Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: 3qNfKuYuikXeu+VQmhmxXBrRtMY+ynq3PJoz+6KIEk8=
Subject key identifier: C4:41:47:82:22:0F:1D:31:6A:93:9C:C8:3A:D7:00:9C:8F:33:C2:97
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 019D24A7D08010D28B890FA05854A08037C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 04EC
Signing time: Wed 25 Mar 2026 11:01:10 +0000
Manifest this update: Wed 25 Mar 2026 11:01:10 +0000
Manifest next update: Thu 26 Mar 2026 11:01:10 +0000
Files and hashes: 1: 18mBvWMTzIGjuf0KvgUDpqaEgck.roa (hash: GFEk4/+4DhuQ+HzNstdRPkKFI3j7dtiSLG7Lkc2nCys=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: dCRFz+YxYcpEwKLcOHX72eQrWjxtRuzDQOA4CuiQd1s=)
3: zsYYk54DnHl7eLevLUFDMgKz4P8.asa (hash: 6luWGIPO7hhqIfw0IR/ULYO//RhcC5nGHlt4UBWyulU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:d0:80:10:d2:8b:89:0f:a0:58:54:a0:80:37:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Mar 25 11:01:10 2026 GMT
Not After : Mar 26 11:01:10 2026 GMT
Subject: CN=c4414782220f1d316a939cc83ad7009c8f33c297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:59:a3:bd:03:f2:64:97:c1:0b:2e:32:78:
ee:39:cb:4a:3e:02:1a:b7:39:fe:a4:25:b6:c4:83:
d9:0f:77:6f:2e:90:d4:0f:92:08:5c:2d:42:2e:e9:
91:e9:75:78:cb:0e:09:9c:d7:ea:64:33:90:c4:75:
4a:5f:1b:90:49:21:78:02:3d:3e:1a:bd:32:56:3a:
b9:c4:b1:fb:ed:3e:0c:64:0d:50:b3:1f:a0:52:9f:
46:75:57:ea:56:81:7b:23:d6:d3:9d:0d:41:75:7f:
c9:ab:06:e2:c6:25:2a:63:46:ce:25:ab:57:fa:cd:
b8:b7:a7:e9:72:e2:7c:ac:1c:d2:b0:71:b0:ce:c8:
7a:cd:f8:b6:08:0b:7d:5a:fe:6a:6e:66:23:43:6f:
56:05:52:e5:d8:16:8b:ad:5a:c2:76:f4:bd:14:58:
9f:97:06:a0:8f:8e:00:a0:10:4d:c5:2c:e9:c5:3c:
f2:4b:64:0d:4d:d7:87:a2:82:fb:8b:27:af:fd:6c:
0b:f0:13:ad:21:88:00:fe:2d:d8:37:b5:48:f2:35:
86:cb:a5:4d:40:2e:4b:76:97:03:b0:9e:b9:14:0f:
f4:92:98:59:5b:5f:3f:5d:45:cf:ae:7b:57:d5:7f:
41:4e:f4:80:81:cf:51:ac:52:a7:5c:f4:3b:ab:ca:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:41:47:82:22:0F:1D:31:6A:93:9C:C8:3A:D7:00:9C:8F:33:C2:97
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e7:2a:3e:96:5d:39:f4:2e:06:34:97:eb:0b:17:4d:94:6f:
9d:08:6b:b8:27:ad:85:37:09:b5:bb:af:43:a5:09:23:d8:cd:
86:ba:6d:86:34:7c:66:53:4a:9b:c9:b1:54:8b:88:21:1b:5c:
b6:c6:a6:59:86:fe:35:04:f2:ce:47:59:27:57:3c:6e:bf:40:
d4:f5:61:59:01:43:6a:25:f5:06:34:5f:ad:cf:47:6f:23:b3:
28:8c:c9:f5:9d:ea:1b:ed:94:98:8e:ea:3e:f6:96:5e:fe:c0:
e1:ba:fa:5f:e7:b5:8d:f6:5b:74:ab:8c:15:24:66:c6:8b:c8:
51:e0:85:35:ff:5d:7f:09:29:16:63:d2:30:1f:fa:9e:09:1d:
53:b7:a3:97:5e:31:a3:70:b2:13:12:cd:4d:57:a8:60:9e:8f:
2f:4f:51:66:e7:25:32:52:7a:11:e8:ff:f5:9e:3f:b1:6c:c0:
ca:52:05:08:e8:76:6f:62:ac:bf:3a:36:19:45:ff:e3:f2:fe:
69:2e:6a:33:a4:f5:3a:4e:ba:cc:68:f4:8b:78:d3:3d:27:3a:
fb:0c:86:be:5b:f1:80:f1:8d:71:d1:7a:35:20:68:c3:9e:74:
16:69:20:07:29:f9:76:f7:53:a3:5e:33:8e:91:5c:3f:b0:97:
3f:e1:12:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:36 2026 by rpki-client