAG+rWHzCRsPvTYm
2Zdx2bIlYbqBoPw8YviTOvZR2LcC+ANlyeD298gpPMmq16I2YydUv+JN7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDvD3h3Fp/Xb2/QpZqHtK/1fsO4MB8GA1UdIwQY
MBaAFM/HAIxvkXItw7EnUnVY69q8aAzmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhjQWpHLVJjaTNEc1NkU2RWanIycnhvRE9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80MTY4ZGEtZTY1Yy00N2I2LWJiNjEt
MzZmMjRhZDRhMDRmLzEvejhjQWpHLVJjaTNEc1NkU2RWanIycnhvRE9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80MTY4ZGEtZTY1Yy00N2I2LWJiNjEtMzZmMjRhZDRhMDRm
LzEvejhjQWpHLVJjaTNEc1NkU2RWanIycnhvRE9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfalHjrq
8ijOTkEP1RL+ZugZBfVNav2TBG+mjWDdKkSfKJm+oY3CHX9gKiES0C8odb3Zplwh
GgqsmxAKAL0oc0DfURC4J/Ir3CvLzoKbx8PgkUiC36U/lG2m3jakdFAQqlHg5VVH
st5DAQ72rQmU5pyeWlOnAyyRMZmv2L4cgJ5WuQy0GoFRefGPpvB4x9+XrFx9vXHJ
LO8PIpLN373RF+tbNLYs2BFQbnKPknfEt0M3/21WcDu9FbUVFgzt/pKjoWFQSWlV
G+KhYfBAP/gZoY/nLHZb1RQ+694PvC020TeCOnzRkzpU/a3T5tf9AcTFGANOFfgO
GqZnebDQMWeHuQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:16 2026 by rpki-client