Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json)
Hash identifier: ajqpll967zVbM9LDhx1mkVTu16y1EcIywZDGF/KoKlo=
Subject key identifier: AC:C5:F1:3E:63:BF:45:AC:62:8D:A1:69:5A:39:02:BC:4E:8B:F7:03
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 019D99D0B749E2ADFEC536F2B00E0F64DAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
Manifest number: 0D14
Signing time: Fri 17 Apr 2026 05:01:25 +0000
Manifest this update: Fri 17 Apr 2026 05:01:25 +0000
Manifest next update: Sat 18 Apr 2026 05:01:25 +0000
Files and hashes: 1: 6Jo867Q7kI_xg37Z2hR0Zp-bKLA.roa (hash: nuQ+eCxmU3VLRBrNEQL/R2CLOaS7uJaHx+gJkQcGWrE=)
2: bpCdtlID1rH2DrjVzMcBmork2aQ.roa (hash: BSKDPkYhU8I5fR9wBcNo+U5cc/fHr2mCsZj2Lep7Q84=)
3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: Th9dZNlCdIUFET8mmYT9CHWVyvSqSwkAxnnjcq6yytw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:b7:49:e2:ad:fe:c5:36:f2:b0:0e:0f:64:da:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Apr 17 05:01:25 2026 GMT
Not After : Apr 18 05:01:25 2026 GMT
Subject: CN=acc5f13e63bf45ac628da1695a3902bc4e8bf703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:40:8e:50:d7:12:7c:80:aa:9f:7d:a1:f6:ba:
e1:5e:74:be:16:f5:0b:a1:2c:ca:53:ce:4c:f2:34:
a6:06:49:2e:66:2d:2b:3a:5e:e7:cc:8e:e5:40:97:
1e:eb:8d:8b:fd:0d:ec:c9:37:0b:7c:9e:ac:9a:1d:
e7:3a:45:ea:ab:d1:78:c7:9d:9f:2c:5f:7c:17:ac:
f7:49:5f:bc:51:a9:ee:61:41:94:c8:51:17:92:c6:
e6:54:6f:38:4a:ab:ef:cf:54:2b:79:7d:b7:cf:32:
78:1f:28:76:26:43:c8:5f:95:f7:92:62:23:5d:df:
5a:0f:39:ad:93:68:f9:c0:35:e0:42:ea:df:4b:03:
2f:63:b5:4d:1c:66:c2:4c:de:58:66:4d:a2:4c:82:
cb:df:d4:1e:58:cb:43:e5:68:8d:c9:56:8f:9f:36:
7f:a6:32:0a:8b:8d:4b:42:cf:77:38:15:ac:ff:ee:
18:94:36:1b:cf:2e:6f:63:13:57:7d:05:10:e5:02:
bd:18:7d:83:57:de:a5:53:af:b9:17:c8:f9:2b:df:
fb:4b:c9:14:1c:bc:fa:dc:80:61:12:ef:3a:ae:05:
ec:59:4d:f4:02:47:38:1f:3d:b2:4a:84:67:77:50:
4e:b9:ce:58:ad:10:59:c8:7e:b9:d1:51:cf:cd:a5:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C5:F1:3E:63:BF:45:AC:62:8D:A1:69:5A:39:02:BC:4E:8B:F7:03
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1c:e6:22:cb:f3:f9:7e:33:46:87:e5:46:30:57:4a:77:4c:
53:39:22:67:3b:c7:ce:1f:54:0f:4d:da:85:6c:fd:21:91:01:
41:e5:34:62:e6:e2:06:1c:8f:85:e0:b9:f1:9c:ee:47:a6:d4:
10:8a:9f:e3:fe:80:ff:53:fd:25:bc:c9:1d:82:83:d7:c5:85:
72:87:7b:aa:ce:59:b5:81:90:68:28:0a:89:10:ed:b2:00:c4:
4b:9d:6b:5c:fb:9a:50:16:13:df:9d:21:25:ee:aa:37:9b:96:
7d:42:07:98:16:ed:39:e2:dd:1d:61:61:e4:62:cb:be:16:3c:
82:71:30:45:b7:ea:e4:f8:96:3b:cc:40:e0:61:05:7d:82:0b:
4e:d7:12:36:af:e7:68:7b:1c:4a:6c:a3:4f:9c:43:62:79:5e:
e0:95:44:a5:fe:d1:1c:18:95:84:8c:bf:45:a8:80:7b:8d:6f:
fb:e8:59:2c:43:94:e5:2a:e2:16:f0:ba:0a:08:a5:df:24:88:
a8:82:7b:3e:7f:5c:b6:29:c5:f4:e1:69:8c:1b:d6:a9:14:8c:
fc:de:86:f7:de:fb:fe:f1:28:b6:b2:4b:50:e8:0b:1b:3a:33:
5c:46:d9:47:43:8f:e6:b2:6a:9a:d0:22:c7:18:6e:b8:b5:9d:
05:0a:90:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:17:47 2026 by rpki-client