Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: xXLwEh4EXitHMsOlVGS2zPguEUCh2XDs4mWsGgGYUn0=
Subject key identifier: 94:7A:5D:39:1B:86:75:99:DB:7E:DC:4C:90:C9:CE:33:3C:4C:FD:6E
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 019EBFFF8699A9A0EC1FA4991CF844A94672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 05C1
Signing time: Sat 13 Jun 2026 08:00:54 +0000
Manifest this update: Sat 13 Jun 2026 08:00:54 +0000
Manifest next update: Sun 14 Jun 2026 08:00:54 +0000
Files and hashes: 1: 18mBvWMTzIGjuf0KvgUDpqaEgck.roa (hash: GFEk4/+4DhuQ+HzNstdRPkKFI3j7dtiSLG7Lkc2nCys=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: WwgUgtZa1NsW1XQT5zsSsG48vloLBbeJGtnEF2A5R64=)
3: zsYYk54DnHl7eLevLUFDMgKz4P8.asa (hash: 6luWGIPO7hhqIfw0IR/ULYO//RhcC5nGHlt4UBWyulU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:86:99:a9:a0:ec:1f:a4:99:1c:f8:44:a9:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Jun 13 08:00:54 2026 GMT
Not After : Jun 14 08:00:54 2026 GMT
Subject: CN=947a5d391b867599db7edc4c90c9ce333c4cfd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:95:52:22:19:51:28:3a:f9:68:0c:19:94:
52:de:4a:c7:d0:3a:46:6b:dd:fd:3a:ca:98:98:76:
78:36:5d:65:68:08:a2:a5:d0:76:38:0a:95:fb:d5:
1b:9c:61:aa:d6:e2:d1:8d:1f:41:e9:f9:35:62:29:
08:27:56:f3:9f:0c:2b:21:b9:12:13:e2:1a:a6:f4:
ca:e8:1a:2b:b9:f3:2b:33:78:3a:47:b7:b4:22:bb:
0a:49:20:9c:ae:0d:42:cd:54:d9:fb:97:45:be:2d:
d6:00:b9:ba:30:05:ba:10:8f:e0:33:c6:08:0c:23:
9f:ee:dd:fe:79:e2:dc:cd:54:43:e4:72:eb:22:bf:
27:76:b8:cb:90:c6:cf:8b:55:53:80:82:bd:3e:9d:
82:55:74:7f:ec:64:2e:7f:37:b0:2c:a7:72:ed:1d:
6d:75:f5:18:eb:d5:9d:e9:a9:a0:d7:aa:3f:51:fd:
fd:d7:a6:d4:d1:05:44:41:7e:92:a9:5b:6e:58:05:
96:a4:93:12:6b:d6:f8:24:dd:b6:68:9f:16:fd:95:
62:33:6f:87:79:65:38:19:0e:79:43:09:d9:fb:1c:
93:a2:04:1f:2a:84:c6:9c:00:2c:2e:1c:8f:21:69:
6a:de:61:54:17:e3:b6:aa:5b:f5:2b:7e:2b:88:88:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7A:5D:39:1B:86:75:99:DB:7E:DC:4C:90:C9:CE:33:3C:4C:FD:6E
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:96:16:dc:d1:30:6f:70:b0:eb:c1:00:2f:c2:05:71:24:ef:
36:b8:55:10:52:25:b1:04:8d:73:8f:59:e5:ea:58:ac:ec:41:
50:22:d8:f9:cd:de:4f:da:29:95:2c:8d:5c:bb:85:b2:91:13:
76:0a:e3:ce:cd:df:f4:a3:53:24:c9:13:5c:05:e0:c1:3f:c0:
38:a1:d6:ed:68:bd:40:89:85:e4:47:ab:bc:7c:99:50:12:cb:
af:a8:e4:c7:81:97:a3:e4:ca:47:e6:6e:e1:69:85:71:97:9c:
8b:6d:6c:66:0c:d8:c0:d8:8b:da:16:4b:53:78:81:24:e2:49:
e3:db:89:b2:cb:ce:4e:9f:ef:67:c1:1e:db:ad:aa:9e:97:99:
4b:a8:65:30:a9:12:b2:c1:96:d0:6f:6a:49:06:41:1c:c7:ea:
b6:ed:9a:c8:b4:36:e6:31:38:d0:26:50:bc:34:ac:3b:8e:87:
b2:17:89:61:3a:bf:2b:36:b2:ff:26:32:90:82:c2:27:94:28:
5f:f9:36:a9:dd:21:9c:eb:4f:37:96:01:fd:87:ef:a1:56:8c:
14:f4:1b:53:e6:ac:be:1d:58:57:e1:4d:58:64:35:ed:67:76:
12:5b:84:bf:48:a7:78:59:13:26:8f:78:c2:5a:3f:f2:5d:fb:
d1:47:1e:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//4aZqaDsH6SZHPhEqUZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZGMyMTczODhhYTdlOTAyOGRkMWUwNGJhNjQyOTEzNTJk
NjBiZWYwHhcNMjYwNjEzMDgwMDU0WhcNMjYwNjE0MDgwMDU0WjAzMTEwLwYDVQQD
Eyg5NDdhNWQzOTFiODY3NTk5ZGI3ZWRjNGM5MGM5Y2UzMzNjNGNmZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeyVUiIZUSg6+WgMGZRS3krH0DpG
a939OsqYmHZ4Nl1laAiipdB2OAqV+9UbnGGq1uLRjR9B6fk1YikIJ1bznwwrIbkS
E+IapvTK6BorufMrM3g6R7e0IrsKSSCcrg1CzVTZ+5dFvi3WALm6MAW6EI/gM8YI
DCOf7t3+eeLczVRD5HLrIr8ndrjLkMbPi1VTgIK9Pp2CVXR/7GQufzewLKdy7R1t
dfUY69Wd6amg16o/Uf3916bU0QVEQX6SqVtuWAWWpJMSa9b4JN22aJ8W/ZViM2+H
eWU4GQ55QwnZ+xyTogQfKoTGnAAsLhyPIWlq3mFUF+O2qlv1K34riIjqNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJR6XTkbhnWZ237cTJDJzjM8TP1uMB8GA1UdIwQY
MBaAFM/cIXOIqn6QKN0eBLpkKRNS1gvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMt
NWU1YTYyNGQ3NGI4LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMtNWU1YTYyNGQ3NGI4
LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpYW3NEw
b3Cw68EAL8IFcSTvNrhVEFIlsQSNc49Z5epYrOxBUCLY+c3eT9oplSyNXLuFspET
dgrjzs3f9KNTJMkTXAXgwT/AOKHW7Wi9QImF5EervHyZUBLLr6jkx4GXo+TKR+Zu
4WmFcZeci21sZgzYwNiL2hZLU3iBJOJJ49uJssvOTp/vZ8Ee262qnpeZS6hlMKkS
ssGW0G9qSQZBHMfqtu2ayLQ25jE40CZQvDSsO46HsheJYTq/Kzay/yYykILCJ5Qo
X/k2qd0hnOtPN5YB/YfvoVaMFPQbU+asvh1YV+FNWGQ17Wd2EluEv0ineFkTJo94
wlo/8l370UceVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:02:05 2026 by rpki-client