Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: L+cWgN8E+C0SGEkuuuAzU3h+xirqQhftHWB4/Lzmy+4=
Subject key identifier: 42:B0:BA:66:81:69:80:F9:22:BA:6C:49:DE:A8:50:33:B5:91:DB:B4
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 019CAAC65D8B0E5FE566AA46553422242C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 0AAB
Signing time: Sun 01 Mar 2026 19:00:52 +0000
Manifest this update: Sun 01 Mar 2026 19:00:52 +0000
Manifest next update: Mon 02 Mar 2026 19:00:52 +0000
Files and hashes: 1: R1cZjQFvpzSoNjH57RozbKUytBQ.roa (hash: 5gILAzn1X9eg8JIPVx1JXogFciolZAFabqgiEM14sEI=)
2: bYw-qOY-Tl_DEhveCvoMVunD4fY.roa (hash: fvRin3P+GY7qd3E2JNYZzaXL08cwepa5Y3k4CFb6SB4=)
3: sGwYaMG-fGMANWLmphJR-vDIlT8.roa (hash: 4R34todPrry2ZxDJUBpJW6x1mLbY9FyCK7wsgXPjuTo=)
4: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: kHI1uA3SK1kc7MmgaIlvbMFvJJg7HFlEIN1GEZwjJ7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:5d:8b:0e:5f:e5:66:aa:46:55:34:22:24:2c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Mar 1 19:00:52 2026 GMT
Not After : Mar 2 19:00:52 2026 GMT
Subject: CN=42b0ba66816980f922ba6c49dea85033b591dbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:1c:63:4a:af:1e:b3:c5:09:e8:ba:b0:da:
30:92:f2:4a:5c:de:a1:52:c0:e3:21:db:77:9c:92:
aa:44:29:58:e5:c7:56:a2:55:7d:81:4b:08:a7:fe:
3c:dd:92:08:76:53:6e:35:a9:da:3d:fa:36:14:62:
b7:5f:8d:d8:b3:32:6f:59:c5:9b:fe:08:05:7b:c2:
db:36:cc:a1:b8:6f:54:d2:c4:c5:e5:9e:bd:42:26:
39:60:58:8a:5f:e0:53:8b:e2:11:fd:cd:33:c6:37:
af:03:38:92:50:bb:90:da:42:4c:56:88:a5:59:0c:
b3:b3:dd:2b:f9:f5:1e:7a:cf:cf:8c:7f:a8:03:86:
f9:e9:3f:d7:18:d2:94:38:9e:d2:c9:0a:7f:6b:48:
5d:7a:a1:e7:c5:19:20:3b:32:b4:ff:4f:37:46:a1:
bc:d8:48:fb:33:f2:25:78:4a:0a:1e:11:99:cb:b6:
6c:dc:52:e5:4a:d7:70:67:3f:1c:0a:ff:1c:5f:4d:
19:b9:ab:dc:d7:59:c1:07:a1:75:17:c2:76:cc:9f:
2c:fa:19:f6:06:66:8d:c9:92:fb:86:ad:d3:bd:9a:
9f:47:84:2f:35:e7:55:3a:af:b6:26:a6:5f:60:c0:
51:f8:d4:88:c9:14:ae:93:73:ab:f6:03:2a:12:54:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B0:BA:66:81:69:80:F9:22:BA:6C:49:DE:A8:50:33:B5:91:DB:B4
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ac:95:85:69:ec:e5:1b:47:86:e4:86:5a:64:30:5e:f1:d8:
1a:4c:9c:89:a9:ea:0b:a6:80:4b:af:09:8b:8f:65:8f:71:36:
8a:9d:bc:3f:40:81:c2:22:78:8c:6e:c9:fe:bb:85:be:c6:66:
61:71:73:96:9d:7d:0e:62:7b:fc:65:0e:5b:cf:2d:7c:79:76:
03:c7:60:0f:ed:72:11:55:6e:b3:3b:9a:8d:9c:81:f6:b0:d4:
c2:5b:49:cc:cf:a7:98:ab:a5:6a:4a:2a:8d:d4:82:0e:ee:0b:
4a:dd:8f:fd:08:48:ff:4e:7f:53:b4:d9:45:cd:35:94:9d:9e:
27:bb:f4:c3:ef:1c:08:1b:1c:fa:86:1f:41:fe:a0:6d:8b:02:
c1:a4:0d:38:07:12:5d:bc:2d:c5:79:ae:a6:5e:04:70:f3:2d:
d4:59:7b:ce:b6:f4:63:bc:f3:8b:31:59:be:a8:78:5f:29:12:
4a:65:97:93:90:32:d9:af:56:dd:f2:f6:4e:9d:a2:07:f2:88:
3f:48:64:63:0e:3c:06:b7:aa:e3:59:30:a0:b6:91:9c:94:62:
56:78:23:33:49:6b:c9:d3:30:60:7c:39:46:ff:13:f5:26:e8:
2b:7e:83:a7:6c:87:a5:a7:f8:b7:13:de:a1:19:c8:a0:74:29:
8f:62:30:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:39:58 2026 by rpki-client