Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: hYyGyqPRv58QbliPHK4iZpPE99QxNBr2GlxOpjRtC9Y=
Subject key identifier: A3:F0:31:69:96:C9:07:2E:D5:D4:24:FF:22:47:4D:ED:8E:7D:93:8E
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 01A0C8214C481C0DE013751E00E74A090904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 0460
Signing time: Tue 22 Sep 2026 08:00:20 +0000
Manifest this update: Tue 22 Sep 2026 08:00:20 +0000
Manifest next update: Wed 23 Sep 2026 08:00:20 +0000
Files and hashes: 1: HfBJ2Nut_YAQuWjhDmP8H2eMvJ8.roa (hash: qlvHpaLVzXcUtxyLFD8U+1k01vVLX6TwfsOJYC4Ocds=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: FG9fFgZnTHTscZZQVl3rCUrkzpxCQzZVrPGFI4GmTbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:4c:48:1c:0d:e0:13:75:1e:00:e7:4a:09:09:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Sep 22 08:00:20 2026 GMT
Not After : Sep 23 08:00:20 2026 GMT
Subject: CN=a3f0316996c9072ed5d424ff22474ded8e7d938e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:f9:3a:6a:69:86:df:ec:1b:42:01:1c:43:
de:e6:89:fc:c0:5a:7c:c5:b3:ef:be:2e:11:21:82:
40:8e:ef:21:69:73:1a:6b:95:7e:6a:8a:c0:e9:46:
10:74:03:96:3a:df:f5:d6:b4:98:bb:50:b0:e9:49:
8c:8e:a6:c3:4b:4f:a7:bf:a2:7c:37:05:e0:b0:09:
a0:5c:27:f1:36:2b:53:2d:4a:84:17:89:95:8c:1f:
3d:59:0f:e3:8f:35:3b:0f:c2:4a:a5:b0:cf:33:b4:
66:32:2a:54:37:26:ce:09:4a:db:04:97:cc:dd:6d:
f8:f7:a2:3f:ba:a9:ab:91:eb:ed:7f:ac:22:23:1d:
5f:79:1b:1d:ed:28:d0:48:99:ed:6b:23:52:64:c1:
7b:b3:85:ed:04:fa:61:7c:1b:f1:30:a5:b1:1e:f2:
fc:51:1c:b1:c1:9b:1b:ff:5e:59:a5:38:6a:0c:17:
61:cd:31:fe:a6:28:77:75:17:a0:1f:16:83:64:90:
30:3e:00:5a:6d:64:94:0e:8c:00:35:1a:50:08:1d:
1b:8b:04:fd:34:83:8a:64:67:33:8a:78:29:13:c2:
8e:dc:d5:95:95:8c:1a:c7:c2:ce:90:e7:e8:06:bf:
f0:0b:ee:eb:54:0b:27:7b:c0:f6:66:14:e0:d9:51:
35:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F0:31:69:96:C9:07:2E:D5:D4:24:FF:22:47:4D:ED:8E:7D:93:8E
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:df:a6:6a:1c:31:06:ba:d5:c2:78:6c:b0:57:34:6b:c4:7e:
23:34:28:bc:c4:65:5f:cc:56:00:53:88:24:c3:f8:1a:96:6f:
d7:60:91:b5:6a:3f:63:1d:81:ae:0b:bc:e2:92:87:79:a7:1f:
fc:44:94:de:17:31:dc:83:b4:38:86:c6:38:b0:9b:31:3c:3e:
41:f3:3e:2d:89:7a:d3:c7:2b:81:e1:ec:71:79:f1:87:39:9f:
b2:b7:a9:80:d8:86:b8:78:81:4e:f7:4c:fa:df:0e:32:21:a9:
a1:27:39:db:76:e7:39:82:5f:d5:6e:b4:82:89:cb:55:c7:bb:
9a:86:0e:f7:0f:d7:b0:9e:9f:23:f1:b8:6b:3b:98:1e:46:62:
f3:ea:1f:ec:7d:33:b9:43:0b:c4:d2:dc:8d:6f:ab:af:1a:77:
bd:46:bb:87:a1:03:86:91:fe:ef:d0:00:f4:9e:df:49:30:83:
03:1f:00:68:10:d6:62:4a:c3:7c:52:eb:cf:0c:99:a4:fb:8f:
4f:41:2e:ef:c1:b8:28:48:72:0d:e3:62:88:5f:09:7d:17:49:
28:5e:d7:d5:1a:3c:0f:61:fc:83:fe:fc:c5:d2:4d:c8:71:c2:
35:bb:13:55:8a:15:4d:73:35:44:bb:c2:38:31:09:48:3f:13:
78:0f:c8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:34:18 2026 by rpki-client