Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.mft
File: z8vCpnmN-fkdW-nz18oKI5p_xVg.mft (raw, json)
Hash identifier: eZNoRGkyRGpNoOqayTTwa0u71ixTJvNVmkFXyMri1W4=
Subject key identifier: 2C:05:4C:BD:E1:3D:78:09:F4:45:E6:00:22:BF:08:5A:23:03:A8:27
Authority key identifier: CF:CB:C2:A6:79:8D:F9:F9:1D:5B:E9:F3:D7:CA:0A:23:9A:7F:C5:58
Certificate issuer: /CN=cfcbc2a6798df9f91d5be9f3d7ca0a239a7fc558
Certificate serial: 01A0C5FCE6B8BEA405DDFA64416630A616A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8vCpnmN-fkdW-nz18oKI5p_xVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.mft
Manifest number: 22
Signing time: Mon 21 Sep 2026 22:01:20 +0000
Manifest this update: Mon 21 Sep 2026 22:01:20 +0000
Manifest next update: Tue 22 Sep 2026 22:01:20 +0000
Files and hashes: 1: UDH_1tnf99LPgPhIT1ItGY9SsOs.roa (hash: 0E5qq9ZTPli2QQSs3YDaqQLmpnDd0gKNyl9jc1IWEm0=)
2: z8vCpnmN-fkdW-nz18oKI5p_xVg.crl (hash: AoHZG/oAG0skcbm6xyF2dHylF3wodrJPE4pSGKfOSOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8vCpnmN-fkdW-nz18oKI5p_xVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:e6:b8:be:a4:05:dd:fa:64:41:66:30:a6:16:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcbc2a6798df9f91d5be9f3d7ca0a239a7fc558
Validity
Not Before: Sep 21 22:01:20 2026 GMT
Not After : Sep 22 22:01:20 2026 GMT
Subject: CN=2c054cbde13d7809f445e60022bf085a2303a827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:be:c5:7a:cb:21:e8:d6:31:39:4f:e2:e2:
29:06:c5:30:eb:f0:21:54:ce:aa:ef:03:03:73:2b:
3a:ec:71:86:14:b6:54:4e:1e:18:b2:92:e0:7e:1c:
40:e7:dd:61:5d:ab:49:29:8a:4c:29:d5:66:fa:9f:
70:90:77:4b:fd:e0:29:7e:07:c6:0c:20:72:38:49:
bf:4f:0e:0f:04:dc:71:91:47:e1:5a:9b:77:45:7b:
e8:95:5e:f8:a4:58:d7:e2:1e:cf:64:c4:05:39:7f:
58:bc:fe:76:ea:9a:db:22:b5:a6:d2:77:cd:5c:f5:
6c:0f:8b:dd:12:aa:d9:b9:a7:36:65:95:b8:5f:9e:
79:10:14:b2:07:1b:d8:e7:1e:4d:10:53:39:8f:ac:
a0:66:f5:fe:bb:1a:a6:f6:62:e4:ce:63:8c:1b:59:
8d:28:2a:16:17:f0:d1:c7:d6:a1:3c:ce:8c:07:ae:
4d:21:64:1d:03:56:05:97:5f:96:9a:3e:4c:e6:e9:
b3:dc:ec:22:45:76:85:9a:59:b5:f2:96:ed:df:98:
e3:ca:81:05:2a:ab:e6:97:7b:90:f7:cc:5e:18:d3:
fe:8e:a2:09:bc:14:60:c5:a9:13:55:89:ba:f3:ee:
89:6a:a7:32:63:4e:a5:d3:75:3c:2c:2c:25:d9:ed:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:05:4C:BD:E1:3D:78:09:F4:45:E6:00:22:BF:08:5A:23:03:A8:27
X509v3 Authority Key Identifier:
keyid:CF:CB:C2:A6:79:8D:F9:F9:1D:5B:E9:F3:D7:CA:0A:23:9A:7F:C5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8vCpnmN-fkdW-nz18oKI5p_xVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:40:ff:c5:c6:79:56:5d:b6:53:b4:ab:c9:7f:71:11:1d:ac:
75:9b:1c:b4:80:ac:f9:b8:58:f1:d3:ca:88:87:9b:14:58:01:
11:87:7b:18:f1:e3:c1:d4:1f:da:63:fc:ff:67:3a:b7:7f:c5:
2f:9f:28:0f:6d:b1:00:67:71:99:3c:72:e1:88:d0:12:d4:f3:
2f:94:03:6c:a8:90:75:bc:d4:14:d8:12:f3:71:35:d2:a9:77:
f7:42:7a:9b:2d:06:95:f4:05:0e:be:c9:40:0e:b4:40:f0:80:
57:25:1d:e0:61:de:ad:e9:6e:d0:f1:5c:ab:66:77:fc:4a:22:
8d:b9:a4:ed:53:18:96:f5:94:e9:5f:74:73:c6:4a:8a:06:c4:
5a:7d:19:73:36:2a:a0:2e:4e:1c:3b:e5:0b:69:01:ec:9c:ba:
a5:f0:2d:7c:1a:2f:62:dc:e9:0c:b3:ec:88:3c:fe:fb:5d:17:
e1:ac:d0:c7:a2:07:26:a1:52:c6:75:ff:11:9c:1f:a8:59:d4:
08:aa:ec:9f:6d:58:1a:bc:ba:b5:2a:23:c9:5d:a9:20:43:a9:
8e:24:23:a8:03:52:d3:1c:12:04:91:63:a5:f3:e9:52:a5:3d:
52:ab:4f:a2:a1:80:17:a9:0c:21:a5:f5:95:c5:de:6d:f9:99:
06:f1:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:02:52 2026 by rpki-client