Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: oo767LM4RbKMOK0/QzkFgO6+qytUMfP7QypzFMM0eYs=
Subject key identifier: 5F:C5:78:7C:AB:C2:04:9C:74:94:72:53:8F:43:44:1D:C2:EB:99:A4
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 019D9A3E344308770D054A22D82C9855AB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 0B27
Signing time: Fri 17 Apr 2026 07:01:01 +0000
Manifest this update: Fri 17 Apr 2026 07:01:01 +0000
Manifest next update: Sat 18 Apr 2026 07:01:01 +0000
Files and hashes: 1: R1cZjQFvpzSoNjH57RozbKUytBQ.roa (hash: 5gILAzn1X9eg8JIPVx1JXogFciolZAFabqgiEM14sEI=)
2: bYw-qOY-Tl_DEhveCvoMVunD4fY.roa (hash: fvRin3P+GY7qd3E2JNYZzaXL08cwepa5Y3k4CFb6SB4=)
3: sGwYaMG-fGMANWLmphJR-vDIlT8.roa (hash: 4R34todPrry2ZxDJUBpJW6x1mLbY9FyCK7wsgXPjuTo=)
4: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: Byh1Dp8erZJJ4qbao3LngVBHl4wWSClzJ17+iKX9vcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:34:43:08:77:0d:05:4a:22:d8:2c:98:55:ab:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Apr 17 07:01:01 2026 GMT
Not After : Apr 18 07:01:01 2026 GMT
Subject: CN=5fc5787cabc2049c749472538f43441dc2eb99a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:a7:86:e8:52:86:0c:e3:93:23:09:d7:db:
04:1d:4d:3b:e2:fa:22:b3:5b:71:8d:2d:c6:9f:f1:
98:68:cd:dd:d5:34:8c:3a:f6:65:46:7d:60:2c:c1:
54:2c:90:5c:29:71:43:3b:d0:d3:48:05:e1:78:21:
e4:47:67:ec:3a:ab:a6:59:a5:a5:7e:21:ed:41:58:
3c:bb:1d:b7:9b:f1:af:e2:cf:8b:30:ad:0d:f0:2e:
af:d4:95:45:0f:27:5d:43:d1:fc:76:f8:d6:5b:d7:
bd:a7:e8:c7:e7:de:18:2d:a2:59:81:b3:47:c4:64:
b2:42:2b:7b:c1:c4:fe:60:f5:dc:66:dc:cf:c9:11:
8c:ae:e7:14:e2:eb:47:1d:ce:90:44:cd:a2:cc:37:
0d:f8:da:9e:96:47:8a:17:60:8b:3d:81:5d:8b:6d:
84:67:57:0d:5a:87:f3:fe:09:f6:bf:47:ef:11:73:
cf:eb:4b:ea:c7:33:b4:df:38:21:b8:e6:b9:89:7e:
6f:69:75:3e:63:87:48:64:fc:c7:f5:c3:13:6b:ad:
e0:93:bc:ef:83:c7:b5:c6:a5:93:92:ca:e5:e7:3e:
0c:38:20:62:48:e2:99:93:66:0b:31:a1:ae:0f:5b:
d4:b3:ca:5a:3f:f8:23:33:0c:a1:6d:e7:32:25:03:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C5:78:7C:AB:C2:04:9C:74:94:72:53:8F:43:44:1D:C2:EB:99:A4
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:68:7b:b7:8d:bb:5e:56:a3:23:f5:67:a3:42:62:d0:f9:55:
23:56:c7:9d:9f:aa:de:18:42:e9:48:87:80:47:52:e3:44:c1:
b6:4a:c4:c8:34:79:68:68:45:f9:34:3e:8a:e4:71:95:ad:b5:
c5:5a:6b:6e:d2:94:e1:ff:98:28:37:fc:8d:df:6b:3f:bb:97:
ea:8e:ee:12:b9:3f:17:83:9e:0c:a9:34:39:70:b3:46:3d:71:
92:0b:67:df:ce:ad:b6:14:71:e0:84:67:a2:7b:08:9f:c7:da:
c3:af:ba:b9:8a:1b:b3:30:7e:f8:aa:b4:5e:3c:26:f5:d4:36:
f6:dd:be:15:22:92:2e:9e:74:6a:cd:4c:c4:e6:1c:f7:79:c6:
41:6d:2b:13:bd:5a:ed:aa:7e:df:15:65:46:a9:9c:e2:49:e2:
82:d0:9c:f6:7f:ac:40:f6:5a:49:24:61:85:8a:a8:2b:ac:f1:
2e:03:9e:2c:74:5f:7f:a2:14:13:45:7d:f2:19:d2:f0:b6:df:
71:e7:84:b2:4a:25:aa:ce:ad:31:cb:04:01:55:c7:43:c0:d9:
91:a8:bd:e5:87:73:0b:b8:4d:2c:93:14:2c:45:23:03:d3:f6:
ce:74:d7:9c:2b:8d:1d:53:a3:5c:03:08:5e:b3:0b:8c:be:92:
b2:c5:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:42 2026 by rpki-client