Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: NaDOmW93D2Q2TGRf9NOJsX9MKXau0bJvbEPqsWM7qwQ=
Subject key identifier: 6C:6D:10:DF:74:DC:C9:0F:4A:E8:43:4F:CC:2B:6D:F8:81:50:25:A1
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 019D98BD4F9D6245DD806175BF9337BA0018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 09EE
Signing time: Fri 17 Apr 2026 00:00:36 +0000
Manifest this update: Fri 17 Apr 2026 00:00:36 +0000
Manifest next update: Sat 18 Apr 2026 00:00:36 +0000
Files and hashes: 1: YwHwj8nGu01b4DGoJo7OQzmm9y0.roa (hash: GeDg67muROb7D4h2X9co29gZ5d0QPL0hSd4Vfj1zmeY=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: q1DB3nKLEd/IbqzDj8lViXiHg2bRtghGpp47KCRT9gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:4f:9d:62:45:dd:80:61:75:bf:93:37:ba:00:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Apr 17 00:00:36 2026 GMT
Not After : Apr 18 00:00:36 2026 GMT
Subject: CN=6c6d10df74dcc90f4ae8434fcc2b6df8815025a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:0c:48:67:a5:a2:fd:54:35:b2:c9:52:5e:
97:2c:8f:d3:ba:fd:d2:5f:57:79:08:67:37:9a:56:
88:3e:4a:d9:c8:21:d9:06:30:50:80:df:8e:3f:97:
c6:2b:76:b9:89:98:ef:a9:89:9d:cc:63:18:e2:f8:
8e:6c:00:bb:72:23:2c:74:e9:31:71:64:f4:95:a1:
56:44:f9:5f:59:57:a5:11:a6:f3:e4:98:fe:2e:9c:
b9:c0:17:fc:64:bd:ab:ee:b2:39:80:08:1b:44:8b:
d1:3e:2c:1f:95:65:d2:3e:46:75:d7:95:ee:66:b4:
8b:72:f8:7f:fa:46:12:b7:7d:c3:3d:bd:08:27:d1:
8b:e3:96:38:49:23:5c:ed:55:0f:fe:2b:fd:39:51:
7e:58:ab:cd:12:33:cd:d5:36:62:41:66:34:a4:aa:
d1:56:6c:cc:d6:cb:f5:80:c1:3d:f4:4e:a0:d3:57:
3a:bf:05:ad:c3:aa:14:29:71:55:f4:ce:f6:03:58:
8d:af:96:64:8d:da:20:44:72:b6:f3:5f:36:b0:ca:
66:70:20:1e:c1:c4:ac:5a:cc:0d:8e:52:2c:70:58:
ec:a1:83:70:b7:de:10:26:a7:8e:d3:e2:30:59:81:
ab:e9:94:40:4d:56:00:55:b6:23:c2:fb:7f:09:df:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:10:DF:74:DC:C9:0F:4A:E8:43:4F:CC:2B:6D:F8:81:50:25:A1
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:eb:20:f9:99:13:d3:cc:56:cf:6d:ef:84:3a:27:e7:b6:d6:
1a:38:48:61:cc:5b:62:88:c3:f5:ee:23:90:ef:32:91:36:a1:
65:20:12:dc:1f:b5:5c:a7:eb:9d:14:55:5f:9f:3f:10:58:38:
55:ff:b5:77:4a:cb:9f:0a:17:17:3d:5c:16:55:3a:9f:a7:cf:
77:16:47:6e:0f:ca:03:29:44:cf:c9:f1:80:2d:b4:6c:43:83:
39:7a:38:f5:9b:55:d9:a6:7d:26:b3:69:d6:82:a3:95:fe:48:
88:b8:31:51:aa:a2:dd:52:3b:bf:5e:3b:58:c3:8c:82:cc:04:
a3:b1:77:5b:94:3c:a4:8d:32:92:8b:06:f9:1d:21:97:46:cf:
37:41:03:a0:8b:ec:54:6b:2f:f9:7f:d3:ac:c2:97:86:49:20:
c9:68:cc:a2:e2:4a:11:a8:a8:ff:8a:dd:ad:a4:ea:7f:5e:3a:
88:31:69:ea:43:f1:8f:cf:6f:ef:11:72:9f:c9:17:ab:a9:c2:
fb:13:16:6a:ab:e9:96:33:51:c0:5a:05:52:8f:e0:d3:2d:16:
a9:c9:44:38:b6:b8:fd:b6:4f:d4:22:d6:99:4b:6f:ea:ab:18:
19:30:62:df:15:e8:18:6a:d4:cc:ab:4f:a3:35:eb:3a:1a:7f:
a6:f2:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:52 2026 by rpki-client