Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: OrjLH0bGyhTvWc/OutnOe0wqJG1u/D4lvOvKovtJins=
Subject key identifier: EC:26:E6:D5:09:1E:D7:46:87:B0:3A:34:21:A6:E2:6D:68:62:31:F8
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 019D9B19926D5651FF054B272AA9DEDAA087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 02BB
Signing time: Fri 17 Apr 2026 11:00:37 +0000
Manifest this update: Fri 17 Apr 2026 11:00:37 +0000
Manifest next update: Sat 18 Apr 2026 11:00:37 +0000
Files and hashes: 1: HfBJ2Nut_YAQuWjhDmP8H2eMvJ8.roa (hash: qlvHpaLVzXcUtxyLFD8U+1k01vVLX6TwfsOJYC4Ocds=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: Wl7a2T7injfKFeuPAet7JACJWWrjKYABhX7AvlCrAhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:92:6d:56:51:ff:05:4b:27:2a:a9:de:da:a0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Apr 17 11:00:37 2026 GMT
Not After : Apr 18 11:00:37 2026 GMT
Subject: CN=ec26e6d5091ed74687b03a3421a6e26d686231f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:19:05:6e:b9:cc:33:29:ab:35:a9:2c:53:
e1:12:af:9b:d1:e5:53:ca:ac:f8:4f:a3:24:b3:06:
62:49:0b:52:14:9f:b1:ce:6a:76:70:d5:ab:29:46:
55:ec:6b:00:d7:5a:19:ae:05:27:62:1f:d5:88:f5:
f1:4a:b5:fd:03:8e:b6:c1:32:45:c8:f5:ec:f8:e0:
7d:16:2a:29:0a:bb:0b:f8:03:f2:3a:a8:98:81:63:
af:c2:84:b8:68:9c:dc:5e:76:3b:c1:19:6b:ab:bd:
9f:83:49:75:d9:aa:78:a8:51:19:7d:0f:7c:d2:83:
2d:b2:9f:b8:37:95:47:dd:77:26:4f:5b:cb:8c:03:
b8:71:a8:26:a9:81:63:98:f7:fe:5b:4e:0b:24:8e:
2c:cd:dd:93:c2:8d:a8:42:ea:04:90:46:80:73:d7:
fb:31:a1:99:d2:b2:ea:bb:c9:35:c7:a5:06:9f:f4:
45:fd:9c:e5:93:d7:96:5a:a1:86:81:44:c6:78:aa:
14:a3:ff:46:00:65:26:93:46:94:1b:94:d6:04:f3:
d1:a5:6b:92:23:4e:c5:a2:8a:2e:2f:84:60:a6:56:
62:88:1d:32:8f:6d:29:68:ef:75:d6:52:10:b9:3b:
ff:6f:10:1d:7f:69:81:c9:ff:e9:55:eb:4b:61:b6:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:26:E6:D5:09:1E:D7:46:87:B0:3A:34:21:A6:E2:6D:68:62:31:F8
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4d:75:91:72:72:27:12:9d:16:74:4d:1e:5c:1a:df:d5:fd:
61:d7:f6:30:bb:2d:18:26:a1:d1:a7:7b:7d:c8:40:a0:b4:a4:
61:5c:a1:c5:08:0d:09:ca:d1:c9:45:c0:cc:1b:db:a6:80:4a:
39:93:be:c9:23:12:ce:4f:b1:ac:18:35:96:ba:fb:8c:c2:e8:
4b:aa:07:6c:87:b3:65:8a:5a:46:1a:3a:ce:24:90:40:c8:b4:
e1:3e:bc:3f:42:e7:1f:b7:8d:3f:94:f5:66:ba:8e:10:0e:4b:
5b:d6:8d:bb:48:1b:b5:b3:b8:fd:87:a2:0d:be:c9:66:34:be:
11:80:e6:8a:8a:5e:21:3c:a7:3b:fc:97:a2:34:13:da:fb:32:
db:16:b0:1d:16:c7:1b:a9:7e:58:17:8a:1d:f4:43:8f:2a:6d:
45:96:ea:df:76:d2:1e:c9:56:bc:86:6d:23:2d:a1:cd:3f:43:
18:7f:ce:a9:bb:7e:40:a1:09:b5:8a:c8:56:8b:c6:0b:73:4b:
42:61:7d:37:3d:52:8e:6f:27:94:83:7a:8d:ca:91:3a:83:7e:
21:ec:00:b2:62:d5:1e:8d:56:96:16:19:aa:66:43:53:be:f3:
84:ab:31:4c:70:7f:a9:8b:88:85:95:d2:f2:c4:e3:58:18:8b:
15:23:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:21 2026 by rpki-client