Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: MEMh1BKXebnd5Gcr0cNGZhCwCmz9xXyuojUMigR3YHM=
Subject key identifier: 14:C7:40:78:6D:DB:D6:F3:DD:13:97:57:7A:F2:98:BB:CF:F7:38:BD
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 019CABA22DA43DE66BAE9F6C7CDF583CB069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 04AD
Signing time: Sun 01 Mar 2026 23:00:58 +0000
Manifest this update: Sun 01 Mar 2026 23:00:58 +0000
Manifest next update: Mon 02 Mar 2026 23:00:58 +0000
Files and hashes: 1: 18mBvWMTzIGjuf0KvgUDpqaEgck.roa (hash: GFEk4/+4DhuQ+HzNstdRPkKFI3j7dtiSLG7Lkc2nCys=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: OF6iqUuAevFGh9w+ZO1w7Vov4j+iGEo35ru6sv8y/Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:2d:a4:3d:e6:6b:ae:9f:6c:7c:df:58:3c:b0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Mar 1 23:00:58 2026 GMT
Not After : Mar 2 23:00:58 2026 GMT
Subject: CN=14c740786ddbd6f3dd1397577af298bbcff738bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f8:55:95:e0:0b:c2:b3:a1:4b:d4:a4:9e:c2:
a6:99:a1:81:78:72:c6:11:1e:78:4b:83:66:c2:53:
eb:ae:9d:a0:0e:8e:b1:79:80:51:0c:cd:bd:ba:14:
0b:88:55:bc:98:d0:79:e3:c5:a3:e7:d5:40:42:d0:
1f:87:05:55:20:eb:a7:ee:7a:f0:f1:e3:83:68:01:
4d:83:68:a2:25:a8:7b:23:88:c5:23:b1:bd:5f:6d:
b5:81:29:40:02:33:3a:b5:c3:d5:62:6f:8b:8c:be:
96:42:54:30:d4:00:a8:2b:7e:4a:52:24:4b:aa:6e:
68:ad:a8:75:4e:1f:7a:46:d9:43:33:43:d3:a3:b5:
98:88:de:c9:8d:f6:39:5f:53:82:57:f3:ad:33:84:
72:fc:50:3d:3b:a9:05:37:ba:9b:42:73:13:38:e3:
ed:bb:7d:dd:cf:56:0d:0a:b4:55:f6:de:49:0a:5e:
2d:3f:01:5c:6f:dc:3d:4d:9f:05:67:d2:9b:25:9a:
16:fe:85:b1:a1:5a:1e:a9:45:36:ac:43:53:c0:e8:
3f:04:cc:81:7a:4c:a2:a7:1b:a0:ef:63:9b:cc:bc:
60:34:10:50:f1:dd:5f:ab:53:d0:25:ce:c6:4f:5c:
15:23:a4:96:1d:b8:93:e9:58:b6:c2:5f:06:fa:c9:
81:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:40:78:6D:DB:D6:F3:DD:13:97:57:7A:F2:98:BB:CF:F7:38:BD
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:15:25:b6:03:0f:1b:79:21:90:54:81:77:4a:79:a7:9c:45:
ae:09:e7:05:02:95:42:1e:60:66:62:af:ad:77:ee:60:03:38:
12:dd:14:19:2a:2c:2e:d0:a3:5b:d5:71:2c:96:3e:0a:d7:17:
c8:36:6c:f8:ea:92:b1:62:36:62:9b:ba:4c:c9:39:ed:f1:17:
e5:00:a0:e1:3b:8b:e6:8a:7e:7c:5e:cb:d3:e4:5c:32:56:66:
21:c0:2f:94:e3:7a:57:8e:cd:d1:79:0c:f5:bd:0d:68:24:26:
75:6d:50:ed:26:b8:ef:8d:c9:ec:fa:57:f1:c5:cb:c9:c7:fc:
cb:7b:c1:a7:66:09:e0:c0:2f:33:a4:22:33:f9:de:52:25:39:
10:9c:7f:1d:72:5b:65:0d:b2:b0:d3:b3:83:5b:38:27:ed:8b:
11:1b:21:08:f9:98:54:e2:93:1d:65:d2:88:64:80:d2:b4:96:
3f:ff:cc:c8:c6:f6:bc:c5:39:f2:57:a1:f2:ef:b5:26:46:44:
42:8d:29:dd:3e:6a:f1:9b:1d:92:e7:b7:cc:dd:18:6f:af:95:
f9:5f:b3:7b:68:1b:09:3f:0e:b5:64:aa:0f:47:d6:93:ce:61:
81:5b:27:83:56:4d:07:e4:f4:ff:eb:18:52:d6:4b:38:c0:61:
22:56:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:05 2026 by rpki-client