Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: Y+qxFC2RVa+mnv43p4IpUvFkYk7I3lv9mTC2+mSE3dY=
Subject key identifier: 7C:AA:31:86:51:56:5C:CF:C6:CF:BD:A9:FF:0D:9A:58:CC:DB:90:8F
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 019E1BD93E193ED8A3436AE665315DA54652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 056C
Signing time: Tue 12 May 2026 11:01:22 +0000
Manifest this update: Tue 12 May 2026 11:01:22 +0000
Manifest next update: Wed 13 May 2026 11:01:22 +0000
Files and hashes: 1: 18mBvWMTzIGjuf0KvgUDpqaEgck.roa (hash: GFEk4/+4DhuQ+HzNstdRPkKFI3j7dtiSLG7Lkc2nCys=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: /446hpGnnrnOKCuXP/o8MOldbYru7DZdEREkoRDt7mk=)
3: zsYYk54DnHl7eLevLUFDMgKz4P8.asa (hash: 6luWGIPO7hhqIfw0IR/ULYO//RhcC5nGHlt4UBWyulU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:3e:19:3e:d8:a3:43:6a:e6:65:31:5d:a5:46:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: May 12 11:01:22 2026 GMT
Not After : May 13 11:01:22 2026 GMT
Subject: CN=7caa318651565ccfc6cfbda9ff0d9a58ccdb908f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:3b:3b:ab:f6:d0:d2:0b:f5:97:7f:0c:f9:
9b:c8:54:00:e9:ce:d7:f8:c3:94:12:c2:dc:aa:ae:
4f:cb:b4:22:30:87:55:19:12:4c:e3:9e:d4:ec:8b:
f5:be:95:b1:d9:87:81:cc:f3:f8:e2:7f:e2:56:dc:
cb:9d:7d:24:7a:18:88:72:3f:96:a4:a4:ca:93:e2:
97:e5:09:ae:b0:7c:95:47:c5:b2:23:97:47:3e:8f:
4d:10:67:fb:b0:4d:56:85:39:08:9e:85:3f:38:5b:
60:ab:57:59:30:95:69:4c:b7:85:6b:21:58:4f:b3:
9a:6d:5a:56:f6:04:9a:ab:da:89:15:12:9c:05:c4:
46:a5:31:ed:11:84:a3:37:7e:47:00:79:b9:9f:e8:
e2:cd:2c:4b:c3:56:72:0b:94:78:d6:14:7a:4d:fe:
66:cb:e3:98:5a:9d:19:4f:c0:6e:75:26:ff:cf:0d:
47:6f:23:f2:f0:4e:42:8e:96:3c:2e:38:99:0c:b5:
2f:e1:00:06:e4:21:3b:19:a7:be:9b:ba:3c:61:db:
2a:a5:76:a5:0c:39:e1:fc:56:97:20:55:d6:31:c6:
6e:26:c8:cb:97:17:1f:8e:46:a0:23:f9:e4:f7:e7:
76:6d:8b:73:09:fd:6b:0e:73:48:65:50:5c:52:a6:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AA:31:86:51:56:5C:CF:C6:CF:BD:A9:FF:0D:9A:58:CC:DB:90:8F
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8c:fa:29:02:79:5a:ac:7b:70:e3:51:f8:85:bf:7a:1e:c3:
d2:07:22:bc:3e:6a:cb:b6:04:35:5f:04:13:2d:12:8f:91:67:
0a:0d:eb:83:ef:ee:49:37:3a:09:2a:20:0a:ce:e6:62:5c:ec:
36:46:f3:a4:f5:3d:cd:97:0c:10:4c:f8:f3:98:51:ef:7f:1c:
31:f0:75:32:fc:0e:88:4d:7e:41:49:ee:54:78:fa:59:23:c0:
d6:29:41:ef:ff:1c:4f:50:5f:62:bc:a5:b3:71:63:40:df:3f:
b2:1e:c2:72:20:c7:81:8d:d9:87:94:03:fe:4e:f4:53:38:51:
cc:67:6d:fa:1d:66:74:5c:8b:67:53:e3:6c:ed:09:42:48:3c:
9e:92:13:b3:5c:83:40:51:51:56:45:e5:ec:a7:3d:9f:bf:90:
0d:76:17:13:a0:48:5e:40:d1:2c:3b:0b:73:a8:5c:20:07:00:
ae:67:47:fa:70:d9:fe:2f:1c:e4:f0:2f:d7:17:5e:f8:15:06:
8c:ce:d1:1d:d6:8f:9b:8e:d4:69:f7:05:0c:d9:3d:13:2f:3b:
cd:d4:e3:aa:62:f6:c5:90:d0:c1:fe:29:92:56:86:81:83:b6:
4c:b9:f5:13:4e:03:f5:e5:0c:36:d8:17:28:98:70:b7:ca:a0:
76:1f:5b:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2T4ZPtijQ2rmZTFdpUZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZGMyMTczODhhYTdlOTAyOGRkMWUwNGJhNjQyOTEzNTJk
NjBiZWYwHhcNMjYwNTEyMTEwMTIyWhcNMjYwNTEzMTEwMTIyWjAzMTEwLwYDVQQD
Eyg3Y2FhMzE4NjUxNTY1Y2NmYzZjZmJkYTlmZjBkOWE1OGNjZGI5MDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgQ7O6v20NIL9Zd/DPmbyFQA6c7X
+MOUEsLcqq5Py7QiMIdVGRJM457U7Iv1vpWx2YeBzPP44n/iVtzLnX0kehiIcj+W
pKTKk+KX5QmusHyVR8WyI5dHPo9NEGf7sE1WhTkInoU/OFtgq1dZMJVpTLeFayFY
T7OabVpW9gSaq9qJFRKcBcRGpTHtEYSjN35HAHm5n+jizSxLw1ZyC5R41hR6Tf5m
y+OYWp0ZT8BudSb/zw1HbyPy8E5CjpY8LjiZDLUv4QAG5CE7Gae+m7o8YdsqpXal
DDnh/FaXIFXWMcZuJsjLlxcfjkagI/nk9+d2bYtzCf1rDnNIZVBcUqbtMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyqMYZRVlzPxs+9qf8NmljM25CPMB8GA1UdIwQY
MBaAFM/cIXOIqn6QKN0eBLpkKRNS1gvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMt
NWU1YTYyNGQ3NGI4LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMtNWU1YTYyNGQ3NGI4
LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoz6KQJ5
Wqx7cONR+IW/eh7D0gcivD5qy7YENV8EEy0Sj5FnCg3rg+/uSTc6CSogCs7mYlzs
NkbzpPU9zZcMEEz485hR738cMfB1MvwOiE1+QUnuVHj6WSPA1ilB7/8cT1BfYryl
s3FjQN8/sh7CciDHgY3Zh5QD/k70UzhRzGdt+h1mdFyLZ1PjbO0JQkg8npITs1yD
QFFRVkXl7Kc9n7+QDXYXE6BIXkDRLDsLc6hcIAcArmdH+nDZ/i8c5PAv1xde+BUG
jM7RHdaPm47UafcFDNk9Ey87zdTjqmL2xZDQwf4pklaGgYO2TLn1E04D9eUMNtgX
KJhwt8qgdh9bug==
-----END CERTIFICATE-----
Generated at Tue May 12 21:26:37 2026 by rpki-client