Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: 6p1SKWWNDvxCBNGp2Oi2QEgjUqzDa1Lt4xYRRW4Ba20=
Subject key identifier: 8E:AE:EA:DD:9F:C8:BA:99:E6:8C:02:2C:DC:02:5B:F6:D1:E3:67:ED
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 019FAB2C875AA03978BF24B21F704A974E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0FC8
Signing time: Wed 29 Jul 2026 00:00:49 +0000
Manifest this update: Wed 29 Jul 2026 00:00:49 +0000
Manifest next update: Thu 30 Jul 2026 00:00:49 +0000
Files and hashes: 1: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (hash: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: OLuzBSoQQhPgZC4rSSFGFaJSvrw0bjgw48rvRu0yAcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:87:5a:a0:39:78:bf:24:b2:1f:70:4a:97:4e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Jul 29 00:00:49 2026 GMT
Not After : Jul 30 00:00:49 2026 GMT
Subject: CN=8eaeeadd9fc8ba99e68c022cdc025bf6d1e367ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e4:34:fb:ed:e6:99:c1:8f:21:6e:9b:f0:ff:
59:6a:e5:58:89:47:20:ea:f3:51:df:5e:46:cd:4e:
b2:d2:b1:7a:5e:1b:94:22:b5:ea:f6:74:9b:ea:1d:
3f:96:e3:77:3b:2e:1b:99:6d:0f:4b:37:a3:9d:32:
47:ec:a6:68:8e:89:43:ca:4e:1f:10:b0:6e:67:12:
dd:97:5a:1f:4f:4d:04:0e:45:48:e3:cc:04:94:f2:
b9:03:79:c3:75:10:9a:ac:cf:40:99:25:04:6d:c6:
02:de:b1:01:3a:a5:10:29:81:80:9d:4d:c5:27:77:
36:de:8b:53:f5:d8:6c:e9:53:55:98:56:96:9b:95:
0d:df:f2:e2:2d:cb:51:27:77:96:66:5a:14:12:2a:
87:cd:b5:cb:bb:9b:1d:aa:26:24:e8:05:93:9d:17:
7e:de:45:de:90:b4:c9:e9:d9:db:72:a5:60:3c:d4:
ca:b8:15:ed:7d:b6:83:26:69:07:26:e4:5b:fc:80:
1c:2e:c2:cc:3c:c5:73:bd:82:7f:38:a1:7c:55:68:
e5:bd:95:35:4a:f5:c2:b6:83:b1:36:3e:39:61:11:
cb:41:7c:09:b3:68:32:06:c4:1c:a0:c9:06:b9:56:
e5:bb:f4:d5:fa:fa:5d:f9:66:f2:1e:83:57:df:5a:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AE:EA:DD:9F:C8:BA:99:E6:8C:02:2C:DC:02:5B:F6:D1:E3:67:ED
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:82:ae:c6:1c:9a:2a:42:46:8b:df:b9:ce:a3:35:4a:85:5b:
02:fa:f9:ef:c2:8b:fa:66:f9:de:5c:cc:6d:c2:61:f6:3e:8e:
d6:13:e3:28:24:06:50:2b:54:76:8b:b4:ac:72:38:5d:e7:27:
fd:2a:96:5d:c5:3a:18:b5:7b:8f:c2:d2:73:fe:d9:02:a2:6a:
b7:f5:77:b4:64:fb:08:1e:48:e9:dd:38:10:8c:52:c0:9a:98:
e3:85:5f:24:54:59:b9:c3:48:86:d5:c4:e5:2d:fc:7a:5d:99:
92:fe:4a:02:1b:c9:a6:24:4c:ff:91:ba:db:b9:2f:12:10:ad:
17:28:1a:9e:cb:d7:d2:df:b8:d4:0d:c7:7e:ae:8f:fd:79:d9:
47:21:1d:55:6d:53:2c:d2:9b:52:dc:65:7b:ec:8f:28:3d:9c:
d7:da:03:ea:24:6e:2b:ca:1f:24:ad:7f:1d:9c:41:e1:84:00:
ee:86:7a:58:26:f2:8e:6c:b6:03:79:83:cb:aa:d5:22:d7:d0:
c1:16:a5:49:a5:26:d4:8c:8a:a0:e7:4d:5e:5f:db:d6:5f:32:
ea:4e:b1:3e:ee:1b:3e:d3:d4:0b:08:5d:6c:46:c2:50:09:7a:
4e:09:3e:78:ab:8e:56:93:d8:04:7a:15:fe:6c:4d:25:da:e3:
d9:07:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:11 2026 by rpki-client