Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: PIdo76E0LEioQa+zYeVWkRqWwnWlVk8CvodgDVyOpC4=
Subject key identifier: B8:B3:85:E7:D2:A5:43:0B:08:BC:2C:06:3B:94:1F:49:E5:40:9E:21
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 019F107756223C2E47F41B603421F481746D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 12E4
Signing time: Sun 28 Jun 2026 23:01:24 +0000
Manifest this update: Sun 28 Jun 2026 23:01:24 +0000
Manifest next update: Mon 29 Jun 2026 23:01:24 +0000
Files and hashes: 1: UbxGuXfCPU7PaazgdUkcbZmtVZU.roa (hash: U0sRu1JWMunI3dF2aemA2TfuPLAR6kavSK8Q8KfB14s=)
2: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: t8bSiL4Xfk6DIZNvlCHe6QGOFONVyU/LvPw25oxbI+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 22:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:77:56:22:3c:2e:47:f4:1b:60:34:21:f4:81:74:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Jun 28 23:01:24 2026 GMT
Not After : Jun 29 23:01:24 2026 GMT
Subject: CN=b8b385e7d2a5430b08bc2c063b941f49e5409e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:f8:a3:89:6f:1d:17:de:bb:d0:a0:84:4d:
7a:a3:0e:25:1d:b1:13:9b:82:f8:21:37:ba:5e:2e:
39:ef:53:63:dd:72:49:45:ae:27:ce:ca:d1:61:45:
e3:09:4c:b3:98:37:12:83:4e:8d:fd:10:12:42:cc:
a8:08:a9:5b:6f:0b:78:2b:d5:c4:7a:88:f6:f5:42:
5e:54:55:a8:bc:a0:70:12:50:62:8a:3c:1a:c0:6e:
e0:cb:ae:6d:41:cf:3a:e8:99:7e:12:b3:2c:b7:1b:
94:85:7c:34:89:0b:b9:4f:72:13:06:a2:f7:af:25:
5d:43:8c:53:4c:24:62:31:b2:d9:b6:33:25:5f:fb:
89:07:70:65:9e:19:87:f3:a2:6c:60:ce:f5:bc:02:
4c:b8:fe:aa:69:89:8c:e4:e1:7b:ab:10:f7:7b:c7:
85:31:71:9a:17:17:60:97:d8:f1:c0:f5:22:7f:4c:
81:18:45:14:c9:13:26:89:8a:41:4c:79:90:aa:3b:
ff:5e:01:37:a2:ab:67:e4:e5:88:6b:0b:3b:00:34:
14:e0:41:cb:40:bd:4e:c6:fd:a1:ad:b6:f2:c8:a8:
1b:4d:ce:d4:db:4d:92:80:04:b3:91:b1:d2:1b:ea:
69:f4:4c:7e:80:8d:74:62:f1:55:01:7e:d6:0d:08:
27:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B3:85:E7:D2:A5:43:0B:08:BC:2C:06:3B:94:1F:49:E5:40:9E:21
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f0:e8:39:43:16:b9:ef:99:98:5c:a0:0b:09:83:a5:9d:0d:
b1:ff:7d:59:2e:d4:e9:33:3a:3a:a4:b8:d0:c0:90:7c:99:60:
f2:fb:d4:7e:0e:ab:5a:2c:ab:63:c5:1c:f4:f5:90:bd:8a:68:
d9:c2:0f:82:3c:63:9a:34:f7:af:d1:17:b8:28:b0:13:df:6e:
49:bb:b7:20:cd:62:07:69:7b:b8:12:75:79:cd:8b:94:a8:9a:
2b:36:65:97:08:49:4f:d9:1e:51:8f:5d:44:b2:50:b8:8c:ec:
25:de:ce:8d:65:44:c0:35:cf:fd:63:ab:db:4c:00:d2:d2:a6:
49:32:3e:a2:9b:2a:93:8a:f4:76:26:05:7f:66:61:ad:df:fa:
85:ca:5f:8b:c3:fa:0b:4e:5f:3c:23:16:db:ad:ee:11:fe:f1:
86:54:b4:07:42:73:a5:2d:d8:26:ba:be:fd:bf:08:1a:81:ef:
67:ae:99:c7:ef:40:9f:7b:6b:74:67:35:c2:65:37:e3:d7:64:
00:1f:48:cc:9b:f9:6d:54:3e:37:53:8e:7b:58:f7:5a:fb:55:
34:aa:95:fd:9c:4f:36:95:76:3e:74:92:2e:bf:cc:88:ae:00:
f6:59:9f:23:85:ee:28:e6:58:2f:ce:7b:e6:5a:c6:77:36:08:
46:60:b8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 03:54:00 2026 by rpki-client