Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: uOg8eQlFkhjIKEHM97ntcZcgJ8k9KsE0xAdVmwcdrBA=
Subject key identifier: B7:50:4A:DE:9C:BA:97:B7:A6:C9:C2:D9:22:E6:5A:FC:29:B5:03:07
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 01A1C5C34E75C052DDCC241E29F163F9975B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 144B
Signing time: Tue 10 Nov 2026 14:01:13 +0000
Manifest this update: Tue 10 Nov 2026 14:01:13 +0000
Manifest next update: Wed 11 Nov 2026 14:01:13 +0000
Files and hashes: 1: UbxGuXfCPU7PaazgdUkcbZmtVZU.roa (hash: U0sRu1JWMunI3dF2aemA2TfuPLAR6kavSK8Q8KfB14s=)
2: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: K0tb1kNXHjzOgJ+EMeL1M/s3tWuEZcpSmX1zJhgienM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:c3:4e:75:c0:52:dd:cc:24:1e:29:f1:63:f9:97:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Nov 10 14:01:13 2026 GMT
Not After : Nov 11 14:01:13 2026 GMT
Subject: CN=b7504ade9cba97b7a6c9c2d922e65afc29b50307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:18:bf:bf:40:e6:fc:53:92:d4:54:14:b9:3c:
b4:ce:89:78:0f:4a:b3:bc:74:60:87:d4:28:ed:ba:
62:b3:3b:3f:b0:18:6a:30:74:12:e7:45:ed:43:2e:
02:b5:56:42:93:60:e0:fd:9d:11:9f:66:86:5d:14:
d4:a1:3b:ca:7d:2d:f3:19:53:52:d0:d1:9b:47:a3:
dc:fd:40:3b:10:68:e5:4a:f6:83:7b:34:b5:c1:52:
20:1a:41:13:ae:f0:52:7a:2b:3d:f6:f9:f0:b0:e8:
1f:73:2b:ab:7a:30:42:3e:bd:53:e1:f4:04:78:46:
35:57:3f:1f:20:56:24:e2:a9:38:f6:a9:cb:fc:a7:
cf:b8:54:56:0b:f2:d1:97:26:d3:98:11:c2:31:c8:
07:82:6d:e2:06:4a:a1:8a:0b:6c:02:d2:17:98:b4:
5a:30:57:02:8d:19:a7:e3:31:fc:29:99:3d:63:15:
b8:0e:26:7f:7d:96:61:20:ef:6b:f6:93:09:05:1f:
3f:69:83:70:9c:9f:62:62:2c:9b:f9:94:8f:aa:2c:
ea:80:bc:1f:85:2c:41:c3:7f:a5:24:2e:08:92:4a:
07:4a:8d:97:cc:58:7b:42:d2:ed:e9:6f:75:e6:3d:
9b:5a:85:8a:bb:a4:04:3a:82:fa:26:e1:ad:3d:b4:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:4A:DE:9C:BA:97:B7:A6:C9:C2:D9:22:E6:5A:FC:29:B5:03:07
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a5:4d:06:a4:27:47:7c:1b:9a:09:a8:c4:7a:a8:cb:9a:d9:
d5:df:6e:28:e3:6a:fb:2c:61:ee:39:3f:ad:30:fd:6c:01:5a:
66:99:ad:1d:11:98:d5:63:24:20:64:ee:68:89:57:e9:3a:e9:
f1:f4:51:bc:c3:28:3f:4d:e7:e0:b5:3e:ab:78:6d:54:94:06:
16:6a:cc:81:b1:9c:80:68:b0:c4:ca:8f:6e:9a:f4:e5:fc:7a:
5e:68:7c:22:fa:0f:5b:84:00:55:b6:02:a7:df:58:cf:99:66:
fc:7c:5c:de:0e:5a:09:49:1e:61:a7:c7:77:22:bc:ee:81:4b:
03:f3:9b:d0:34:c8:0b:9f:2a:48:13:db:84:8e:30:c5:5b:89:
82:4d:cd:29:83:9a:c0:74:f1:94:e1:ca:43:15:63:84:01:ee:
c0:fc:19:1c:f3:01:f5:8c:b0:31:21:ec:d6:1c:1b:f1:76:da:
16:0e:a6:6e:f2:b6:93:1d:2f:e9:6d:26:1c:65:80:fb:53:0c:
4d:8b:91:e6:d2:11:d1:0a:35:17:63:08:72:be:f2:14:a4:99:
e0:53:f3:67:60:59:fd:1e:cc:87:9f:3e:3c:b0:0b:14:b8:56:
f6:0d:20:1b:e4:41:fa:05:0f:51:8c:80:40:1a:f6:30:4b:21:
f8:a6:aa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:19:55 2026 by rpki-client