Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: 9KB3YYhESZTZDuNkhSmCNKYu5jo1FBoTP1MkQ8ogFu4=
Subject key identifier: 20:E6:20:2E:AE:16:0E:65:69:00:D8:30:88:E7:9E:3B:0B:7A:2E:FE
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 01A108F01C1231DB319FE27F0DA36A593136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 0CEE
Signing time: Sun 04 Oct 2026 22:01:55 +0000
Manifest this update: Sun 04 Oct 2026 22:01:55 +0000
Manifest next update: Mon 05 Oct 2026 22:01:55 +0000
Files and hashes: 1: R1cZjQFvpzSoNjH57RozbKUytBQ.roa (hash: 5gILAzn1X9eg8JIPVx1JXogFciolZAFabqgiEM14sEI=)
2: bYw-qOY-Tl_DEhveCvoMVunD4fY.roa (hash: fvRin3P+GY7qd3E2JNYZzaXL08cwepa5Y3k4CFb6SB4=)
3: sGwYaMG-fGMANWLmphJR-vDIlT8.roa (hash: 4R34todPrry2ZxDJUBpJW6x1mLbY9FyCK7wsgXPjuTo=)
4: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: G6NNP3bdcdsByF/JKIriXvyJJEZIbLUItyy/fvg5VHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:f0:1c:12:31:db:31:9f:e2:7f:0d:a3:6a:59:31:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Oct 4 22:01:55 2026 GMT
Not After : Oct 5 22:01:55 2026 GMT
Subject: CN=20e6202eae160e656900d83088e79e3b0b7a2efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:b4:7b:30:09:9d:0b:4a:25:11:46:e3:36:
2c:c7:3a:02:7a:8b:c3:76:d9:63:19:77:14:17:fa:
ab:9b:1a:65:b1:33:0d:09:9c:71:cd:71:9e:8d:19:
42:f8:9d:11:2c:31:0e:09:8f:c6:e6:27:2a:32:d1:
c9:d9:7c:cc:6c:c1:2a:aa:7e:24:f8:ad:6f:1a:a4:
80:a2:c5:ac:e3:ff:b6:91:3c:48:24:96:c8:af:57:
f1:20:2b:c8:b0:f1:96:a8:f0:25:dd:d3:64:af:26:
05:cb:71:8a:d3:d2:f6:11:c2:d5:1d:7c:80:01:20:
93:66:5e:61:3d:33:0b:79:a4:fe:a8:8f:ec:af:bf:
8e:87:b1:cd:95:63:99:24:9d:67:6a:4a:91:02:c1:
ba:55:0a:46:45:bf:2f:31:3c:78:a5:3a:10:c9:70:
2f:4a:f1:c6:fb:bc:eb:27:cd:03:a1:9f:16:b5:f2:
9d:8c:21:7c:c2:e0:2c:0c:b9:10:09:1b:c0:b0:bd:
05:b8:95:49:69:45:3c:7c:b5:4c:a3:75:1c:cc:6f:
a7:0e:51:be:f3:58:a6:84:42:38:a0:06:3b:87:18:
8e:fb:f7:aa:58:78:e7:56:5c:13:41:60:57:74:3a:
af:2b:da:f2:05:d1:b6:ba:73:f4:9e:ed:3b:3d:fb:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E6:20:2E:AE:16:0E:65:69:00:D8:30:88:E7:9E:3B:0B:7A:2E:FE
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:83:28:30:49:07:8c:03:83:ba:6b:5c:12:0c:07:af:03:1a:
d9:a7:ea:96:41:f3:52:f4:af:e3:1b:77:47:d9:51:69:1d:66:
b0:9b:2e:bc:bd:db:7b:87:0c:14:20:c6:71:fc:8d:0b:df:0f:
12:c0:d0:17:4b:1d:6c:9a:b0:1a:01:68:1d:cc:d7:86:41:58:
9e:e0:e6:ab:26:7c:40:27:34:42:57:82:45:29:d4:3c:8b:3f:
0c:93:8c:f7:3a:b6:55:ac:e4:5f:dd:0e:38:c2:f5:d5:12:75:
80:dc:00:d7:8d:1c:01:c2:27:95:e4:f7:eb:91:0a:95:75:9d:
27:7e:78:d7:d1:17:32:fb:32:07:72:7d:bc:49:84:b6:ce:6a:
19:72:f6:df:c3:5b:25:88:16:6b:fa:e7:c8:8b:bb:5c:9d:5f:
7f:a5:10:9f:b0:b4:6d:6a:be:f7:b0:09:9e:c3:ff:fb:4f:73:
ea:35:c4:0a:af:1d:0b:09:ab:a4:ad:83:cc:16:dd:26:e9:22:
96:11:1f:08:de:6f:09:02:97:bc:9b:9a:af:a4:f5:1c:b3:a8:
5e:f6:3b:0a:52:5e:a6:a0:3b:98:6a:c0:ca:ef:64:85:55:a9:
2b:f4:f8:44:6e:03:42:9b:fd:aa:ed:db:e7:29:ce:7b:47:66:
d1:d5:fb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:01:54 2026 by rpki-client