Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File: z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier: nBiiaps7KyHVnCKNVtyYlzM0zH79zNQZldpgdta9gCE=
Subject key identifier: 18:3D:0B:66:16:A7:86:49:1D:68:E8:F0:49:A4:B0:F5:F3:0C:C8:26
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 019D394121DEAFEEF528C1F4152D13940D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:02 +0000
Manifest this update: Sun 29 Mar 2026 11:01:02 +0000
Manifest next update: Mon 30 Mar 2026 11:01:02 +0000
Files and hashes: 1: 5w8L1o2xDu1EgnFPzhAl4Dxiiuk.roa (hash: N7gwY/QH2RLdT3WqeakNq3TDez5YAW9J33gsQvciQVk=)
2: MGbK18crReeycP3hT0y5D69KHDg.roa (hash: bJ5cOxmt243LIA6o4KZp7HyiaUla0ibwqPSbCU8ga5Y=)
3: r3Gj28qxCmsCd0VMfNKOdxAgbOI.roa (hash: rVagaCAlGM1dBitdjHx7SnwM1EWU8ftBiG82vwvCY6g=)
4: tGgYc8esx93FIuv6qVdvLrrfYjA.roa (hash: NqmOiovtc0twyj4G/0azepimZEOqE1VqYTbbiNKPooI=)
5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: 485CSQow/Jc9dW965QPY6+KbvONpbsjhkNwdaNESMN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:21:de:af:ee:f5:28:c1:f4:15:2d:13:94:0d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Mar 29 11:01:02 2026 GMT
Not After : Mar 30 11:01:02 2026 GMT
Subject: CN=183d0b6616a786491d68e8f049a4b0f5f30cc826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:b4:9c:45:19:54:db:a0:8e:4f:9d:75:70:
7d:32:8e:06:64:34:4e:7d:a9:49:af:95:d9:99:f3:
d3:e4:90:99:58:37:79:0e:0e:e3:c7:1e:c5:50:e3:
66:ba:49:9f:d3:0c:4d:24:ac:91:1a:5f:6d:59:a9:
f5:7f:04:78:a5:dd:01:bd:8e:d0:ed:e6:17:f3:9a:
fe:b2:76:e5:f9:01:a0:a1:29:d4:85:8b:e0:4c:a7:
35:b6:38:f2:84:38:96:cd:4e:75:20:74:66:73:9e:
c6:26:ff:be:f3:6e:57:a6:18:02:35:a5:0f:2c:74:
35:e4:91:15:76:bc:2f:57:a8:4c:2d:40:48:9e:0b:
7d:d4:f0:e9:f9:7c:a5:97:1b:70:0e:f3:36:ba:09:
e0:df:6b:b0:ad:57:7d:d0:97:e3:a2:0d:8a:b5:e6:
82:17:48:d4:9a:12:52:82:df:92:3c:16:9b:66:16:
ac:75:16:c3:75:a5:e6:b6:49:7a:29:7f:c3:99:63:
b2:99:48:a0:ce:7d:57:d6:a9:c0:66:d5:24:b9:b9:
e9:a2:7b:e0:42:e8:a7:50:e0:a3:b7:6e:84:62:38:
ab:86:aa:2d:db:e3:bd:82:f4:56:03:b3:ea:d3:c9:
c1:91:3d:d9:a0:7d:8e:d6:c8:a3:26:b0:23:b3:08:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3D:0B:66:16:A7:86:49:1D:68:E8:F0:49:A4:B0:F5:F3:0C:C8:26
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9c:12:59:d1:a9:65:f5:ba:13:0e:97:7d:f1:14:1d:21:26:
fd:39:f7:62:78:a3:da:96:6e:c2:ed:2e:2c:25:55:dd:a0:e0:
8b:cc:c8:e1:53:f4:07:5f:22:4c:5d:2f:41:45:7e:3e:e6:30:
29:0d:43:05:ad:ac:5e:2a:12:9d:7d:2e:17:00:d0:48:25:d5:
5a:1d:0c:15:ac:8e:5b:b7:ac:b1:35:cf:89:9f:64:a3:84:b6:
ce:ca:d6:7d:76:43:d0:f4:02:19:8b:59:0c:8c:f1:ec:aa:62:
a1:8a:96:ac:8d:e5:65:f6:84:dd:71:c5:fb:bd:f1:00:66:bc:
5c:54:7d:86:fe:b8:a0:f8:6f:08:f8:e7:11:9a:ea:61:24:35:
dd:ce:a3:4c:79:5c:c3:cd:2f:c5:d2:8a:dc:19:0a:a5:61:cf:
1e:15:e0:d8:df:dd:b5:ee:b6:8b:9a:70:01:88:82:79:ce:9f:
d5:a5:4c:81:b7:f1:2c:84:6d:55:e6:c4:da:25:b1:ef:75:3e:
57:f4:65:76:0e:4a:6d:8a:36:65:32:a6:bc:f8:cd:6c:92:dd:
22:d9:d8:0f:66:08:9e:b5:a5:b8:dd:37:87:2f:00:38:c6:d2:
83:bd:a7:6a:e1:76:3e:8c:a1:9a:c8:ea:cd:03:f2:08:d5:a5:
35:30:81:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:32 2026 by rpki-client