Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
File: Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft (raw, json)
Hash identifier: ojsVpPKppCWj0I1Zv9wcA/sKxzQs7fkbKMDeA/fKlr4=
Subject key identifier: 8D:05:BF:61:E5:3C:C5:F3:35:0A:5F:20:60:D0:3B:7A:E2:BE:12:D2
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 01A0C8584C8F6AA14980337BCE4A3816571A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:24 +0000
Manifest this update: Tue 22 Sep 2026 09:00:24 +0000
Manifest next update: Wed 23 Sep 2026 09:00:24 +0000
Files and hashes: 1: 6LtQiSb78nDyjbmEiYfBW6K94lQ.roa (hash: J7MI4GNzgAtUYP9XKuJ4vcnnaKJ8K4FoSSPzAm0y+FY=)
2: 7HjQZcnyPGzTBbrXVDpIzGTxTAQ.roa (hash: evgW7hhbeIzJbe2wQVkcrOjUE5xE8nomQXZ1TrKMAc0=)
3: 8yzRL6UTfoY2UAWRhFfcY21aiw8.roa (hash: 9a1PcOeE8ZLKSk+KrqFMb26rK/NZVC1SSfxLpvqFg4A=)
4: PKOV_kT6uGHhTn2-6WDHVB3hpzY.roa (hash: FXsrCUeyVdza65q3avYmUJtFZh5GIUafzTy0U+HiLQE=)
5: TAhJXyuaU-go54rMGjVHPRVQsF8.roa (hash: T2ctTiMfso19o9sCdUv1gT123PCz7JSAkNRApoDkkn8=)
6: Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl (hash: YLkypR3TfD/oHBnE3G9epYhOAhr5UwpTwOGf8uQA/k0=)
7: cP1pRSbGF2VydLggt4WcH_Io63k.roa (hash: rej2g9WtxITjbtIMhQNau2HJc/7FPh2+SNTgiY69p1A=)
8: lciHL8Z1BSH4tJKSK6v4VIpHQQQ.roa (hash: n7tikthFcj7M5HJ14fYaGIRaUsjAfU/R0n+U8AFO1ms=)
9: pKcn8ZOkERD-XLZgPeULEQ2qPoY.roa (hash: TDT0jcowVii6rblfICInjysSX3+/qS6/908mLzL3IDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:4c:8f:6a:a1:49:80:33:7b:ce:4a:38:16:57:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Sep 22 09:00:24 2026 GMT
Not After : Sep 23 09:00:24 2026 GMT
Subject: CN=8d05bf61e53cc5f3350a5f2060d03b7ae2be12d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:87:0e:48:dc:c1:a8:dc:17:08:d3:e8:ef:
c5:80:cd:9f:8f:36:a9:e3:0f:f6:2c:87:8d:c7:7e:
12:ff:f3:c4:3b:07:43:16:14:99:99:a7:94:93:bb:
9a:2e:b6:c9:cc:01:44:e3:db:7b:d0:53:e3:31:9a:
7f:db:21:b1:d8:cb:41:f3:3b:79:da:6e:39:fb:8b:
b1:ef:a2:b7:6b:ff:a6:3b:90:91:6b:15:45:ac:f7:
ac:e0:60:d2:ea:fd:29:8d:42:d7:a8:33:2c:cd:d6:
7a:d5:97:24:4b:93:93:1b:54:f2:d3:32:8e:40:28:
38:13:d4:60:0b:b3:e5:5e:79:cb:96:2c:48:57:61:
9c:6d:13:17:8a:51:76:e8:83:ea:8d:98:6b:72:9c:
45:6d:b8:58:fa:ee:cd:c6:2b:b7:36:81:bc:91:d4:
fb:6a:f4:8c:6d:88:81:61:fb:26:12:cb:93:a6:f7:
b2:d5:2b:30:f4:f3:b5:ae:a7:a7:cf:73:ad:00:ce:
97:47:05:9d:54:aa:c9:e4:cb:69:05:da:e8:11:41:
00:cf:17:ef:2f:09:e0:07:80:cd:5d:e2:53:36:62:
92:8a:66:93:b6:39:d1:c8:0e:f9:f5:b3:50:6c:9f:
fc:79:45:58:d3:95:a7:db:d9:54:47:32:7a:66:09:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:05:BF:61:E5:3C:C5:F3:35:0A:5F:20:60:D0:3B:7A:E2:BE:12:D2
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:29:95:c3:ff:59:47:28:43:09:e3:9c:fa:58:38:95:96:31:
69:93:13:4f:7b:d2:8c:af:fc:ea:ae:5f:ad:01:c0:8a:9a:d4:
79:42:01:c8:56:c8:f7:a9:8b:99:4d:55:79:c4:84:43:0b:d1:
07:62:cc:51:6f:5e:51:1e:18:4a:f7:99:95:6c:0e:8e:1c:1c:
24:13:5c:70:72:5d:5a:fb:2f:b0:05:80:0b:f4:a2:4c:da:24:
08:02:f3:0b:fa:4b:a6:0f:47:a7:d2:a9:c8:2b:fc:43:fe:51:
ac:e5:5c:12:a8:c8:7d:32:c9:d2:80:e4:5a:d4:d7:b3:c5:eb:
9d:d6:ee:30:c1:44:9e:2f:c3:08:be:80:ca:da:cb:93:8c:c4:
16:ca:aa:2e:cc:53:fe:05:c2:5d:4a:0a:17:61:09:5f:ef:3a:
c5:c6:eb:3f:c8:f0:e2:d2:07:59:f0:b3:0b:a0:30:30:d7:05:
3f:dd:c8:fc:de:37:db:c3:eb:94:a4:60:d1:f7:38:02:62:84:
a9:27:f7:7c:48:0b:2a:1a:32:04:15:29:8a:c6:48:4f:75:22:
a8:60:1a:6c:1d:b3:d6:34:a1:bf:c9:00:0a:14:d6:84:da:d5:
79:47:82:48:19:f0:7b:1b:ae:60:58:b8:0f:9f:20:48:ba:fa:
da:7d:3d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:18:23 2026 by rpki-client