Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
File: Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft (raw, json)
Hash identifier: 4zh/ZiNEydfGABqSiGv1EiuH6W4LM7VpU6dAFHr1aLY=
Subject key identifier: A2:C9:C9:88:38:6E:E9:DE:CF:C9:7B:43:E0:D9:03:96:11:81:31:04
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 019FAC75B1FFDC8854AE0FB03471978AD225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:22 +0000
Manifest this update: Wed 29 Jul 2026 06:00:22 +0000
Manifest next update: Thu 30 Jul 2026 06:00:22 +0000
Files and hashes: 1: 6LtQiSb78nDyjbmEiYfBW6K94lQ.roa (hash: J7MI4GNzgAtUYP9XKuJ4vcnnaKJ8K4FoSSPzAm0y+FY=)
2: 7HjQZcnyPGzTBbrXVDpIzGTxTAQ.roa (hash: evgW7hhbeIzJbe2wQVkcrOjUE5xE8nomQXZ1TrKMAc0=)
3: 8yzRL6UTfoY2UAWRhFfcY21aiw8.roa (hash: 9a1PcOeE8ZLKSk+KrqFMb26rK/NZVC1SSfxLpvqFg4A=)
4: PKOV_kT6uGHhTn2-6WDHVB3hpzY.roa (hash: FXsrCUeyVdza65q3avYmUJtFZh5GIUafzTy0U+HiLQE=)
5: TAhJXyuaU-go54rMGjVHPRVQsF8.roa (hash: T2ctTiMfso19o9sCdUv1gT123PCz7JSAkNRApoDkkn8=)
6: Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl (hash: wHmE9d3tqPeaVHsVncDGQA1QVYS7vCM89dv062/E7HA=)
7: cP1pRSbGF2VydLggt4WcH_Io63k.roa (hash: rej2g9WtxITjbtIMhQNau2HJc/7FPh2+SNTgiY69p1A=)
8: lciHL8Z1BSH4tJKSK6v4VIpHQQQ.roa (hash: n7tikthFcj7M5HJ14fYaGIRaUsjAfU/R0n+U8AFO1ms=)
9: pKcn8ZOkERD-XLZgPeULEQ2qPoY.roa (hash: TDT0jcowVii6rblfICInjysSX3+/qS6/908mLzL3IDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:b1:ff:dc:88:54:ae:0f:b0:34:71:97:8a:d2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Jul 29 06:00:22 2026 GMT
Not After : Jul 30 06:00:22 2026 GMT
Subject: CN=a2c9c988386ee9decfc97b43e0d9039611813104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:b7:81:06:86:72:42:da:3f:33:22:72:0c:
56:03:99:94:66:92:ee:bc:73:d7:53:02:d0:05:5f:
7b:59:af:5f:91:ae:f3:fa:73:ff:9d:a6:cb:b2:b3:
99:4b:c5:c0:04:63:80:cd:e5:bb:3b:93:79:ef:11:
45:d6:b7:3d:57:77:80:5b:1b:86:29:5c:a2:d3:97:
84:e5:b5:be:ef:99:b8:d6:43:8e:f6:f0:10:2f:bf:
3c:a7:a9:0f:07:7c:3b:04:26:1d:83:5c:b4:bf:bc:
f3:4f:4c:e2:86:f8:03:1c:21:81:fa:7e:b0:e9:cb:
19:0d:70:95:69:69:c6:56:3a:fd:fc:65:a8:f2:4a:
7b:c5:70:b6:a7:30:43:ba:2b:77:5e:04:f9:21:6c:
1f:ae:3c:8f:68:17:b7:e9:3d:29:0d:39:bf:89:39:
28:97:e1:19:7d:ba:08:75:af:6d:99:81:92:bb:67:
fa:b0:5f:7b:6a:fe:d2:58:d2:cc:2d:64:8b:35:7e:
10:7b:6c:a2:1d:5b:8f:67:81:0f:33:8f:63:56:49:
d7:4b:e7:92:7b:bc:b6:25:97:4f:7b:58:9c:c1:58:
29:c5:fc:d0:d2:4b:cc:b1:7e:3c:f6:96:11:68:d4:
8e:96:4e:64:17:54:bf:2b:3d:94:db:d8:9f:a7:85:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C9:C9:88:38:6E:E9:DE:CF:C9:7B:43:E0:D9:03:96:11:81:31:04
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:31:18:6f:84:67:1e:1e:bb:f8:ef:ed:d5:f8:03:a4:37:fa:
ef:11:dd:92:b3:17:aa:32:7b:78:30:41:8f:d3:dd:31:9e:61:
28:3a:28:11:41:7a:de:4e:1a:ef:30:13:1b:bb:38:ec:32:ed:
f6:f3:ae:83:7f:c6:69:85:ae:ff:9a:6d:da:5e:5e:e5:fe:39:
69:3a:62:e0:9a:a0:19:90:7e:50:41:bf:3c:42:dc:d2:df:c6:
2e:47:5c:03:5c:e3:8a:5e:0a:ee:9b:fd:64:bc:52:b5:55:b6:
c8:58:38:59:95:c0:2c:58:ce:03:40:29:f2:d2:6c:43:51:b6:
d5:84:c1:e9:dd:3f:65:fc:19:78:23:b9:fc:16:6f:bd:81:2a:
5f:15:5a:7f:9c:21:d0:99:78:c9:3a:26:bc:88:99:88:eb:79:
ed:d7:26:bb:b6:12:19:f9:ea:0e:ae:46:25:e2:41:1a:e3:0a:
00:c4:c9:2b:72:b6:7e:24:be:9e:ca:a8:36:b4:9b:c2:4c:2f:
d1:33:06:36:9b:aa:27:02:58:af:15:49:49:11:a8:2b:14:61:
23:7f:bc:ed:ce:d2:56:46:ab:5c:dc:a8:d2:86:a7:b6:36:22:
e6:02:ed:41:56:4f:b6:bb:96:d0:b9:cd:dd:12:c7:b5:d8:47:
16:66:dc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:02:49 2026 by rpki-client