Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: XgugvZbzyNgXELPSfcZCGomj0J7ihAY/qXVNEfz8dJg=
Subject key identifier: 82:9C:E1:3F:2F:C0:C1:D1:FF:CA:B9:03:BC:A5:AF:28:F0:B3:A2:EF
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 01A153D378A058A1551F0AD2861D1D6B8B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 1410
Signing time: Mon 19 Oct 2026 11:02:10 +0000
Manifest this update: Mon 19 Oct 2026 11:02:10 +0000
Manifest next update: Tue 20 Oct 2026 11:02:10 +0000
Files and hashes: 1: UbxGuXfCPU7PaazgdUkcbZmtVZU.roa (hash: U0sRu1JWMunI3dF2aemA2TfuPLAR6kavSK8Q8KfB14s=)
2: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: XKwfonmzC9MZUmcqXEfrVV6i7bHMUzKs9KcGZQZv5u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:d3:78:a0:58:a1:55:1f:0a:d2:86:1d:1d:6b:8b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Oct 19 11:02:10 2026 GMT
Not After : Oct 20 11:02:10 2026 GMT
Subject: CN=829ce13f2fc0c1d1ffcab903bca5af28f0b3a2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:31:60:c2:a3:53:7f:70:87:31:2a:33:1e:ca:
c5:89:8d:38:73:37:a4:89:c2:7f:62:dc:0c:8c:0e:
62:58:e4:ca:9d:d7:64:a4:30:7d:cc:38:71:01:28:
ff:65:db:7a:49:df:a4:3e:80:ce:7c:96:74:71:97:
bc:e0:5a:66:19:f8:ef:e9:c0:09:31:3b:e9:99:c1:
c3:07:f5:aa:22:92:06:5c:d6:22:29:4d:0e:00:29:
f0:a5:c3:d8:2d:8f:fb:2c:11:cc:fe:96:60:03:57:
a3:23:84:01:4f:3d:ce:cd:f1:32:99:3a:0a:39:7f:
37:70:77:18:6f:92:b6:eb:91:9c:db:13:1b:f2:f1:
cd:53:35:19:bd:d5:ce:2a:d9:a6:2e:a1:63:32:80:
5c:6d:5a:dd:e4:80:e2:b4:e2:59:b0:35:61:45:5d:
8a:ff:11:fd:8f:9c:f4:9d:24:1d:64:13:b8:ff:e7:
71:95:31:ee:fd:3d:b2:7d:81:e5:9f:46:d7:1d:54:
37:ca:13:b9:3d:8b:f2:f4:17:d0:70:f9:19:5f:19:
1b:22:1d:13:a6:7f:a6:09:af:7e:a8:a3:e2:27:95:
cd:2b:4f:13:43:1d:61:31:fa:a5:d3:73:c9:f2:55:
45:16:1f:47:5f:80:89:7a:50:52:58:89:5f:85:e2:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9C:E1:3F:2F:C0:C1:D1:FF:CA:B9:03:BC:A5:AF:28:F0:B3:A2:EF
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:78:96:52:a7:3f:89:2f:d6:de:de:5f:ce:44:e0:cd:5f:db:
96:c9:75:36:23:92:42:e2:2b:48:68:76:40:22:da:9b:a4:bc:
f4:7f:bf:43:81:c7:5e:d8:19:92:e8:b7:9e:5a:95:41:b8:ac:
ef:af:26:20:75:c7:e1:97:87:da:41:e8:15:ca:b4:09:0c:f6:
ee:d1:9d:35:b4:05:b6:45:45:ba:c7:44:32:fa:a6:c0:5e:3e:
a6:d2:70:ca:3e:fa:d7:fd:20:1e:65:0e:fa:22:b3:80:01:ae:
01:29:4f:29:90:20:f5:98:f6:27:3d:aa:49:e3:bf:3c:06:08:
a1:b9:fc:cb:9f:07:e5:2f:31:31:78:2d:f9:c9:1a:1d:a3:1d:
8a:87:53:9a:7e:44:12:8d:17:fa:40:e8:95:2d:7b:ba:29:7d:
bf:61:3b:f1:c6:50:8e:d2:42:f4:9e:9e:1f:79:07:38:37:67:
ce:09:1b:70:76:62:5a:7e:18:6d:49:71:3c:0c:b1:95:01:4f:
dc:91:a9:d4:74:6e:c3:e6:57:40:ae:da:e7:18:9e:c9:47:a9:
76:22:c1:58:b8:eb:c2:0f:37:6e:87:77:a1:26:95:f1:9c:84:
ff:3d:47:05:b3:d5:e9:bd:6e:e2:43:53:3b:f0:0e:e4:49:eb:
93:da:2c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:23:46 2026 by rpki-client