Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft
File: Z8-tqx1DTEwmEYyaYp50-p83xGE.mft (raw, json)
Hash identifier: fiKgaUB3OcOTH7IVbtfL+FUO3fY/m0wnJYpK0b6aeUc=
Subject key identifier: 51:9F:09:FF:2F:42:FC:C9:7D:4A:91:D5:0B:3C:7A:28:7F:BC:17:1A
Authority key identifier: 67:CF:AD:AB:1D:43:4C:4C:26:11:8C:9A:62:9E:74:FA:9F:37:C4:61
Certificate issuer: /CN=67cfadab1d434c4c26118c9a629e74fa9f37c461
Certificate serial: 019C849495DCB10F3EBB61E36718C9C57675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft
Manifest number: FE
Signing time: Sun 22 Feb 2026 09:00:56 +0000
Manifest this update: Sun 22 Feb 2026 09:00:56 +0000
Manifest next update: Mon 23 Feb 2026 09:00:56 +0000
Files and hashes: 1: FlRhYyU5KWqMBFxcsxhHK8JGkgI.roa (hash: LerB+EHbGtYIBcGnSEDKbVb334OwXWnKx/1mjIc2mvE=)
2: Z8-tqx1DTEwmEYyaYp50-p83xGE.crl (hash: fo8bfW3iK8Zuetc6qyks0xarRe0946MwcCedL13Iv1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:84:94:95:dc:b1:0f:3e:bb:61:e3:67:18:c9:c5:76:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfadab1d434c4c26118c9a629e74fa9f37c461
Validity
Not Before: Feb 22 09:00:56 2026 GMT
Not After : Feb 23 09:00:56 2026 GMT
Subject: CN=519f09ff2f42fcc97d4a91d50b3c7a287fbc171a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:a8:12:ee:a2:77:f8:d7:0e:f4:a7:ab:49:
6f:07:c5:64:51:1e:4e:9c:d1:de:0d:f9:b1:b4:a3:
72:5a:d5:77:a8:f0:34:cb:ad:03:1e:ea:53:48:70:
b7:fa:86:b5:50:23:d4:01:0e:21:71:11:88:c9:fa:
01:73:62:29:02:1e:c2:25:66:a2:0c:e6:6d:81:85:
bd:33:c9:7a:4f:ea:94:7a:53:5c:fa:cc:83:56:e5:
17:00:d4:7a:df:7c:a1:3b:bb:ae:03:4e:ab:16:c4:
79:da:b2:b3:9b:ad:df:e6:e7:76:e8:30:3f:61:d0:
9a:aa:bf:04:5e:55:3e:ad:69:9f:40:8b:d6:ec:a7:
ce:84:17:5a:cd:c1:13:48:4c:60:4e:f3:c5:30:72:
81:f5:33:f7:8a:c8:f1:c0:ec:6a:9b:e3:5f:f1:3f:
29:05:0a:de:ff:81:b8:88:0c:ad:ec:8d:05:09:51:
18:c5:e8:f4:d6:75:d5:e0:30:68:01:ae:44:f5:eb:
a1:0e:c9:ef:79:2e:ed:5f:94:f1:00:d4:cc:3e:52:
74:94:e0:ab:fc:c8:55:b6:29:82:25:8d:36:ce:49:
7b:97:1d:07:c3:9e:78:13:aa:48:ba:ac:38:53:b6:
bc:9c:26:dc:e8:92:db:41:08:fc:67:95:88:0a:9e:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9F:09:FF:2F:42:FC:C9:7D:4A:91:D5:0B:3C:7A:28:7F:BC:17:1A
X509v3 Authority Key Identifier:
keyid:67:CF:AD:AB:1D:43:4C:4C:26:11:8C:9A:62:9E:74:FA:9F:37:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5f:b8:cd:b7:4a:42:5e:55:32:17:b2:44:92:30:2e:77:b2:
20:5e:b9:b6:4b:10:55:c5:6d:68:03:8b:12:19:d4:fe:b4:9b:
92:58:fa:72:70:55:8c:13:12:86:1d:c1:ba:f7:71:1e:18:33:
23:14:54:01:58:52:f3:91:e3:81:3b:27:88:d8:06:30:41:c3:
19:7e:67:3e:04:82:a7:04:68:08:79:b0:75:a0:7b:c3:97:9d:
a8:13:1d:ce:00:05:31:fa:82:3c:a3:19:2a:21:b9:6a:87:6b:
d0:9d:64:bd:a4:6f:75:08:7a:8c:3e:05:a5:da:63:0a:87:c7:
c7:0b:64:df:98:8c:9e:47:91:44:ac:1c:9a:45:56:8d:78:58:
52:fc:d9:91:82:a6:f3:25:e4:8c:a5:c6:d4:7b:c4:56:1c:f1:
14:0a:39:fc:ca:8f:92:20:60:71:18:bf:ed:21:5e:b3:f2:4f:
eb:a7:0f:9c:45:e3:00:0c:ef:f9:36:6d:0f:86:08:49:5a:ae:
62:c6:78:33:3c:6c:5c:46:81:fe:b4:c4:f2:cb:62:91:0e:aa:
01:b3:d1:0b:05:af:e6:23:c9:e5:73:f3:aa:21:2e:f9:ce:c4:
dd:fe:2b:12:e3:58:59:58:e9:7d:cc:34:78:73:28:21:84:b9:
44:93:1a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 15:23:36 2026 by rpki-client