Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: GW+0McoWWolqGOfdXjSNIe2z0onr0t15LA46kR0Wrck=
Subject key identifier: 54:86:67:4D:4E:E1:9A:73:D1:B6:B2:0E:F8:1A:FF:B9:A5:BB:F6:40
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 019FFA240E5E26578832C62BCAEAF4BE087C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 135D
Signing time: Thu 13 Aug 2026 08:01:34 +0000
Manifest this update: Thu 13 Aug 2026 08:01:34 +0000
Manifest next update: Fri 14 Aug 2026 08:01:34 +0000
Files and hashes: 1: UbxGuXfCPU7PaazgdUkcbZmtVZU.roa (hash: U0sRu1JWMunI3dF2aemA2TfuPLAR6kavSK8Q8KfB14s=)
2: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: ugCbydL5kDp/7ZjlLDKxJNWKY33clYHFQS+79ScXpZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:24:0e:5e:26:57:88:32:c6:2b:ca:ea:f4:be:08:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Aug 13 08:01:34 2026 GMT
Not After : Aug 14 08:01:34 2026 GMT
Subject: CN=5486674d4ee19a73d1b6b20ef81affb9a5bbf640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:82:97:20:fe:fd:f7:08:d4:cf:8c:27:dc:
ae:bc:9a:5d:55:6b:2c:67:03:ae:19:42:27:46:c4:
80:82:78:03:fc:c6:4e:a4:0a:12:a3:d7:68:e0:95:
78:35:fb:fd:e8:a2:fc:f0:ee:52:fc:6e:10:dc:a4:
3a:4a:87:95:c0:c5:01:c9:c3:f5:40:0e:0c:2b:9e:
9c:3a:41:0a:e0:6a:a1:4b:fd:3d:8f:e7:01:bd:c9:
f4:5b:26:b8:90:7e:d6:02:b7:80:be:0f:21:c3:e1:
02:8f:47:2c:35:2d:99:a4:ea:e8:cc:cf:5a:2f:2f:
34:53:21:4d:0f:9d:57:a0:54:63:8e:20:c6:bd:97:
ec:44:42:71:2a:fc:a4:79:87:9d:f4:45:3b:b9:77:
ad:07:9a:4f:4b:6a:13:31:d3:f6:a2:43:49:f0:80:
fb:6f:b7:af:5b:1a:0d:c0:51:15:60:f9:ed:ec:96:
87:7f:df:80:ae:89:87:2b:09:2f:05:09:be:63:a2:
43:44:1d:54:85:45:ea:54:cc:10:ef:04:96:68:2e:
1b:d4:c8:47:16:ec:9a:59:d2:c4:88:9b:43:81:6e:
28:da:07:ae:d2:4b:77:a4:d5:b1:3c:4d:9a:c8:da:
d7:49:16:b1:c3:4e:ad:9b:47:69:f7:bf:5e:1a:db:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:86:67:4D:4E:E1:9A:73:D1:B6:B2:0E:F8:1A:FF:B9:A5:BB:F6:40
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9e:bc:5e:ba:c3:4f:e0:35:67:95:17:be:3f:04:3a:50:e8:
55:37:e1:81:2f:fc:cc:1e:94:5a:34:04:d3:79:9d:02:e5:33:
60:b6:4f:db:d1:e3:87:d5:1c:68:34:6a:1a:f7:47:45:fe:51:
d0:b3:b1:50:29:85:39:ff:c9:e0:db:d6:05:8c:a3:6f:68:a1:
a7:54:ae:19:b4:fc:ed:85:10:6c:39:ee:95:b2:7e:c8:fd:4b:
11:e6:a8:fb:a0:b0:6e:14:71:c0:18:a0:9c:c6:6c:60:3a:90:
fb:d7:17:0b:34:e1:b4:fb:a6:22:88:fd:f5:f0:04:e0:78:f7:
f3:c2:d0:ea:fe:54:ee:7f:82:39:36:53:e8:a9:c6:8b:9b:56:
dd:d3:49:dd:4d:b2:9a:69:a0:c5:7d:17:ef:8f:8f:4c:0c:71:
0f:c6:b6:59:89:d2:b7:cb:a8:be:33:c5:ad:e3:6f:a6:6c:39:
f2:a7:09:48:ed:da:6b:8d:7e:7b:3f:ac:4d:88:f3:8d:d4:e4:
02:43:0f:94:a2:af:d9:d9:9e:0e:0c:0c:de:90:b4:fe:ba:01:
86:de:3d:6d:46:2b:dd:5c:4f:d5:c3:2f:70:90:bf:b9:1d:7b:
e9:b9:a1:8e:e6:67:35:76:ca:fd:bc:9e:db:60:c2:aa:7b:29:
81:02:cb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:25:26 2026 by rpki-client