Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: IEEThHTp6zBCXxVD50p26PIooVwrc+ybkSJ9uvS0Ykc=
Subject key identifier: 54:D8:04:AA:96:73:F0:03:D9:AD:86:DC:6C:BD:9B:93:41:BF:DE:70
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 019CAB344A76F6831F0AA3FFB29CEB4DEAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 0973
Signing time: Sun 01 Mar 2026 21:00:56 +0000
Manifest this update: Sun 01 Mar 2026 21:00:56 +0000
Manifest next update: Mon 02 Mar 2026 21:00:56 +0000
Files and hashes: 1: YwHwj8nGu01b4DGoJo7OQzmm9y0.roa (hash: GeDg67muROb7D4h2X9co29gZ5d0QPL0hSd4Vfj1zmeY=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: 6/UkyrN4134qUpeTEvIFY2Hgv6pInCa88GS9EyKTPM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4a:76:f6:83:1f:0a:a3:ff:b2:9c:eb:4d:ea:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Mar 1 21:00:56 2026 GMT
Not After : Mar 2 21:00:56 2026 GMT
Subject: CN=54d804aa9673f003d9ad86dc6cbd9b9341bfde70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:6b:7f:d8:86:e9:a6:06:65:33:f3:93:60:
f5:81:52:bc:7d:bf:58:88:54:8b:38:82:8c:4a:55:
a4:5b:07:88:60:7d:cf:90:8b:82:9d:db:93:4f:39:
fe:b7:a9:dc:25:1c:b3:9d:42:3e:a3:53:c1:5d:ea:
f4:0c:e0:af:ce:ed:22:82:cd:24:ee:4b:0d:9c:4c:
c0:44:41:5c:05:e8:8c:9e:2c:c0:25:9d:87:94:7e:
42:6f:6d:d6:15:84:bd:77:f0:2c:44:4c:99:38:b0:
94:10:26:ca:f4:50:0a:6e:68:0a:b0:2f:d4:ce:0d:
71:eb:99:69:f8:97:cc:1c:16:0c:e8:66:d4:a9:c6:
40:7f:09:2b:5b:db:00:09:b6:7b:19:2d:b7:c1:b5:
a7:5a:82:e7:20:8e:02:b8:f6:09:32:83:09:a1:ae:
47:53:45:7f:f6:8f:bb:eb:a3:b7:fb:99:0b:6f:eb:
f4:f5:48:0c:d9:f0:74:ad:cc:a6:a2:a9:ae:3b:cd:
01:a4:da:3b:93:02:86:33:63:89:54:12:b3:2b:29:
fa:c0:32:18:4f:d6:1e:8d:c4:6d:41:36:a0:9a:c1:
01:10:2d:e9:ee:89:34:c1:20:8d:2a:8a:15:77:b4:
10:a4:b3:4f:5c:0f:0e:5a:0a:01:10:ad:6d:f6:4d:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:04:AA:96:73:F0:03:D9:AD:86:DC:6C:BD:9B:93:41:BF:DE:70
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:22:26:78:5c:0f:59:fa:16:e7:fa:dd:7a:9f:19:df:a5:86:
e0:4e:25:f7:86:0c:70:bf:20:df:7a:d8:0a:a1:19:68:08:50:
85:3e:3e:43:2d:0f:7c:09:5d:62:28:3b:13:14:d4:8c:55:42:
30:8d:80:80:b5:97:ff:43:14:55:8c:4c:d3:23:bc:10:7c:42:
82:71:70:dd:f5:50:38:65:f3:3d:7d:2a:2f:d6:94:47:df:ba:
61:99:0f:73:ce:3e:8a:47:22:2d:11:69:11:2f:64:c3:75:91:
b2:48:eb:b3:2d:a1:f7:59:2a:68:02:d2:36:ce:35:8e:84:4d:
eb:f6:a9:d6:5e:93:72:8d:29:02:8d:28:a9:81:4e:c1:ef:e3:
9e:a0:7b:f4:35:7b:45:ca:2b:b1:9b:09:fb:45:99:18:17:36:
80:27:f8:45:3d:f1:0d:27:18:54:4c:ed:89:6a:8a:55:1d:0c:
6e:90:7c:90:d8:fd:8c:46:60:f2:33:6c:1b:ad:1d:35:9d:57:
e8:74:f4:93:59:15:d3:e1:dc:59:57:d7:d7:1d:81:7d:bc:c4:
45:b6:56:4e:5d:28:2d:d6:44:18:e3:60:ff:3a:3d:3d:fc:16:
b4:95:dc:6a:dc:04:da:22:91:a4:40:e8:65:a1:94:d6:b1:32:
43:75:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:59 2026 by rpki-client