Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File: z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier: t623RCWpPh6HWLz2EbmwcYTE6jdn3bglsgh6VtFLwrM=
Subject key identifier: 50:63:F9:6C:EB:83:17:97:DE:EE:0D:E1:47:12:4E:CE:08:C8:8E:CC
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 019DA5670B77C6CAE37DCD98040F39E25639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 11:01:26 +0000
Manifest this update: Sun 19 Apr 2026 11:01:26 +0000
Manifest next update: Mon 20 Apr 2026 11:01:26 +0000
Files and hashes: 1: 5w8L1o2xDu1EgnFPzhAl4Dxiiuk.roa (hash: N7gwY/QH2RLdT3WqeakNq3TDez5YAW9J33gsQvciQVk=)
2: MGbK18crReeycP3hT0y5D69KHDg.roa (hash: bJ5cOxmt243LIA6o4KZp7HyiaUla0ibwqPSbCU8ga5Y=)
3: r3Gj28qxCmsCd0VMfNKOdxAgbOI.roa (hash: rVagaCAlGM1dBitdjHx7SnwM1EWU8ftBiG82vwvCY6g=)
4: tGgYc8esx93FIuv6qVdvLrrfYjA.roa (hash: NqmOiovtc0twyj4G/0azepimZEOqE1VqYTbbiNKPooI=)
5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: cILas3JojPeIFGIXwuG5KpdMcbJnjaa/HxlpjuF2uFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:0b:77:c6:ca:e3:7d:cd:98:04:0f:39:e2:56:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Apr 19 11:01:26 2026 GMT
Not After : Apr 20 11:01:26 2026 GMT
Subject: CN=5063f96ceb831797deee0de147124ece08c88ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8b:55:53:43:af:aa:be:db:8f:66:9f:97:aa:
b6:07:5f:d6:42:b7:38:16:e2:46:60:ce:b8:9e:36:
7e:c9:fa:f4:ef:e6:92:59:d3:a0:b3:d5:4a:12:e3:
a3:13:3d:d8:d2:41:da:a7:50:d6:77:bb:15:35:bd:
18:49:13:8d:09:93:79:1b:13:37:e8:88:5f:3c:7e:
24:16:6c:13:e1:fc:4a:81:bc:9e:a8:e2:8c:da:e2:
9f:11:af:69:0a:30:1e:f1:95:c1:18:f4:48:76:99:
90:70:44:5c:5c:33:f1:35:c0:be:aa:93:a1:52:96:
dd:35:2a:75:e9:c2:cf:7b:59:5f:4c:55:58:d8:a3:
25:f2:df:15:3e:ed:f7:24:9c:b3:97:a9:c5:38:39:
06:d2:54:2c:c8:8a:e5:05:cf:81:f4:11:96:e2:f9:
76:ad:3b:45:25:3f:36:a4:7a:33:48:b3:82:15:81:
66:c8:70:ec:93:18:0c:e9:9a:97:5e:69:95:26:8a:
3d:91:cc:f1:11:9b:00:da:d8:95:ae:66:46:04:ff:
7e:6e:9a:7f:bf:5d:1b:c2:cc:f2:e9:c8:01:00:53:
2f:12:de:22:88:37:f3:0f:94:c1:79:17:2b:1a:e0:
af:12:57:a4:1a:91:c1:b7:a8:e8:27:9c:cd:df:b8:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:63:F9:6C:EB:83:17:97:DE:EE:0D:E1:47:12:4E:CE:08:C8:8E:CC
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e0:c7:5c:0b:c2:af:f3:c6:44:4b:fa:b6:d5:65:0e:b6:f8:
87:e8:4c:0f:9a:11:db:71:7a:2d:fb:ff:cb:4e:cf:c8:c5:ba:
1d:8e:f0:57:8c:ee:17:1f:9d:94:41:f6:97:9b:90:ab:fc:c7:
85:08:7b:32:7c:4f:81:ad:7c:89:5d:03:c8:bc:76:73:5b:ca:
82:96:2d:33:af:8f:e4:fb:75:95:b4:ad:8d:40:00:fd:eb:11:
1c:1b:84:da:80:44:f3:cf:d2:94:67:0a:d5:11:b6:66:1d:ef:
10:ed:b2:4e:97:67:3c:c9:c2:a2:34:92:ea:7c:f6:97:74:b8:
a2:02:78:d3:18:26:42:28:5a:46:a7:80:2e:2d:f6:5a:60:eb:
a1:60:d8:c7:33:2c:79:a7:5e:70:f6:1d:fc:c5:8f:4b:8b:43:
04:4e:1b:5f:31:8f:d5:0a:5d:f4:28:2d:9e:93:b2:fb:e2:2e:
00:e4:d2:89:6d:de:24:fc:22:fa:db:ea:9e:ac:e0:41:9c:c6:
1b:8f:d5:12:99:50:e5:9b:ae:41:f3:b0:27:43:38:0c:fd:0c:
2e:d0:8e:4c:50:63:f1:73:cc:ec:3c:24:e7:aa:5b:61:ab:d2:
2a:a0:3b:ad:62:b0:04:d9:d9:66:04:a6:af:11:83:08:1d:55:
25:3c:24:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:22 2026 by rpki-client