Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
File: z6jgKeXx6FsRFss9M8haObsslNE.mft (raw, json)
Hash identifier: 4CBihJv2YL4N++rtW2F2gbwsNvUYKUWH+6Z8UkKNJVs=
Subject key identifier: CC:5F:18:C4:C5:32:DE:3F:DE:56:8E:16:AF:56:2F:2B:1D:5E:12:BB
Authority key identifier: CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
Certificate issuer: /CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Certificate serial: 01A18976C1566BEE9F6C5B056E8807EFAB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
Manifest number: 0145
Signing time: Thu 29 Oct 2026 21:00:23 +0000
Manifest this update: Thu 29 Oct 2026 21:00:23 +0000
Manifest next update: Fri 30 Oct 2026 21:00:23 +0000
Files and hashes: 1: O-XgWvQ8KfMzfm8gFlpAQg2Xmkk.roa (hash: +cSVPrrZGE0RG6ua3kDeP5fHxWhOEOv6pgh3gSfnwNo=)
2: lUVl9Benklpiw6Ylck0dSuxSo-Q.roa (hash: p2ACt84JdaKlgpHAL/YLec1OeIXMp63TXCMnSlAEvAw=)
3: oaqhAz8r6QOEtVOyS7uoPCODlHc.roa (hash: c6tnbsMZPWMkjfAiaVIbYOOTReRqsQcVwvFXobf5RrI=)
4: z6jgKeXx6FsRFss9M8haObsslNE.crl (hash: cBvvdd2K6xXyrK4eB5ggofxAktyxLDBYHU8dUUSwV3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:76:c1:56:6b:ee:9f:6c:5b:05:6e:88:07:ef:ab:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Validity
Not Before: Oct 29 21:00:23 2026 GMT
Not After : Oct 30 21:00:23 2026 GMT
Subject: CN=cc5f18c4c532de3fde568e16af562f2b1d5e12bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c8:78:2e:64:99:10:e4:06:65:02:31:a2:3c:
8a:4d:41:27:64:26:2d:21:23:7b:be:32:f9:45:f2:
d9:65:96:d0:71:ce:f6:41:a1:bb:c5:25:c8:8a:49:
44:72:c9:39:67:49:68:e2:cb:83:22:bb:6b:92:70:
83:a8:49:18:95:69:eb:be:ab:ed:f7:b5:d7:00:73:
a8:56:d1:cc:f7:36:c8:1e:d6:df:28:36:76:23:7c:
4b:c3:fe:c3:d3:1d:e7:07:15:c4:d2:7a:2d:2f:91:
9b:e4:5c:40:9b:bd:8a:9c:a2:79:d0:7d:a6:a6:fd:
9f:66:0c:d0:1c:26:0f:a3:14:6f:3f:b0:5e:75:22:
76:24:3e:ef:73:0c:fb:07:d9:ce:91:a3:ae:45:54:
ed:9b:74:77:ac:f7:24:bd:28:c9:85:cf:15:63:58:
54:67:8e:40:8f:0f:be:81:e3:7d:e3:3c:7a:93:d0:
b0:7a:95:1b:7d:3c:b4:18:4a:ca:04:e1:4d:ad:de:
cc:92:7a:be:4f:16:b5:54:d5:fa:71:b1:d6:fc:eb:
f3:28:98:3e:b2:89:64:b7:c3:17:36:41:1b:26:b8:
d2:bb:08:1b:62:80:2e:e0:a6:b3:d2:37:22:2b:20:
89:c3:9c:4a:43:47:e1:5d:d0:5b:96:14:34:4f:ad:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5F:18:C4:C5:32:DE:3F:DE:56:8E:16:AF:56:2F:2B:1D:5E:12:BB
X509v3 Authority Key Identifier:
keyid:CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:57:c2:40:dc:76:fc:73:e9:ec:c9:37:3e:4c:45:48:83:74:
5e:00:00:c4:4a:5d:28:76:e9:7d:66:a3:c9:4b:67:a8:4d:6c:
aa:20:a2:c8:74:2b:03:13:80:1d:49:57:14:ef:d6:46:cd:5d:
f1:d1:8f:d6:22:26:d8:a5:2c:69:26:36:63:6f:c3:ff:cc:d0:
fe:00:5c:64:38:ff:5f:e4:5c:79:29:53:05:ac:82:67:52:11:
c4:7e:c0:c8:1d:45:73:41:08:05:d4:2d:50:4f:1e:8f:18:e6:
34:e5:ac:ac:1d:21:00:48:df:0d:07:6f:26:7e:9e:df:b0:25:
c6:d1:bb:ac:25:1b:81:49:96:55:30:cf:0b:23:39:ee:7a:c0:
a8:78:cb:86:d0:84:44:8f:75:8f:e6:e5:9b:77:c5:f2:10:5e:
bb:24:77:ec:19:6d:f2:17:7b:58:b3:7b:77:1c:da:8f:59:3e:
90:90:60:1c:0f:b7:58:6d:78:9a:6e:15:b6:15:b8:ff:00:59:
88:ee:a5:a1:b9:69:6b:bb:8b:56:5b:45:a7:7c:bb:09:cc:5d:
09:28:11:5c:7a:c9:8b:e2:25:07:0a:e0:f3:d3:f4:1f:63:dc:
2d:2d:b4:60:6c:e4:c9:d6:f0:9c:73:1c:5a:5d:96:9e:6d:33:
2e:f7:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:09:21 2026 by rpki-client