Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: jIsiTgqK3RXF8KClvhdDXYMx0imWdWlgxByy6eHv6I8=
Subject key identifier: 8F:D9:01:F8:3E:E6:EF:76:3A:EA:F3:3D:D6:A7:3C:9F:B0:08:D7:77
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 019D999960AF0285895D687522B923204805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 08FA
Signing time: Fri 17 Apr 2026 04:00:58 +0000
Manifest this update: Fri 17 Apr 2026 04:00:58 +0000
Manifest next update: Sat 18 Apr 2026 04:00:58 +0000
Files and hashes: 1: aESuuALkp9R98yDiNUY5nveL4-o.roa (hash: o135yeh0bwtH5IHdNJMNH9c/+RcrghX/j14puM1j2sk=)
2: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: 9tmyzS6lCfFja6pUchXl/6B9XVoQsJD9ev31JRbPsJc=)
3: zp6kT4fjph_A7Z-y494w10c-4u0.roa (hash: WOnZMPb4q3t7/YEohAO+g25GuBKKPvaAblQVDeWj5K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:60:af:02:85:89:5d:68:75:22:b9:23:20:48:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Apr 17 04:00:58 2026 GMT
Not After : Apr 18 04:00:58 2026 GMT
Subject: CN=8fd901f83ee6ef763aeaf33dd6a73c9fb008d777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:7e:9c:63:d0:71:0e:6f:a1:c7:c0:8b:9a:
f0:a8:7c:e6:9a:1d:b9:30:54:19:13:40:38:35:29:
aa:03:02:b5:c4:0e:f6:3f:4b:5e:92:4f:cc:1a:6a:
f3:5c:f1:7e:a9:fe:1c:7b:54:c6:15:ca:14:dc:1a:
e0:dc:aa:61:de:4b:e0:03:06:fc:0e:eb:9f:4b:da:
dd:ad:a2:65:5e:ae:1f:6f:bd:74:00:d5:05:91:15:
c4:a6:af:06:d9:42:36:b6:1f:ac:b0:d4:2a:04:5d:
dd:cc:0f:7a:fe:26:19:1e:f2:ac:f4:b4:63:3f:4d:
79:c3:de:03:b7:e8:50:70:f6:a5:43:ab:11:f6:08:
dc:ea:f6:5f:2c:62:df:05:37:a6:1c:58:d6:7f:69:
0b:72:88:2a:59:92:3c:96:b3:15:1c:cf:32:64:f3:
57:a3:fa:37:d0:34:16:d4:bb:7d:b6:d7:c9:02:99:
b0:66:c9:3e:16:77:2b:e3:73:f5:00:2b:e7:1d:f5:
c2:33:57:c5:1d:98:fd:87:56:7e:94:c1:40:bd:89:
d3:ce:f3:ff:5d:9b:82:e9:7d:67:9c:c3:5e:07:da:
49:23:08:6a:b7:45:6e:f9:ac:da:ff:10:b4:82:c2:
5a:bb:bd:ab:4c:ec:e0:4b:27:4d:b0:20:e9:0f:4b:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D9:01:F8:3E:E6:EF:76:3A:EA:F3:3D:D6:A7:3C:9F:B0:08:D7:77
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:98:1b:b8:f4:9e:8b:5c:32:ae:e3:56:cb:dd:4e:5f:5d:fe:
93:e7:e6:68:41:b4:a6:a1:69:43:3f:e0:23:fb:2e:c7:2d:7e:
cb:07:57:e2:56:7e:b9:3f:5b:ca:99:cc:72:8e:9d:f7:bb:e7:
ae:9d:ee:7b:08:ee:3d:b6:68:25:50:eb:7b:33:a4:20:31:8c:
cd:ec:87:84:98:28:b5:ad:46:6a:65:11:a0:86:01:4e:a6:f3:
86:8c:b1:f9:5b:cf:f5:5a:fc:e1:12:8b:61:1f:99:b1:de:9a:
d3:e7:19:a3:d3:06:8d:23:82:cc:2d:4b:27:c7:fe:9b:20:ba:
2b:d7:2a:92:a7:37:71:64:99:60:96:5e:24:21:cd:ca:dc:66:
ff:b1:eb:a4:55:5f:d7:9c:71:64:51:7a:3f:8b:8a:c1:9e:36:
5e:2b:b4:62:04:43:99:6a:54:71:a4:be:62:53:29:c8:f2:1b:
41:28:16:ec:3e:22:65:5c:c1:2e:d3:78:52:80:20:50:11:5e:
44:19:39:81:74:aa:ca:75:fc:d9:3f:fb:1e:93:97:6c:21:59:
fc:f0:93:1f:98:cb:b1:09:47:0d:48:6a:5d:97:52:20:49:53:
d0:d7:7d:98:7e:a7:e9:29:db:68:b7:24:b4:3d:9b:d8:07:2a:
58:7d:d0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:10 2026 by rpki-client