Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
File: z6jgKeXx6FsRFss9M8haObsslNE.mft (raw, json)
Hash identifier: l+CufqDDhG4zYeeZNNCceiJaY4IksUmGkd1XrMryXzM=
Subject key identifier: 8B:4C:54:EF:9A:A4:1F:93:77:59:7B:A4:9F:27:C7:85:07:7D:D7:AA
Authority key identifier: CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
Certificate issuer: /CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Certificate serial: 01A18788CBBD3E4CE8A0FD1C50354B5F5FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
Manifest number: 0144
Signing time: Thu 29 Oct 2026 12:00:51 +0000
Manifest this update: Thu 29 Oct 2026 12:00:51 +0000
Manifest next update: Fri 30 Oct 2026 12:00:51 +0000
Files and hashes: 1: O-XgWvQ8KfMzfm8gFlpAQg2Xmkk.roa (hash: +cSVPrrZGE0RG6ua3kDeP5fHxWhOEOv6pgh3gSfnwNo=)
2: lUVl9Benklpiw6Ylck0dSuxSo-Q.roa (hash: p2ACt84JdaKlgpHAL/YLec1OeIXMp63TXCMnSlAEvAw=)
3: oaqhAz8r6QOEtVOyS7uoPCODlHc.roa (hash: c6tnbsMZPWMkjfAiaVIbYOOTReRqsQcVwvFXobf5RrI=)
4: z6jgKeXx6FsRFss9M8haObsslNE.crl (hash: 8CXeLnb2YrSFG45cq4TXMqt8uimHh0RTN5yJ7Lgt0pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:cb:bd:3e:4c:e8:a0:fd:1c:50:35:4b:5f:5f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Validity
Not Before: Oct 29 12:00:51 2026 GMT
Not After : Oct 30 12:00:51 2026 GMT
Subject: CN=8b4c54ef9aa41f9377597ba49f27c785077dd7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:51:93:4e:7a:88:66:5b:28:34:36:a5:85:
f8:d8:bd:2b:a3:11:94:e6:af:0b:1b:15:6a:b4:06:
91:92:31:26:20:45:55:59:06:64:dc:6d:c7:89:91:
4d:97:c6:4b:82:49:90:63:69:2c:fa:10:ea:f1:c5:
3d:fa:86:f4:dd:8b:62:d6:75:60:e8:0e:63:9d:8a:
8b:60:16:bb:a6:24:10:18:cb:ac:14:ff:c4:c2:e5:
90:aa:f8:48:b2:77:67:71:20:e6:96:00:50:35:bf:
e7:16:69:34:d8:f1:01:2d:f0:2a:1c:d3:c6:11:5f:
34:51:da:ac:73:9a:ad:ea:3f:00:59:39:ec:52:a3:
37:d5:b1:09:7e:6e:62:74:af:96:03:fe:3e:1f:30:
e8:52:f9:0d:9d:26:cc:4c:01:49:5c:5a:86:ce:b6:
9e:bd:60:2f:18:bc:8a:9e:d9:67:bf:4e:aa:23:a4:
57:f0:0c:7b:f3:0c:6c:e3:bf:d7:29:36:b8:13:eb:
61:5c:e3:a2:49:86:88:b2:e6:66:90:c5:69:bd:58:
20:21:27:3d:66:78:92:02:30:8e:37:f5:54:3c:47:
27:d7:a6:c7:31:cc:cb:e6:e8:26:00:f5:72:3f:78:
1c:3c:7f:14:c3:9d:4a:9c:ea:55:5a:aa:ea:8c:30:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4C:54:EF:9A:A4:1F:93:77:59:7B:A4:9F:27:C7:85:07:7D:D7:AA
X509v3 Authority Key Identifier:
keyid:CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:56:e9:07:14:7b:67:5c:0b:0b:16:4b:5f:7b:cf:e3:cb:be:
7e:ab:d3:77:07:5b:5e:f3:90:1f:e9:36:63:06:0b:d2:95:dd:
b9:aa:7b:2e:3b:02:84:15:e9:4b:ab:71:91:e8:d0:b7:67:34:
7b:ed:83:27:af:fd:6e:1f:a1:e1:61:c2:5c:fe:f6:74:c3:0a:
67:9e:f9:8b:51:07:47:32:c5:b6:9c:0c:33:c8:78:18:01:62:
d7:14:8c:62:a5:6a:64:0f:53:f0:b0:93:10:91:8a:1d:89:33:
cc:16:7f:62:47:7e:d4:1f:62:b1:64:44:4a:4f:49:77:d4:6f:
6f:dd:d6:60:f8:99:29:5e:bc:de:74:2a:57:6e:1d:c5:73:37:
74:3d:95:b5:08:ff:20:b1:3a:67:55:37:9b:cc:a5:17:8e:f1:
db:29:76:60:ca:eb:5b:3b:a4:1c:ab:a9:7f:aa:43:bd:8a:d5:
3d:3b:88:7d:b7:84:5f:74:57:de:56:c7:50:58:6b:98:5f:00:
f7:93:dc:3e:51:63:6d:2a:4e:c8:fe:90:e1:58:5c:63:60:76:
e1:6c:bf:ca:5d:9c:fe:53:2f:02:43:15:55:0f:64:44:39:50:
11:e5:8a:43:89:c3:26:fd:c1:46:4b:c9:71:40:65:df:c1:59:
16:a5:fb:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGHiMu9PkzooP0cUDVLX1/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYThlMDI5ZTVmMWU4NWIxMTE2Y2IzZDMzYzg1YTM5YmIy
Yzk0ZDEwHhcNMjYxMDI5MTIwMDUxWhcNMjYxMDMwMTIwMDUxWjAzMTEwLwYDVQQD
Eyg4YjRjNTRlZjlhYTQxZjkzNzc1OTdiYTQ5ZjI3Yzc4NTA3N2RkN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuxRk056iGZbKDQ2pYX42L0roxGU
5q8LGxVqtAaRkjEmIEVVWQZk3G3HiZFNl8ZLgkmQY2ks+hDq8cU9+ob03Yti1nVg
6A5jnYqLYBa7piQQGMusFP/EwuWQqvhIsndncSDmlgBQNb/nFmk02PEBLfAqHNPG
EV80Udqsc5qt6j8AWTnsUqM31bEJfm5idK+WA/4+HzDoUvkNnSbMTAFJXFqGzrae
vWAvGLyKntlnv06qI6RX8Ax78wxs47/XKTa4E+thXOOiSYaIsuZmkMVpvVggISc9
ZniSAjCON/VUPEcn16bHMczL5ugmAPVyP3gcPH8Uw51KnOpVWqrqjDDgcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItMVO+apB+Td1l7pJ8nx4UHfdeqMB8GA1UdIwQY
MBaAFM+o4Cnl8ehbERbLPTPIWjm7LJTRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejZqZ0tlWHg2RnNSRnNzOU04aGFPYnNzbE5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zNDQ3MWYtMGJhZi00MzNiLWI4NmEt
YWNkNzQyZmUwOTg2LzEvejZqZ0tlWHg2RnNSRnNzOU04aGFPYnNzbE5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zNDQ3MWYtMGJhZi00MzNiLWI4NmEtYWNkNzQyZmUwOTg2
LzEvejZqZ0tlWHg2RnNSRnNzOU04aGFPYnNzbE5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlbpBxR7
Z1wLCxZLX3vP48u+fqvTdwdbXvOQH+k2YwYL0pXduap7LjsChBXpS6txkejQt2c0
e+2DJ6/9bh+h4WHCXP72dMMKZ575i1EHRzLFtpwMM8h4GAFi1xSMYqVqZA9T8LCT
EJGKHYkzzBZ/Ykd+1B9isWRESk9Jd9Rvb93WYPiZKV683nQqV24dxXM3dD2VtQj/
ILE6Z1U3m8ylF47x2yl2YMrrWzukHKupf6pDvYrVPTuIfbeEX3RX3lbHUFhrmF8A
95PcPlFjbSpOyP6Q4VhcY2B24Wy/yl2c/lMvAkMVVQ9kRDlQEeWKQ4nDJv3BRkvJ
cUBl38FZFqX7WQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:13 2026 by rpki-client