Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: N+d//mvGe+cZyK/1j97GTUfdj7lbPwgOHBNng16HxaQ=
Subject key identifier: F6:DF:50:2A:98:C5:5B:57:87:60:AE:E2:51:94:E7:FA:E4:CB:6D:29
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 01A0CE918DC21F9A8AE949D69EE2B0267AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 13CB
Signing time: Wed 23 Sep 2026 14:00:40 +0000
Manifest this update: Wed 23 Sep 2026 14:00:40 +0000
Manifest next update: Thu 24 Sep 2026 14:00:40 +0000
Files and hashes: 1: UbxGuXfCPU7PaazgdUkcbZmtVZU.roa (hash: U0sRu1JWMunI3dF2aemA2TfuPLAR6kavSK8Q8KfB14s=)
2: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: onyZlqCqjTmMuKnGO1TTEasKt5DFQt13/pSorI3/XPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:8d:c2:1f:9a:8a:e9:49:d6:9e:e2:b0:26:7a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Sep 23 14:00:40 2026 GMT
Not After : Sep 24 14:00:40 2026 GMT
Subject: CN=f6df502a98c55b578760aee25194e7fae4cb6d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:93:92:d9:d8:d5:8d:28:f3:45:77:db:00:d0:
38:23:34:25:42:15:5f:2c:ed:33:cd:46:2c:87:5e:
d0:9a:46:f8:94:c2:16:8d:fb:46:7d:60:71:7a:05:
2d:bb:28:10:3a:0d:a6:19:c5:58:5e:c7:52:9c:65:
09:96:21:90:21:5a:5f:da:fc:ed:c2:31:a2:55:4c:
ba:46:29:20:39:d8:6b:6c:a3:39:bc:75:41:b9:d9:
ee:63:22:c6:4d:c2:0f:a2:11:f3:44:3d:36:81:fc:
8b:e2:82:7f:14:d1:09:c8:c6:c0:48:77:9e:f7:35:
32:b4:84:7b:78:73:d7:cf:da:41:b9:e4:ff:de:f5:
5d:2c:19:ec:68:60:81:c3:6f:aa:92:b6:77:36:9a:
6d:ad:eb:cc:50:6a:db:40:f6:9d:7e:c3:ae:61:af:
f4:c6:d4:28:95:32:ee:bf:aa:99:39:ac:26:5a:78:
df:a8:27:3c:be:c4:43:fa:73:20:e5:12:e2:90:9d:
5b:24:14:bd:fa:a6:d7:29:8b:db:02:13:18:5c:00:
4b:f3:04:f2:0f:ba:aa:91:84:f7:cd:30:60:3c:04:
26:49:a3:16:44:ce:98:6e:16:8f:89:7d:b1:c6:e5:
5a:a1:a1:ef:2a:e0:38:79:65:de:c5:9f:60:10:2e:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DF:50:2A:98:C5:5B:57:87:60:AE:E2:51:94:E7:FA:E4:CB:6D:29
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7f:11:b4:00:af:fb:1a:50:ef:bc:b4:33:2e:7c:d6:ca:9f:
9c:da:8c:95:7d:ef:03:5c:6a:80:47:2d:24:58:48:22:80:c6:
55:ca:fc:95:b1:ee:52:51:84:49:27:fb:92:21:58:44:2a:8f:
af:f0:a4:d6:50:c9:b9:48:65:f0:ba:0b:69:36:bb:94:3e:f4:
c7:bf:6f:3b:7b:31:a0:f8:3b:18:96:ad:e7:09:85:30:a7:55:
ee:2d:5b:8c:0c:cc:ed:45:b5:a1:49:3b:c1:ad:4c:d9:64:b3:
df:98:75:e6:79:31:24:4e:4a:f5:be:32:fb:d4:d5:a5:ed:89:
c8:e6:df:95:9f:30:1e:b2:74:0f:95:82:e3:fe:42:54:3f:fc:
ed:43:d8:a0:f2:3f:88:9f:ac:4b:d6:a2:44:98:68:a9:4a:bc:
1d:c6:b6:4f:cb:48:d4:04:60:5f:2d:7c:e1:3c:82:c0:f1:89:
8c:8e:14:4f:a0:e7:8a:21:56:64:f0:98:48:12:fa:77:e7:12:
f5:b4:74:93:5d:bb:e2:1d:53:32:bf:4b:86:88:3b:fb:e4:63:
8b:7a:ec:f2:8c:3d:bf:b8:df:b0:8a:d4:eb:8b:d9:c6:94:34:
49:b2:5e:3c:6c:40:03:13:fb:ae:c1:7c:98:fb:b6:f0:31:4c:
33:67:4d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:50:43 2026 by rpki-client